Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
File: 5DWo9PNqSBGpLRlhc-HEmarMd9U.mft (raw, json)
Hash identifier: oMvpo6aIM4FDJP9hk12mxdt8sIsq6M2h9iKXEQA8VBk=
Subject key identifier: 0A:1D:40:43:CD:27:F6:EE:DE:29:5D:B1:4E:F7:E3:B6:A2:95:0B:B5
Authority key identifier: E4:35:A8:F4:F3:6A:48:11:A9:2D:19:61:73:E1:C4:99:AA:CC:77:D5
Certificate issuer: /CN=e435a8f4f36a4811a92d196173e1c499aacc77d5
Certificate serial: 01A0005CA234399B63DF26E28170B50971C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
Manifest number: 10DD
Signing time: Fri 14 Aug 2026 13:01:05 +0000
Manifest this update: Fri 14 Aug 2026 13:01:05 +0000
Manifest next update: Sat 15 Aug 2026 13:01:05 +0000
Files and hashes: 1: 5DWo9PNqSBGpLRlhc-HEmarMd9U.crl (hash: Z0fxZbKMOE/pAJX7HKVLtzaEOFAuVk9cmOiZlTPk2Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:a2:34:39:9b:63:df:26:e2:81:70:b5:09:71:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e435a8f4f36a4811a92d196173e1c499aacc77d5
Validity
Not Before: Aug 14 13:01:05 2026 GMT
Not After : Aug 15 13:01:05 2026 GMT
Subject: CN=0a1d4043cd27f6eede295db14ef7e3b6a2950bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:87:ad:46:70:5e:d4:be:a4:b7:05:65:45:2f:
c4:da:75:e3:e5:5d:75:7f:f7:5e:cd:2c:1a:4b:71:
1a:a1:27:8d:51:6b:68:ea:eb:c6:89:d5:0d:49:e4:
10:07:e1:31:6d:2c:b8:7f:39:f4:ec:98:c1:44:d8:
72:be:f6:71:c8:ee:38:c8:a4:c4:93:81:da:82:8b:
9e:49:93:7c:86:3a:7d:d4:c4:5f:e3:b4:87:4b:ee:
54:b3:bc:c7:2b:14:e5:1a:1d:fa:6a:68:d2:2d:47:
6a:b7:68:3b:59:6e:28:07:59:1a:da:27:d2:45:b7:
14:18:e9:ae:c0:29:e1:9d:e0:06:97:2d:42:41:8e:
45:16:f4:63:f3:31:cb:b3:d7:35:ea:80:f7:30:8f:
4a:81:0f:4e:6c:6c:d6:28:32:1f:01:c9:63:4f:ac:
fa:c0:a1:99:9b:1a:14:24:68:29:b8:97:1a:b2:c9:
cb:10:c5:9a:8e:85:4c:5e:4d:7c:47:ec:d7:6e:f8:
91:83:9e:2a:60:22:77:7e:e5:8c:56:c7:f9:75:f6:
8b:6d:68:5b:ee:54:14:76:31:02:d6:38:e4:a4:fc:
61:1a:63:24:88:c6:43:6a:a5:8f:70:a0:95:e0:f9:
8f:a1:47:5a:b7:ae:89:5d:fe:c8:36:ac:4e:d0:4c:
e4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1D:40:43:CD:27:F6:EE:DE:29:5D:B1:4E:F7:E3:B6:A2:95:0B:B5
X509v3 Authority Key Identifier:
keyid:E4:35:A8:F4:F3:6A:48:11:A9:2D:19:61:73:E1:C4:99:AA:CC:77:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ba:37:d1:2e:81:ee:71:cd:75:39:87:d1:5b:16:ec:1a:23:
58:14:90:d6:b7:e5:6c:ab:4f:43:e6:d0:40:1e:02:6d:78:4f:
fd:11:c9:d3:ba:40:28:98:aa:ea:32:6f:e7:07:ea:03:92:76:
ed:d4:0d:17:c0:46:25:dc:72:52:46:df:63:13:70:8c:91:0a:
ee:b1:f7:18:4e:38:b0:c7:46:58:0a:08:e1:04:89:7d:42:90:
39:b6:c2:05:41:86:0b:f9:19:93:91:12:a7:ae:3c:a5:1c:fd:
cb:5e:96:08:1c:5e:4e:bd:93:c2:58:5c:ca:d3:8e:3b:1e:2e:
b5:4a:e8:b6:0d:af:dc:64:9f:10:86:69:72:53:59:a0:d2:b2:
4e:cb:c0:10:87:0a:6f:ef:15:28:68:e3:16:65:22:2f:96:fa:
0d:d8:5d:a1:cf:75:a4:47:74:eb:c1:03:b2:57:90:c1:e2:55:
09:0c:c8:2b:52:dc:9f:62:b4:dd:51:79:ee:4d:a3:a6:c7:38:
8f:f2:22:a0:4d:44:91:dd:9c:39:52:67:95:98:66:cf:1e:3d:
27:92:e8:4a:18:d6:fa:2c:29:3b:54:4f:20:27:e1:b2:16:fa:
a6:a3:b9:4d:e3:8c:1d:d4:33:2c:d3:ba:a9:71:53:57:0e:91:
0b:9a:a3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:19 2026 by rpki-client