Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
File: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft (raw, json)
Hash identifier: FVBj9G3G7aggZYbtbjnaW9t7ZdLng/XbT+G0hphTNlU=
Subject key identifier: 5F:69:13:60:88:70:0E:EE:F1:17:06:76:F4:20:E4:F0:F6:82:0A:DF
Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
Certificate issuer: /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Certificate serial: 019E30732272CCF2BC01F7274DD35A5DAB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
Manifest number: 17EE
Signing time: Sat 16 May 2026 11:01:52 +0000
Manifest this update: Sat 16 May 2026 11:01:52 +0000
Manifest next update: Sun 17 May 2026 11:01:52 +0000
Files and hashes: 1: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl (hash: 3AFa3zVQO2qN5TVQK6aD3JUQRrxQdqhFl/I6FfTGGCA=)
2: gM2StpLZVmvayJcUvILE4XZXuLw.roa (hash: KQMOAlvZrGCc1yTty62TEDax5SGCNvxrkbvizSS1atc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:73:22:72:cc:f2:bc:01:f7:27:4d:d3:5a:5d:ab:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Validity
Not Before: May 16 11:01:52 2026 GMT
Not After : May 17 11:01:52 2026 GMT
Subject: CN=5f69136088700eeef1170676f420e4f0f6820adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:aa:26:52:6a:5f:bf:80:72:8d:d6:5b:fd:
39:48:a7:9f:12:8d:32:61:ed:ec:39:72:9e:7d:a1:
6e:fe:9a:46:dd:3c:75:6e:52:94:0a:af:4a:93:60:
f5:ba:53:98:30:93:a5:f4:da:2d:39:70:45:f0:9a:
50:2b:5c:6f:b8:85:a7:fd:db:02:4e:32:78:a4:ea:
2c:7f:d8:0f:bf:b4:35:8f:43:6d:24:1c:13:c4:68:
8f:5f:26:2e:82:ec:2c:06:71:ea:c3:16:f4:3a:34:
54:1f:d7:a4:ed:1b:74:19:6a:a7:a5:d8:7d:e2:ff:
4b:e9:cd:51:64:d4:6c:39:a6:eb:32:fc:6f:a5:f1:
5c:7c:c0:56:8a:f1:32:95:d4:5b:ca:e0:14:c2:0c:
20:65:b2:98:cd:93:86:a0:e3:b4:91:f9:97:bc:d5:
3a:a2:20:52:85:ce:6c:ea:34:0c:58:e1:f0:5f:59:
56:06:45:ef:16:ad:fa:3d:e4:22:7c:37:61:59:69:
52:c9:6d:6e:c2:32:b3:30:7a:73:59:45:85:09:fb:
65:12:cb:bc:da:4f:6b:b3:20:15:b8:92:b8:27:77:
17:b8:04:2f:89:6b:f1:c0:44:24:49:60:6e:f0:7b:
68:b7:7f:bf:7e:56:d8:11:b5:67:21:b9:06:69:72:
b5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:69:13:60:88:70:0E:EE:F1:17:06:76:F4:20:E4:F0:F6:82:0A:DF
X509v3 Authority Key Identifier:
keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:49:df:d4:1e:b8:54:c2:50:62:a7:b1:d7:35:cb:2e:d5:b5:
a3:67:19:26:6e:d9:07:a2:4b:d3:4f:b1:86:0b:18:4b:5d:5a:
73:92:a6:21:11:c4:78:70:b5:f0:fc:ee:3f:3e:ed:25:f4:b2:
ba:81:cc:86:12:26:1f:98:f3:df:4e:27:9f:7f:1a:f6:7e:fa:
7c:90:ee:42:c5:65:51:3b:98:bd:8e:fd:c0:9a:39:a4:54:f8:
de:52:75:4b:fc:96:3c:03:98:67:97:ac:f8:05:67:9d:8d:da:
16:5e:e2:5b:fc:9d:b4:ab:72:bb:a5:a4:2d:1d:62:9e:50:af:
ca:16:e1:e5:a4:e4:5f:d4:22:8a:80:f5:f5:64:c0:1b:07:1d:
4e:06:16:92:61:42:eb:1d:d1:78:60:7d:8c:0e:b1:cc:c8:d6:
7f:51:2b:b6:1d:72:9c:07:e5:89:c0:a0:35:0d:28:5e:0c:6a:
ba:2f:a3:2b:e1:79:94:d5:50:a2:6b:9a:2e:c9:de:94:26:64:
e9:57:34:06:bd:db:65:3e:5d:d0:d9:00:84:13:27:0d:37:46:
55:d3:60:12:6b:11:f5:4e:93:6a:0f:e0:eb:86:43:ea:21:13:
eb:4a:9d:d0:0a:a9:2d:3f:ae:83:c6:98:00:c7:50:e3:af:3b:
c4:d6:a3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:51 2026 by rpki-client