Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
File: 5DWo9PNqSBGpLRlhc-HEmarMd9U.mft (raw, json)
Hash identifier: HXRjVA2TKe+2UXWd0M/1GCoGvQXZRsIldErVnh/cK+c=
Subject key identifier: A2:AB:77:41:BD:8F:C7:3D:70:BF:06:EA:52:8B:91:DE:71:F5:1A:0B
Authority key identifier: E4:35:A8:F4:F3:6A:48:11:A9:2D:19:61:73:E1:C4:99:AA:CC:77:D5
Certificate issuer: /CN=e435a8f4f36a4811a92d196173e1c499aacc77d5
Certificate serial: 01A13D13BF93D60CBDC394FAFD2C7CC72A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
Manifest number: 1181
Signing time: Thu 15 Oct 2026 01:01:06 +0000
Manifest this update: Thu 15 Oct 2026 01:01:06 +0000
Manifest next update: Fri 16 Oct 2026 01:01:06 +0000
Files and hashes: 1: 5DWo9PNqSBGpLRlhc-HEmarMd9U.crl (hash: 1UqGyulerQPs5/jg2iycrjTWpdgnlbXlWVTAUx0Kbjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 01:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:bf:93:d6:0c:bd:c3:94:fa:fd:2c:7c:c7:2a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e435a8f4f36a4811a92d196173e1c499aacc77d5
Validity
Not Before: Oct 15 01:01:06 2026 GMT
Not After : Oct 16 01:01:06 2026 GMT
Subject: CN=a2ab7741bd8fc73d70bf06ea528b91de71f51a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b3:43:1a:45:12:35:2a:20:f8:32:24:a7:9e:
59:c1:2b:a0:96:e4:37:2c:68:a5:aa:ac:4c:7f:79:
8f:68:61:3d:e5:33:99:53:0e:79:76:2d:5d:54:7b:
e2:11:e8:a7:f4:06:9b:3e:ed:60:df:f9:a6:de:f8:
c5:98:e1:ae:b7:5c:a0:6c:fc:e9:77:54:01:41:2d:
6c:28:c2:59:7e:34:2e:c4:28:f7:78:cb:37:3b:50:
12:25:0c:bb:e3:e0:2c:e5:bf:94:ff:71:bb:4c:99:
eb:e9:ef:9f:5e:2c:42:3f:e7:f4:3b:b8:7e:0e:a2:
5d:c5:23:b3:d9:b7:18:9f:ae:df:2d:4a:b6:c2:9c:
49:05:e7:1d:0f:fc:f1:b0:d1:57:ca:54:b5:2d:e1:
d0:1a:f7:d2:37:9a:fa:02:62:66:4d:e2:98:d2:61:
df:97:e0:9d:c5:7e:a1:4e:7f:5d:62:d1:71:dd:0e:
75:05:c2:a5:d5:4d:87:80:f6:75:5c:ef:ca:fa:81:
1e:39:0e:8f:ea:62:e6:4c:37:b6:d6:94:45:9d:d0:
01:ec:9b:29:58:1e:ff:7c:0e:fe:45:8a:ba:00:e4:
29:92:47:d4:21:aa:6b:25:9f:74:b5:43:f0:eb:eb:
22:6e:6d:f9:78:c5:b6:bb:ad:a8:c8:31:b7:78:56:
66:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AB:77:41:BD:8F:C7:3D:70:BF:06:EA:52:8B:91:DE:71:F5:1A:0B
X509v3 Authority Key Identifier:
keyid:E4:35:A8:F4:F3:6A:48:11:A9:2D:19:61:73:E1:C4:99:AA:CC:77:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:9d:56:ba:3a:0c:a8:43:85:2d:37:cb:58:df:7b:c2:7b:49:
32:45:a8:02:5d:23:96:13:95:9b:d3:76:0b:a7:bd:6a:19:e0:
94:be:53:86:19:c4:ed:c4:1d:1e:31:51:29:3b:5c:6f:c5:88:
e2:dd:95:50:5d:8d:54:b5:bf:fd:37:56:f5:cd:98:da:05:3d:
a7:f3:8a:84:2d:53:f6:4c:32:84:a2:3c:a7:02:a7:7e:f1:af:
2d:0f:15:3a:7a:8a:8d:09:4b:43:69:20:dd:c4:6d:58:1d:74:
8a:56:49:7e:a5:f9:a5:76:75:89:1e:ce:60:3a:bd:0e:82:12:
e0:e1:c5:4f:40:9f:e1:c4:2b:aa:e3:bb:0a:b3:e7:b0:c4:10:
52:52:aa:7b:b0:18:97:e2:dc:84:4c:31:69:1b:21:b3:59:03:
87:a2:3b:03:39:29:f2:e1:5f:1c:c5:7d:38:d6:8d:8b:5f:28:
66:3d:ef:a0:4a:0c:62:5b:b6:2d:bc:04:5b:00:e9:72:95:fa:
4d:0d:de:9b:fd:b7:67:90:4f:18:95:cf:a6:99:ff:9f:36:31:
84:01:cb:65:47:68:51:ec:8a:ec:2c:b8:a1:0a:45:45:8b:54:
db:1c:a0:8e:ce:c5:de:28:77:a7:83:7f:41:72:f2:57:91:a8:
4e:10:5b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:44 2026 by rpki-client