Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: +KPyolBBgi0puTKR9pm7JoioIsyuC8O9PP9VT40+z4A=
Subject key identifier: E7:DE:0B:1F:8A:5F:11:CE:1B:A6:5C:DA:69:13:C1:96:C7:8B:D6:B3
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 019DCCE2246B00A7C8372A9969A129FC8842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 096F
Signing time: Mon 27 Apr 2026 03:01:05 +0000
Manifest this update: Mon 27 Apr 2026 03:01:05 +0000
Manifest next update: Tue 28 Apr 2026 03:01:05 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: AVKZw1UVgVfHjnUA+zaIRcAyFp/j+NhbQgLYd3SR20o=)
2: _RW7AkIFcGZwUWpXdXNPZGVtxCs.roa (hash: GKML7mrRakcBCL4DEYIwXRDBDIyno5yMH2FlYeHKryU=)
3: z-ipP4PljIhi0s0enY2Fi4e2AtY.roa (hash: h/WDrCIQ8T04if8DUNRgKtWzsh/GN2hFSKu/XltNf1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:e2:24:6b:00:a7:c8:37:2a:99:69:a1:29:fc:88:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Apr 27 03:01:05 2026 GMT
Not After : Apr 28 03:01:05 2026 GMT
Subject: CN=e7de0b1f8a5f11ce1ba65cda6913c196c78bd6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:e4:b1:d9:98:84:7a:81:19:77:3d:d6:11:
77:70:4a:b2:9a:9d:43:7a:ec:19:45:7e:68:40:4c:
56:96:09:c7:46:ce:67:2d:ea:22:8e:3c:6c:69:ae:
17:1d:31:0c:e3:80:1a:58:e4:fc:7a:d2:0c:28:cc:
7f:15:17:30:4e:4e:65:97:6e:a4:0f:33:3f:75:63:
35:64:0e:3c:a9:a2:38:5d:bb:0d:16:f2:c8:9a:b5:
77:40:45:f7:85:9b:2b:2b:5b:41:c9:25:c0:51:05:
7c:fa:45:38:6a:81:3a:cf:10:e0:cb:fd:e5:e5:6b:
e8:61:c9:e3:60:47:1c:84:d3:ed:e4:a7:4d:06:02:
00:ec:cf:a0:86:bd:e0:78:c2:22:10:c1:98:44:44:
bd:0a:42:a9:6f:a6:60:a9:fc:a1:17:b8:22:27:61:
94:ca:9b:3e:f1:41:e8:1d:99:93:e6:0a:c3:88:97:
23:bf:fd:b0:c3:5e:30:8a:5d:00:85:3f:72:ec:52:
05:21:5a:2e:cb:ae:a8:dc:18:0e:b4:cd:6f:07:be:
36:36:91:d3:64:0c:07:37:2a:15:72:4b:3e:de:da:
c9:61:b0:0a:c0:d9:31:b8:8e:80:3e:08:28:ac:e2:
88:d8:5c:2c:e6:96:fb:8f:2c:2a:0b:b7:55:fe:97:
0e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DE:0B:1F:8A:5F:11:CE:1B:A6:5C:DA:69:13:C1:96:C7:8B:D6:B3
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2a:e2:49:63:fa:92:d1:72:f5:97:b6:2c:b1:05:71:90:30:
ab:3f:70:df:ff:86:c6:42:28:db:3d:fd:84:4c:83:b8:21:84:
54:b5:5a:63:be:78:e2:5a:b3:a0:61:e0:b0:28:ef:7b:10:08:
5e:bc:34:98:40:93:e0:b9:89:2a:01:b2:74:1e:41:2b:a9:0a:
9c:ed:c4:62:de:57:eb:2f:93:a0:24:b4:74:15:23:28:f4:7c:
0f:d9:c5:64:f2:f7:3b:05:ab:62:3d:61:1f:a2:47:9e:27:fb:
a5:fb:f9:49:dc:b3:69:e4:00:df:e0:f5:ff:d1:dc:8d:c5:34:
6c:68:5f:6e:9c:0e:2b:73:89:00:13:92:3d:27:44:31:2b:c8:
c1:7e:74:c7:1a:e8:e7:89:fe:d4:90:39:c8:e4:f5:fb:41:c2:
75:17:65:ff:79:76:89:3a:66:7c:65:8e:70:4c:20:f7:9f:ef:
8f:53:dc:cf:23:12:62:43:98:35:2f:47:5f:3a:51:57:34:e8:
5c:fc:7a:2e:4f:93:92:98:03:0f:50:95:02:ac:2c:36:c3:b6:
3b:ea:6d:61:3e:ac:24:33:c7:2c:ec:6d:18:0c:4d:3e:c2:5d:
6c:3d:ce:1e:66:ba:12:1e:59:9b:55:81:4b:03:4e:e6:6a:02:
b7:94:55:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3M4iRrAKfINyqZaaEp/IhCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0M2JhYWZjNjRiMzNlNDNkYjc4ZGM3YWVkNjA1ZWY3MDQw
NmQ5YWYwHhcNMjYwNDI3MDMwMTA1WhcNMjYwNDI4MDMwMTA1WjAzMTEwLwYDVQQD
EyhlN2RlMGIxZjhhNWYxMWNlMWJhNjVjZGE2OTEzYzE5NmM3OGJkNmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlrksdmYhHqBGXc91hF3cEqymp1D
euwZRX5oQExWlgnHRs5nLeoijjxsaa4XHTEM44AaWOT8etIMKMx/FRcwTk5ll26k
DzM/dWM1ZA48qaI4XbsNFvLImrV3QEX3hZsrK1tBySXAUQV8+kU4aoE6zxDgy/3l
5WvoYcnjYEcchNPt5KdNBgIA7M+ghr3geMIiEMGYRES9CkKpb6ZgqfyhF7giJ2GU
yps+8UHoHZmT5grDiJcjv/2ww14wil0AhT9y7FIFIVouy66o3BgOtM1vB742NpHT
ZAwHNyoVcks+3trJYbAKwNkxuI6APggorOKI2Fws5pb7jywqC7dV/pcOMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfeCx+KXxHOG6Zc2mkTwZbHi9azMB8GA1UdIwQY
MBaAFOQ7qvxksz5D23jceu1gXvcEBtmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTIt
ZTY4MTJkYWI2OTk5LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTItZTY4MTJkYWI2OTk5
LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSriSWP6
ktFy9Ze2LLEFcZAwqz9w3/+GxkIo2z39hEyDuCGEVLVaY7544lqzoGHgsCjvexAI
Xrw0mECT4LmJKgGydB5BK6kKnO3EYt5X6y+ToCS0dBUjKPR8D9nFZPL3OwWrYj1h
H6JHnif7pfv5SdyzaeQA3+D1/9HcjcU0bGhfbpwOK3OJABOSPSdEMSvIwX50xxro
54n+1JA5yOT1+0HCdRdl/3l2iTpmfGWOcEwg95/vj1PczyMSYkOYNS9HXzpRVzTo
XPx6Lk+TkpgDD1CVAqwsNsO2O+ptYT6sJDPHLOxtGAxNPsJdbD3OHma6Eh5Zm1WB
SwNO5moCt5RVmQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:18:12 2026 by rpki-client