Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: Qly1JpV9wSssLpdh2oUfZJylBhHltiKKLlTR9hklid4=
Subject key identifier: EB:BF:F8:61:FD:F7:A2:59:CD:5D:B4:7B:2E:D8:D6:53:FE:4A:89:21
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 019EB68E718E5224C40B82836DA8890D1E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 09E8
Signing time: Thu 11 Jun 2026 12:00:48 +0000
Manifest this update: Thu 11 Jun 2026 12:00:48 +0000
Manifest next update: Fri 12 Jun 2026 12:00:48 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: 8BStguMxcS18aOepEnEcXwaZ4XkLg3xB5rON/RFVlIE=)
2: _RW7AkIFcGZwUWpXdXNPZGVtxCs.roa (hash: GKML7mrRakcBCL4DEYIwXRDBDIyno5yMH2FlYeHKryU=)
3: z-ipP4PljIhi0s0enY2Fi4e2AtY.roa (hash: h/WDrCIQ8T04if8DUNRgKtWzsh/GN2hFSKu/XltNf1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:8e:71:8e:52:24:c4:0b:82:83:6d:a8:89:0d:1e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Jun 11 12:00:48 2026 GMT
Not After : Jun 12 12:00:48 2026 GMT
Subject: CN=ebbff861fdf7a259cd5db47b2ed8d653fe4a8921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:55:22:de:e7:85:6b:b7:ad:3d:75:c9:c7:
0a:59:7d:bd:e2:cf:ac:80:7b:4a:5e:87:92:89:eb:
cf:39:7c:46:c0:a3:c2:68:ee:ca:50:3a:fe:ee:af:
00:e6:18:7b:ce:d6:aa:0c:ff:85:2a:b9:bc:21:fc:
b4:74:65:48:44:2e:32:a2:34:db:b5:fd:20:8a:f3:
fe:df:c5:69:25:17:17:89:74:47:23:d2:da:d1:56:
f8:dd:8e:eb:94:b1:09:e8:0a:75:73:4f:29:91:96:
eb:0d:cc:89:fb:35:2e:47:9f:9f:6e:50:a9:2b:20:
29:da:9e:35:46:a3:c6:60:0c:aa:a1:82:58:40:0b:
ab:0a:e9:2c:ed:b7:c6:70:4d:4a:ba:6d:5b:8a:ef:
db:b3:c0:36:31:cd:82:72:0f:0f:fa:5f:f8:04:1b:
b8:88:a3:05:20:73:b8:b9:ac:0e:03:74:35:f8:60:
6a:86:42:f7:f7:d0:ce:f7:67:e9:25:b9:10:7f:0a:
ee:fe:7d:2a:60:60:dc:f6:86:7a:3f:ec:a1:4e:7c:
ec:ab:17:07:89:a9:ef:93:55:b6:3d:87:0c:54:40:
fe:46:d1:28:68:36:19:80:13:e9:d5:a1:3d:6e:75:
23:bf:9c:65:a7:20:15:c6:90:3d:96:59:ee:31:21:
10:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BF:F8:61:FD:F7:A2:59:CD:5D:B4:7B:2E:D8:D6:53:FE:4A:89:21
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:70:b4:50:72:6d:d2:ae:5f:c1:f6:0b:24:3b:20:6d:90:f6:
dd:02:00:22:f7:51:36:9c:b4:cf:3b:95:60:86:f7:f1:31:10:
f4:59:a4:73:dd:8e:a1:d7:1a:28:bb:21:07:42:0f:25:c7:dd:
7c:87:81:3b:90:4b:e5:e8:e6:13:ba:78:e3:8d:bc:d7:fc:f4:
95:0a:e0:c3:57:16:db:8a:0f:ce:97:86:2b:99:d7:be:51:95:
75:9c:0a:5f:83:d8:2b:f9:16:b2:fd:08:27:e7:3a:a2:04:e4:
2f:0d:0a:18:3c:7a:f4:95:27:ca:32:75:c8:9a:6e:b6:cd:31:
2f:89:54:57:24:30:3b:88:e8:a2:5e:c4:fc:c8:00:9c:fe:d6:
a9:91:21:c2:fa:c1:dc:0d:40:4c:e8:77:19:23:e6:cb:24:32:
ae:04:90:05:69:7f:49:7d:02:89:7c:c3:47:ff:e2:53:79:c6:
7d:78:c7:76:8d:61:56:34:38:36:4a:dd:07:db:00:98:f9:44:
7f:86:4f:62:e2:48:27:76:df:26:e3:6a:46:b6:e5:5e:b7:ec:
dc:4b:0e:33:3d:7a:67:db:b7:dd:77:bc:0f:83:f3:71:bd:b7:
83:0b:70:b3:6e:65:38:bb:5a:f7:5d:92:5c:97:15:21:60:03:
ff:4e:0f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:22:45 2026 by rpki-client