Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: 079VanFQ0vVlm3ZLW3Msmv8IaGaHry7XTeKw8ZnkHwA=
Subject key identifier: 75:EB:69:C2:49:E3:CD:3D:88:E3:0A:9C:F8:90:78:DA:3A:BB:E1:2E
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 019CE52401DBDAAFB033CD69BA418E164E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 08F7
Signing time: Fri 13 Mar 2026 03:01:07 +0000
Manifest this update: Fri 13 Mar 2026 03:01:07 +0000
Manifest next update: Sat 14 Mar 2026 03:01:07 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: 4HQ1dHxG6/N8zOM/KIR4ZM6m2y9rGAOZed7RktO9YSE=)
2: _RW7AkIFcGZwUWpXdXNPZGVtxCs.roa (hash: GKML7mrRakcBCL4DEYIwXRDBDIyno5yMH2FlYeHKryU=)
3: z-ipP4PljIhi0s0enY2Fi4e2AtY.roa (hash: h/WDrCIQ8T04if8DUNRgKtWzsh/GN2hFSKu/XltNf1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:24:01:db:da:af:b0:33:cd:69:ba:41:8e:16:4e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Mar 13 03:01:07 2026 GMT
Not After : Mar 14 03:01:07 2026 GMT
Subject: CN=75eb69c249e3cd3d88e30a9cf89078da3abbe12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:07:ce:30:42:69:37:ff:75:b9:38:93:d4:
bf:ce:59:8d:c8:3f:88:cc:56:e6:07:82:98:1c:d4:
58:95:8a:08:00:bd:1d:5f:e8:4b:b5:81:60:e1:13:
bb:f3:6e:4b:f9:06:9d:6d:e9:c1:69:c2:45:a9:3c:
45:c6:2e:b9:75:c0:ea:be:37:60:df:42:b8:a3:cd:
88:d3:9f:15:84:e0:db:55:e8:b4:86:15:b3:b2:44:
74:cd:88:73:9c:39:5a:86:ad:d0:1a:08:4b:2c:5d:
6b:1a:22:c4:02:5a:50:87:da:8b:0f:64:09:ac:ed:
73:01:cd:af:d5:ec:14:8e:88:82:41:8d:e0:bb:a0:
1e:81:4b:2e:0a:25:f8:e3:d1:ee:1d:f2:08:78:26:
0f:58:1c:47:cc:21:76:fb:ee:9a:ac:31:a5:7f:3b:
a7:46:ea:8a:0e:30:bc:39:1f:20:94:78:7b:b2:8b:
e4:bf:5a:f8:61:18:3e:53:b8:95:06:22:b5:a4:1a:
cc:6a:4e:a1:b7:5c:a0:e0:a8:75:71:4a:65:dc:f4:
d0:ed:c4:c3:f0:f6:5d:3d:f0:bd:70:ef:82:7f:1b:
ff:57:4f:02:38:7d:01:a2:dd:26:28:ec:34:20:eb:
e8:8b:db:1d:06:92:79:08:37:88:57:6e:4d:9d:24:
86:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EB:69:C2:49:E3:CD:3D:88:E3:0A:9C:F8:90:78:DA:3A:BB:E1:2E
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6f:81:4f:a3:30:4b:8b:63:96:06:41:5d:c3:57:d9:3c:de:
ae:66:ce:9f:8e:61:bd:8b:92:ea:c2:8d:b2:02:7c:82:f3:79:
fa:b6:64:1b:76:92:07:22:35:34:69:b3:8e:1a:a6:76:a6:09:
a4:c4:fa:49:4e:54:ad:a0:b9:ba:99:a1:02:0b:dd:07:42:f1:
c0:f4:8b:ca:92:9d:77:31:2c:78:1c:80:72:62:be:4e:de:d2:
1a:21:b7:f2:a1:15:9b:b5:ea:1e:a8:59:ad:b6:af:91:19:96:
7b:b4:56:49:ac:03:28:bd:8e:6c:93:8b:45:e8:1e:bc:46:f1:
5a:17:65:c1:6b:33:0e:46:fd:33:08:78:00:f3:d2:96:d9:93:
16:04:0d:58:17:6e:8d:a1:a3:da:12:42:64:83:dd:ac:72:23:
45:65:89:fa:54:1e:c9:8a:96:14:01:c4:15:f1:de:54:a5:6f:
97:32:b2:d4:af:55:47:7c:1a:5c:12:02:6e:89:1e:ad:cf:2d:
6a:3b:f0:e1:1f:dc:55:fc:1e:bf:d0:32:fe:0a:12:da:a8:b1:
33:3f:39:fc:ec:10:4b:14:29:10:75:5a:2a:19:67:f8:d0:c0:
d2:c3:84:c5:f5:da:4c:3c:79:cf:7c:de:96:01:76:9c:5b:03:
d3:53:78:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:00:03 2026 by rpki-client