Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: Y0nYlY2AQMlqt/lUZZ5C/pKhSF7WdQruu0QnIyNJvG0=
Subject key identifier: DA:44:87:F6:44:1B:D3:5A:9D:B4:87:DF:D5:E1:CA:07:45:C7:87:15
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 01A1DFBA6F23205EA979ACCC3563638B3CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 0B8B
Signing time: Sun 15 Nov 2026 15:01:39 +0000
Manifest this update: Sun 15 Nov 2026 15:01:39 +0000
Manifest next update: Mon 16 Nov 2026 15:01:39 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: gYezmvK9PiecBAO9zoawIKHIEz0RAsw6zquY3spcjh4=)
2: _RW7AkIFcGZwUWpXdXNPZGVtxCs.roa (hash: GKML7mrRakcBCL4DEYIwXRDBDIyno5yMH2FlYeHKryU=)
3: z-ipP4PljIhi0s0enY2Fi4e2AtY.roa (hash: h/WDrCIQ8T04if8DUNRgKtWzsh/GN2hFSKu/XltNf1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:6f:23:20:5e:a9:79:ac:cc:35:63:63:8b:3c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Nov 15 15:01:39 2026 GMT
Not After : Nov 16 15:01:39 2026 GMT
Subject: CN=da4487f6441bd35a9db487dfd5e1ca0745c78715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:31:f9:9c:cd:4d:1e:fe:ec:3c:78:35:bd:
88:da:f8:eb:8d:9b:5a:f5:e4:df:eb:50:4b:4f:b6:
6c:a2:c8:fb:d6:e2:5d:6f:84:6a:11:7b:da:70:6b:
9a:83:7d:80:34:8f:b0:3e:d7:3d:32:ac:96:34:fb:
eb:ab:10:c5:a1:10:dd:6b:06:75:23:e7:26:6b:dc:
27:3d:0e:f6:d8:e2:b8:68:2b:ea:8d:73:20:24:75:
cf:4e:58:f1:81:7e:7a:69:65:96:b8:1c:92:c6:7a:
25:5e:56:a1:c4:e2:93:eb:c7:91:26:4d:d1:e7:49:
37:69:3e:82:2e:bc:87:0b:c0:7b:56:3e:26:ee:1c:
5e:08:3b:e3:49:79:97:05:51:35:40:40:9f:6a:7b:
10:0c:b3:f3:a7:78:67:8e:55:53:21:18:29:91:24:
fd:e7:79:57:2c:da:ae:5b:17:c6:7a:7f:26:41:37:
a6:22:09:0b:e1:68:89:a3:d7:59:da:d8:74:78:76:
a6:b4:65:50:28:ef:e2:7b:2f:c9:2b:9c:a8:30:43:
a4:f8:c1:78:b6:7f:96:05:87:23:bc:2f:48:47:9b:
2a:cf:04:4c:6d:53:0f:f1:cd:93:f8:71:8b:8d:f0:
bc:98:9c:4d:ab:7e:5f:42:e3:a9:24:18:fb:09:8f:
6b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:44:87:F6:44:1B:D3:5A:9D:B4:87:DF:D5:E1:CA:07:45:C7:87:15
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2f:b1:fc:aa:ee:05:77:9e:8d:53:cd:fc:44:23:ff:9f:de:
8f:00:63:9f:07:2c:5b:89:aa:64:21:d6:08:dc:cb:8b:d3:48:
8f:83:19:84:45:72:37:c9:08:1e:69:21:11:9d:a4:9a:6c:b8:
9c:5b:ff:c6:17:d1:7e:23:de:1a:58:69:56:ea:e8:e5:e9:0b:
7a:46:52:eb:31:d8:78:84:6e:f6:54:e1:99:e7:8a:ad:7e:94:
4f:07:98:dd:86:76:83:09:a9:b9:69:4b:ae:4f:6b:a2:be:db:
03:d7:c3:69:7f:6a:10:fd:91:c5:24:e3:65:2c:54:fa:e3:5c:
11:2f:62:06:c0:37:5d:5a:3e:18:ff:87:52:39:f5:e9:8f:85:
a8:97:0e:16:fb:af:f5:7e:c1:bd:46:62:53:1a:6d:71:73:ab:
90:8e:1f:11:4a:3c:7e:27:da:0c:26:17:e9:0f:01:eb:d9:76:
ef:ad:c2:8c:92:92:0a:10:2c:6d:8c:7e:81:7d:78:3f:55:30:
74:92:a1:a0:d3:e1:b5:a8:e1:ee:13:87:72:f1:d2:29:4c:de:
6a:b2:50:76:56:01:36:79:17:1d:95:11:f2:5f:cb:db:65:10:
ac:c5:fe:e2:1f:70:72:8e:77:76:c8:0e:3b:32:f0:ea:1a:b8:
ed:66:c7:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfum8jIF6peazMNWNjizy8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0M2JhYWZjNjRiMzNlNDNkYjc4ZGM3YWVkNjA1ZWY3MDQw
NmQ5YWYwHhcNMjYxMTE1MTUwMTM5WhcNMjYxMTE2MTUwMTM5WjAzMTEwLwYDVQQD
EyhkYTQ0ODdmNjQ0MWJkMzVhOWRiNDg3ZGZkNWUxY2EwNzQ1Yzc4NzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR0x+ZzNTR7+7Dx4Nb2I2vjrjZta
9eTf61BLT7Zsosj71uJdb4RqEXvacGuag32ANI+wPtc9MqyWNPvrqxDFoRDdawZ1
I+cma9wnPQ722OK4aCvqjXMgJHXPTljxgX56aWWWuBySxnolXlahxOKT68eRJk3R
50k3aT6CLryHC8B7Vj4m7hxeCDvjSXmXBVE1QECfansQDLPzp3hnjlVTIRgpkST9
53lXLNquWxfGen8mQTemIgkL4WiJo9dZ2th0eHamtGVQKO/iey/JK5yoMEOk+MF4
tn+WBYcjvC9IR5sqzwRMbVMP8c2T+HGLjfC8mJxNq35fQuOpJBj7CY9rzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpEh/ZEG9NanbSH39XhygdFx4cVMB8GA1UdIwQY
MBaAFOQ7qvxksz5D23jceu1gXvcEBtmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTIt
ZTY4MTJkYWI2OTk5LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTItZTY4MTJkYWI2OTk5
LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALS+x/Kru
BXeejVPN/EQj/5/ejwBjnwcsW4mqZCHWCNzLi9NIj4MZhEVyN8kIHmkhEZ2kmmy4
nFv/xhfRfiPeGlhpVuro5ekLekZS6zHYeIRu9lThmeeKrX6UTweY3YZ2gwmpuWlL
rk9ror7bA9fDaX9qEP2RxSTjZSxU+uNcES9iBsA3XVo+GP+HUjn16Y+FqJcOFvuv
9X7BvUZiUxptcXOrkI4fEUo8fifaDCYX6Q8B69l2763CjJKSChAsbYx+gX14P1Uw
dJKhoNPhtajh7hOHcvHSKUzearJQdlYBNnkXHZUR8l/L22UQrMX+4h9wco53dsgO
OzLw6hq47WbH6A==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:46:05 2026 by rpki-client