Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: Qt2l+gawv/6h6NTbbMoo81Z9Y9PmRYk+n7XtDwGsFA4=
Subject key identifier: 1F:49:79:DA:8C:5D:8B:D9:3A:73:CD:19:AE:1B:F6:D7:95:DC:85:A1
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 01A08BD69F46CD15E912FB9089D457A0169F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 0ADB
Signing time: Thu 10 Sep 2026 15:01:33 +0000
Manifest this update: Thu 10 Sep 2026 15:01:33 +0000
Manifest next update: Fri 11 Sep 2026 15:01:33 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: z/NWbWjV6/R9HSylyj/9aS6gxB/xbIp46/tsfKCLZ2Q=)
2: _RW7AkIFcGZwUWpXdXNPZGVtxCs.roa (hash: GKML7mrRakcBCL4DEYIwXRDBDIyno5yMH2FlYeHKryU=)
3: z-ipP4PljIhi0s0enY2Fi4e2AtY.roa (hash: h/WDrCIQ8T04if8DUNRgKtWzsh/GN2hFSKu/XltNf1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:9f:46:cd:15:e9:12:fb:90:89:d4:57:a0:16:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Sep 10 15:01:33 2026 GMT
Not After : Sep 11 15:01:33 2026 GMT
Subject: CN=1f4979da8c5d8bd93a73cd19ae1bf6d795dc85a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:12:e9:a0:7b:ef:85:23:c4:23:01:32:ba:
18:a9:27:2e:ea:3e:fd:04:4d:d3:8e:cc:48:be:22:
79:54:16:5c:d5:4c:eb:bf:a1:b1:14:7d:87:3a:d0:
6c:09:e7:0e:f2:cd:d3:ab:8d:cb:ce:90:4a:79:61:
f2:9f:85:9f:a7:8f:dc:cb:a1:ca:fe:e1:3a:d4:bf:
e7:ef:48:c3:81:dd:db:7b:44:19:50:f1:2c:26:ab:
0d:48:da:7b:0d:06:57:54:d6:74:9b:b1:0a:1e:eb:
60:c2:57:9f:0d:21:90:1c:0a:d8:6e:91:c0:90:30:
7b:d6:da:1b:2e:73:35:85:f3:c8:15:b3:3e:2a:a1:
69:55:20:f4:7f:1d:04:1e:a1:2b:3b:6d:74:ed:8e:
c8:c5:2c:59:d5:c7:39:5c:90:0f:48:6f:25:54:b9:
2d:0a:22:6d:2a:0d:89:04:50:40:8f:d8:f7:ae:df:
f5:bd:d3:e3:db:e7:90:4c:b4:69:c2:cd:c3:21:2d:
9f:68:38:84:d4:bf:16:c6:15:76:3e:9e:ab:a8:71:
d7:d2:4e:c0:36:9a:4f:82:47:d1:ee:22:69:58:5a:
bd:35:1f:ed:0a:24:09:54:6e:b5:06:cb:35:0a:a3:
ab:cf:71:d4:11:d1:c0:47:cb:be:7e:e7:41:c4:1e:
02:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:49:79:DA:8C:5D:8B:D9:3A:73:CD:19:AE:1B:F6:D7:95:DC:85:A1
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:02:69:93:b4:a0:dc:4e:f0:ee:d1:8f:e7:6e:84:52:d9:76:
86:18:29:a3:e0:0e:d4:dc:4c:f9:db:63:c9:c2:e6:64:0f:ce:
c6:1e:b0:ee:6e:0f:c4:21:77:43:6b:f4:ec:af:83:90:7b:19:
cb:92:da:29:c8:83:7c:35:a7:aa:b2:8a:1e:4e:f7:76:a5:b5:
fa:7d:a9:65:aa:75:14:a1:45:14:e9:0c:09:07:4a:b6:c7:42:
5c:71:96:a1:d9:c1:ad:2e:fb:7e:0e:20:5c:e8:1d:d1:53:4a:
63:0a:52:8a:16:10:56:24:0a:50:b5:5b:2d:d2:53:59:27:c3:
7d:25:d2:60:ae:dd:73:56:ce:3d:ac:41:4d:6c:24:6a:d5:4d:
bd:be:98:dc:50:95:29:d7:5d:df:95:f8:80:de:a2:fc:33:a8:
1c:4f:91:83:90:36:77:e3:ec:52:95:f0:0d:33:ba:36:27:3f:
6f:b4:33:eb:55:34:19:e7:55:56:b4:01:be:2b:f7:23:82:c5:
cd:57:03:b9:b0:3e:31:1d:00:6e:3b:0b:5c:8e:88:1d:0f:4e:
d7:61:ef:25:41:5b:9a:57:b7:ee:1b:8d:4c:06:1d:26:b8:12:
5c:55:b1:1e:0a:8f:d5:3f:27:17:6d:cc:f5:72:31:82:22:f0:
e9:9e:bc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:15:05 2026 by rpki-client