Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: Qum5iQc8jiS30v90jVmwKQArksPcbxFZrtaRQFAguBQ=
Subject key identifier: 49:35:1B:25:6E:94:85:1D:01:B2:35:B4:C6:11:D3:1B:50:89:E1:A4
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 019FA03B47BB1DECCBCA57F3659C093EAC5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 0A61
Signing time: Sun 26 Jul 2026 21:01:07 +0000
Manifest this update: Sun 26 Jul 2026 21:01:07 +0000
Manifest next update: Mon 27 Jul 2026 21:01:07 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: ncA1xDixKD5GVdhtY0luODy7NgQa/t8/uMnysnpAsao=)
2: _RW7AkIFcGZwUWpXdXNPZGVtxCs.roa (hash: GKML7mrRakcBCL4DEYIwXRDBDIyno5yMH2FlYeHKryU=)
3: z-ipP4PljIhi0s0enY2Fi4e2AtY.roa (hash: h/WDrCIQ8T04if8DUNRgKtWzsh/GN2hFSKu/XltNf1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3b:47:bb:1d:ec:cb:ca:57:f3:65:9c:09:3e:ac:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Jul 26 21:01:07 2026 GMT
Not After : Jul 27 21:01:07 2026 GMT
Subject: CN=49351b256e94851d01b235b4c611d31b5089e1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:25:66:39:97:f3:5a:f4:86:a0:91:e5:89:79:
ce:2b:1f:e5:b8:5c:c3:27:36:29:e3:f8:36:8d:f2:
77:39:44:9d:02:04:e5:31:cf:e4:e0:cc:43:25:8f:
b1:3f:cc:03:7b:d1:81:08:ec:6e:3c:f3:44:2d:24:
14:cb:fd:b9:40:53:9b:68:bb:11:f1:74:70:60:13:
c8:c0:da:f7:49:f8:72:e1:9a:17:26:ae:cc:43:5d:
6a:19:f7:93:70:9a:22:c8:48:c8:35:2e:4d:95:cb:
7c:b9:7b:f5:1c:90:f7:1b:c0:e3:8e:bf:1f:ab:cb:
62:b5:f4:94:8f:d3:81:e2:e3:59:ab:bd:18:f8:b6:
e1:f6:63:bc:84:d6:98:8f:93:36:69:3e:67:0a:4e:
7d:fa:0e:48:19:88:07:83:17:f7:c8:c7:2a:f9:02:
0e:74:7f:08:1e:98:a4:0f:66:2c:b0:a7:35:fe:b2:
1d:2d:7a:45:b6:e4:b8:af:96:01:bf:77:bf:68:61:
16:92:39:8b:d8:83:46:52:9f:3b:f1:d2:b0:67:fb:
9f:a1:ad:c5:4d:1d:29:f3:db:5d:32:ed:82:cc:50:
21:ef:31:41:4b:b1:e4:2e:2d:fd:90:05:73:fe:69:
7f:54:47:30:13:ff:5c:62:e6:9b:91:0d:e8:64:87:
0b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:35:1B:25:6E:94:85:1D:01:B2:35:B4:C6:11:D3:1B:50:89:E1:A4
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:83:b0:38:bf:a0:4d:5b:47:ef:63:67:44:44:2e:aa:1d:dd:
50:ab:11:f9:ab:f4:eb:a6:6b:79:1c:30:df:11:b5:72:29:bd:
4a:1d:17:5d:6d:8a:71:67:10:8d:3b:9d:f4:d3:36:5b:07:d9:
dc:7a:cd:1c:78:36:80:e9:b8:ae:56:a3:2a:48:59:41:ca:e2:
66:da:22:61:b6:8c:2a:7b:30:5c:26:fc:e8:a6:2a:6d:20:e8:
64:f0:72:7c:de:ef:a9:6f:25:11:ba:64:d2:5a:f5:30:4d:10:
9f:61:0d:13:2b:f9:bf:13:fd:4e:d5:ef:8b:df:b4:38:5c:dc:
19:a7:18:09:cb:25:f4:ee:9d:97:5a:03:d9:ac:fc:ce:44:2f:
a4:39:c9:a8:a7:76:c8:3e:55:f0:79:fb:27:cd:0c:aa:5a:4b:
57:55:09:a3:b5:00:8e:f8:90:7f:0d:9a:32:e7:dc:f9:04:d4:
e4:a2:c5:16:8d:72:4e:ea:08:d8:69:6f:78:7a:7c:af:8a:d6:
2c:0f:b0:0e:09:ee:c1:81:52:27:48:23:a9:db:97:66:ba:b2:
a0:1a:01:cc:6d:38:46:4a:2b:b8:c6:22:89:91:89:e0:1d:8c:
67:76:62:97:18:18:3b:ea:13:01:95:92:63:cb:f6:3c:97:09:
e8:a6:27:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gO0e7HezLylfzZZwJPqxfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0M2JhYWZjNjRiMzNlNDNkYjc4ZGM3YWVkNjA1ZWY3MDQw
NmQ5YWYwHhcNMjYwNzI2MjEwMTA3WhcNMjYwNzI3MjEwMTA3WjAzMTEwLwYDVQQD
Eyg0OTM1MWIyNTZlOTQ4NTFkMDFiMjM1YjRjNjExZDMxYjUwODllMWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSVmOZfzWvSGoJHliXnOKx/luFzD
JzYp4/g2jfJ3OUSdAgTlMc/k4MxDJY+xP8wDe9GBCOxuPPNELSQUy/25QFObaLsR
8XRwYBPIwNr3Sfhy4ZoXJq7MQ11qGfeTcJoiyEjINS5Nlct8uXv1HJD3G8Djjr8f
q8titfSUj9OB4uNZq70Y+Lbh9mO8hNaYj5M2aT5nCk59+g5IGYgHgxf3yMcq+QIO
dH8IHpikD2YssKc1/rIdLXpFtuS4r5YBv3e/aGEWkjmL2INGUp878dKwZ/ufoa3F
TR0p89tdMu2CzFAh7zFBS7HkLi39kAVz/ml/VEcwE/9cYuabkQ3oZIcLGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEk1GyVulIUdAbI1tMYR0xtQieGkMB8GA1UdIwQY
MBaAFOQ7qvxksz5D23jceu1gXvcEBtmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTIt
ZTY4MTJkYWI2OTk5LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTItZTY4MTJkYWI2OTk5
LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIOwOL+g
TVtH72NnREQuqh3dUKsR+av066ZreRww3xG1cim9Sh0XXW2KcWcQjTud9NM2WwfZ
3HrNHHg2gOm4rlajKkhZQcriZtoiYbaMKnswXCb86KYqbSDoZPByfN7vqW8lEbpk
0lr1ME0Qn2ENEyv5vxP9TtXvi9+0OFzcGacYCcsl9O6dl1oD2az8zkQvpDnJqKd2
yD5V8Hn7J80MqlpLV1UJo7UAjviQfw2aMufc+QTU5KLFFo1yTuoI2GlveHp8r4rW
LA+wDgnuwYFSJ0gjqduXZrqyoBoBzG04RkoruMYiiZGJ4B2MZ3ZilxgYO+oTAZWS
Y8v2PJcJ6KYnyA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:16 2026 by rpki-client