Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: p3o6JCzBMetSL6eSxJw4q7wAanbXKpCrHYUtwJ68q70=
Subject key identifier: 6C:80:49:C1:57:3E:C6:3C:FE:31:1F:32:00:D7:23:6F:61:50:D8:EE
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 019FA9E2F213A4654D53E9FCF29F87E6382D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 0A66
Signing time: Tue 28 Jul 2026 18:00:50 +0000
Manifest this update: Tue 28 Jul 2026 18:00:50 +0000
Manifest next update: Wed 29 Jul 2026 18:00:50 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: KZznD8aZJewtDLhYmjQ7BFGv6jOEtB6uO7AFBdRMoQQ=)
2: _RW7AkIFcGZwUWpXdXNPZGVtxCs.roa (hash: GKML7mrRakcBCL4DEYIwXRDBDIyno5yMH2FlYeHKryU=)
3: z-ipP4PljIhi0s0enY2Fi4e2AtY.roa (hash: h/WDrCIQ8T04if8DUNRgKtWzsh/GN2hFSKu/XltNf1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:f2:13:a4:65:4d:53:e9:fc:f2:9f:87:e6:38:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Jul 28 18:00:50 2026 GMT
Not After : Jul 29 18:00:50 2026 GMT
Subject: CN=6c8049c1573ec63cfe311f3200d7236f6150d8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:64:23:25:61:e7:8b:73:74:06:86:85:9c:98:
ee:71:72:14:5f:e0:5c:cd:26:d4:e6:9d:b2:7d:5d:
97:6a:4b:55:22:e0:69:89:c6:a2:8c:ac:01:08:10:
64:49:4e:a0:6f:1e:25:cb:ad:2b:df:13:0a:42:5d:
18:da:40:49:20:3f:ae:d7:eb:b1:73:14:9f:d0:61:
d0:43:75:bf:5e:cd:a2:a6:3c:12:7a:b4:6c:ab:1d:
15:92:cd:3e:71:e5:57:05:4b:bd:7b:26:b2:82:01:
c4:1f:e9:ea:33:35:e8:b5:1b:2a:cf:d8:c2:c5:14:
c0:de:95:99:3f:e9:fb:3c:d1:d0:8f:73:b1:03:11:
e3:26:18:54:63:c9:a0:26:ad:bf:7d:2a:df:0a:36:
01:3f:99:f5:e1:3e:ed:ed:30:7f:ef:2b:2d:62:5d:
24:1f:12:c9:ca:5f:c8:70:95:15:76:7f:0f:ee:66:
88:47:c1:bd:82:ee:4f:5e:56:19:71:e5:65:8e:bb:
d6:69:3f:ef:07:85:cd:ea:ba:b9:f0:a0:90:48:db:
0e:cb:84:a5:42:7e:7e:c3:76:1c:45:e1:c9:cc:9d:
40:4e:46:a7:3d:38:78:87:da:df:b8:cd:a5:3e:1f:
a1:07:05:7c:59:6b:04:1a:13:56:e0:b5:8c:cb:41:
fc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:80:49:C1:57:3E:C6:3C:FE:31:1F:32:00:D7:23:6F:61:50:D8:EE
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ca:87:cc:7e:88:34:c6:13:85:06:af:92:1c:39:ae:66:5e:
d9:c5:fd:aa:e0:0e:f4:a1:05:60:6c:dc:3e:50:8f:bc:b1:a6:
ea:c1:e9:0c:49:17:5d:5f:73:e8:8d:25:ec:26:3f:b5:5b:e5:
df:ee:f2:58:ea:0e:e2:18:cf:47:52:cc:c3:05:50:20:bd:50:
6b:f1:91:84:01:6d:6c:8a:2a:5e:c0:8a:b4:8e:c0:5e:77:d1:
a3:f4:b3:85:4c:41:9e:60:8b:04:c4:9b:12:5d:6e:87:ab:2b:
f3:13:6b:57:59:09:8e:4e:db:45:95:20:1a:3b:02:31:23:69:
c4:dd:c1:48:09:55:6f:98:99:35:a8:6f:54:4c:37:98:96:50:
f7:8b:f0:00:aa:bd:b1:50:2d:7e:b9:85:d5:31:54:ee:12:0f:
58:52:28:45:4e:67:2e:6f:28:32:21:02:10:b5:0f:a3:17:64:
db:33:aa:03:a9:e6:bc:9f:2a:a3:d7:6c:9a:1b:1b:f4:ea:fe:
bc:e7:9c:42:24:78:0c:65:38:bf:6f:3c:d7:16:47:82:2f:32:
3a:65:19:09:ac:30:13:f9:4a:1e:9f:6e:0b:b0:ae:5f:1b:fd:
9c:7b:a3:ba:a9:a6:40:1e:ab:cd:ef:76:06:bf:e0:2c:eb:ae:
fa:43:79:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:51:06 2026 by rpki-client