Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: YlhlVmFl86SespR3UfdseHYuy+hgd4rw1Bxxu/1SCK8=
Subject key identifier: 80:68:37:86:7A:F9:CD:41:B4:0C:F8:C1:41:ED:8D:C1:9E:9B:9A:7D
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 01A17770B83BDF4F99EEF8319406E4E487EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 0B55
Signing time: Mon 26 Oct 2026 09:00:38 +0000
Manifest this update: Mon 26 Oct 2026 09:00:38 +0000
Manifest next update: Tue 27 Oct 2026 09:00:38 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: Ng+di4gtUSsRi2rauS6kWU9UoMcBWpPZbWee8xwW15Q=)
2: _RW7AkIFcGZwUWpXdXNPZGVtxCs.roa (hash: GKML7mrRakcBCL4DEYIwXRDBDIyno5yMH2FlYeHKryU=)
3: z-ipP4PljIhi0s0enY2Fi4e2AtY.roa (hash: h/WDrCIQ8T04if8DUNRgKtWzsh/GN2hFSKu/XltNf1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:70:b8:3b:df:4f:99:ee:f8:31:94:06:e4:e4:87:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Oct 26 09:00:38 2026 GMT
Not After : Oct 27 09:00:38 2026 GMT
Subject: CN=806837867af9cd41b40cf8c141ed8dc19e9b9a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:98:00:d2:bb:01:90:e0:2c:8e:95:53:39:8d:
57:b0:40:2f:9e:0a:a8:8d:af:9c:87:ca:3e:7f:a2:
4e:01:18:bc:c8:58:e8:fc:c6:30:44:74:23:bb:3a:
95:f6:ae:95:1f:ec:ed:5b:38:eb:6f:a8:5a:fa:22:
45:7d:eb:0e:be:46:36:2e:31:fb:37:4f:20:30:d4:
0a:37:a6:b7:6c:b2:82:a1:96:c6:8a:11:ab:8a:59:
56:ad:fc:d4:11:a9:ca:d0:e3:ef:07:7b:bc:6c:0d:
b7:52:e4:e6:18:f7:5e:64:20:ab:10:25:3b:fd:58:
2f:fe:a1:66:f4:05:f1:e1:34:25:64:75:86:aa:d4:
33:c4:ed:09:69:1c:a1:58:a3:1a:3f:b7:ec:73:f9:
3d:16:51:38:bb:35:17:70:d3:fd:32:cc:d3:a3:12:
0c:78:a5:93:d2:d5:f6:6f:da:a2:fa:fe:dd:fd:e9:
3a:9b:c7:5d:3b:18:3b:29:b6:c1:77:e2:69:65:f4:
1c:60:57:6a:2a:a1:65:f9:14:91:de:6e:5d:9d:f2:
93:2c:95:35:1f:d5:6a:a8:76:19:d1:0b:7e:8d:78:
35:d2:39:93:78:f5:1c:d8:e2:23:3b:cd:69:3f:90:
ed:25:7e:84:b3:54:ea:29:b2:e8:cb:db:0b:24:6a:
27:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:68:37:86:7A:F9:CD:41:B4:0C:F8:C1:41:ED:8D:C1:9E:9B:9A:7D
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c4:60:56:bd:72:57:ec:ae:df:34:85:1b:03:68:e5:81:9b:
57:da:9d:54:d4:6b:68:0f:3d:27:16:12:b2:2b:8d:65:fc:17:
f6:ab:1b:ae:e6:b6:34:3e:0f:b1:5d:7a:54:2b:be:b4:e7:01:
97:87:cf:6d:40:ea:58:c1:55:72:e9:34:e7:61:08:97:2e:aa:
73:8c:7e:f6:aa:26:53:f1:4a:8d:14:f2:7b:dd:a3:d4:5c:da:
4e:05:77:51:90:e5:4e:d1:29:f8:75:b0:18:bf:ad:3a:2c:04:
ce:39:6e:75:26:44:8f:16:b8:2e:17:fb:e7:15:a2:80:53:15:
59:8a:f2:63:62:ea:d7:50:76:6b:34:bc:88:0e:12:0d:0c:c4:
76:e7:ee:4e:d4:30:1f:9a:cf:0a:57:0d:16:b8:f5:d9:f7:37:
ae:7f:f5:d1:99:57:78:e8:04:08:6d:1f:3c:65:8a:53:53:41:
69:1d:ef:e7:82:80:9e:2a:00:e3:7e:db:03:4b:50:ac:dd:02:
85:b0:f0:96:f8:82:eb:4d:52:47:52:ac:50:5c:b7:dd:9c:49:
b1:98:cf:8b:6f:a9:b3:9e:6b:84:04:66:69:9c:f7:74:c3:12:
f8:bb:59:5f:29:03:bb:90:8d:83:06:c4:87:c0:26:46:d5:45:
b5:6a:b6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:03:22 2026 by rpki-client