Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: TmGj12UsvCZDTgv2PVYRe4+9j09J06AOXJh63OAeLpk=
Subject key identifier: C4:F8:C6:DE:1C:6F:1E:C7:A9:BA:8B:C6:D8:8C:0E:57:C9:05:22:36
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 019CAB34953EEDEDE1746FBCCF28CFAB9EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 08D9
Signing time: Sun 01 Mar 2026 21:01:15 +0000
Manifest this update: Sun 01 Mar 2026 21:01:15 +0000
Manifest next update: Mon 02 Mar 2026 21:01:15 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: 5kStzmwu0boBxqudk1XvSG8PLPA2qbBonZzZ0h9J2U4=)
2: _RW7AkIFcGZwUWpXdXNPZGVtxCs.roa (hash: GKML7mrRakcBCL4DEYIwXRDBDIyno5yMH2FlYeHKryU=)
3: z-ipP4PljIhi0s0enY2Fi4e2AtY.roa (hash: h/WDrCIQ8T04if8DUNRgKtWzsh/GN2hFSKu/XltNf1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:95:3e:ed:ed:e1:74:6f:bc:cf:28:cf:ab:9e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Mar 1 21:01:15 2026 GMT
Not After : Mar 2 21:01:15 2026 GMT
Subject: CN=c4f8c6de1c6f1ec7a9ba8bc6d88c0e57c9052236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:79:64:06:7d:39:84:d6:63:50:d5:17:35:
0e:4e:68:88:0a:3a:aa:ea:d5:4f:8b:ce:94:21:cf:
cb:fc:1f:06:33:f3:09:1c:11:16:c5:71:b3:56:87:
79:85:46:5e:03:01:8e:cf:a3:1e:1c:6b:c5:2d:c1:
32:f7:6a:c5:ba:ba:4e:83:ea:0c:b9:5a:94:70:59:
65:b7:07:86:67:3d:0a:4f:f8:8d:2d:6c:9c:b0:5c:
61:80:15:ae:aa:29:e4:c3:d0:ef:0e:24:17:5f:49:
a2:c4:34:79:2d:65:34:dd:f9:24:e0:70:57:99:6b:
c1:2b:c8:21:94:5d:23:86:85:fc:3e:41:bb:ae:ec:
db:22:1d:54:b6:af:6f:70:86:17:f0:89:8a:4f:0d:
87:43:4a:9a:cb:06:e3:b1:e1:0e:1b:83:f0:56:e5:
d4:26:74:37:d2:53:ec:b0:6c:ce:d5:4f:86:27:96:
72:af:25:b6:8c:58:a9:7a:a6:10:7e:d7:7e:c3:c0:
83:27:2a:0e:98:55:0c:85:30:8a:4b:2b:8d:d3:60:
fc:58:3e:b9:90:87:ea:1a:41:6d:37:26:ca:6e:38:
9c:cc:f3:11:02:3f:ca:de:c7:9d:9f:ab:05:68:eb:
9f:f9:af:a5:20:e1:4a:62:88:f9:1e:5b:39:3f:5d:
ec:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F8:C6:DE:1C:6F:1E:C7:A9:BA:8B:C6:D8:8C:0E:57:C9:05:22:36
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0b:1b:61:30:8a:3e:e7:24:eb:65:ba:e4:a0:06:85:c7:4c:
65:21:0b:aa:16:72:fe:64:ba:7d:77:49:57:0e:0d:b4:35:3d:
88:3c:fa:6f:e1:f2:13:c7:9b:8b:67:c2:4e:32:72:78:9b:34:
67:f7:22:06:87:c0:e3:9a:f0:0f:89:6a:45:e9:5a:c7:50:eb:
31:92:c3:1e:ac:98:34:6f:f3:16:93:59:3c:d8:19:d4:af:99:
6d:8c:de:75:45:ef:db:d5:6d:21:ac:5b:17:82:06:c2:3d:39:
e6:0c:0a:07:ce:cd:52:d0:1d:43:1a:5f:b6:c8:8a:ae:bf:53:
ed:0a:67:8c:0e:ef:60:6d:81:cb:75:f7:8c:a1:9d:4f:7b:b9:
73:76:fc:6a:1d:0d:3b:ff:a9:6c:2c:b6:8a:dd:1a:b6:d2:8f:
56:8a:1b:67:61:1a:c3:88:c0:42:b5:e7:ce:10:c5:38:7f:20:
7c:54:0c:92:b1:7c:bf:29:b1:d4:c2:3c:f3:fd:e0:a8:a0:4b:
c6:80:e8:15:3a:e6:92:c6:44:e6:95:cd:b1:ce:14:87:c1:e5:
6a:5f:73:a9:ad:81:44:d3:c2:a6:a6:b1:7f:95:26:4a:69:0c:
c9:ca:17:1f:52:e8:eb:c7:9a:3f:b3:3e:0b:e2:bb:d0:b9:44:
de:c6:41:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNJU+7e3hdG+8zyjPq57vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0M2JhYWZjNjRiMzNlNDNkYjc4ZGM3YWVkNjA1ZWY3MDQw
NmQ5YWYwHhcNMjYwMzAxMjEwMTE1WhcNMjYwMzAyMjEwMTE1WjAzMTEwLwYDVQQD
EyhjNGY4YzZkZTFjNmYxZWM3YTliYThiYzZkODhjMGU1N2M5MDUyMjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvR5ZAZ9OYTWY1DVFzUOTmiICjqq
6tVPi86UIc/L/B8GM/MJHBEWxXGzVod5hUZeAwGOz6MeHGvFLcEy92rFurpOg+oM
uVqUcFlltweGZz0KT/iNLWycsFxhgBWuqinkw9DvDiQXX0mixDR5LWU03fkk4HBX
mWvBK8ghlF0jhoX8PkG7ruzbIh1Utq9vcIYX8ImKTw2HQ0qaywbjseEOG4PwVuXU
JnQ30lPssGzO1U+GJ5ZyryW2jFipeqYQftd+w8CDJyoOmFUMhTCKSyuN02D8WD65
kIfqGkFtNybKbjiczPMRAj/K3sedn6sFaOuf+a+lIOFKYoj5Hls5P13s1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMT4xt4cbx7HqbqLxtiMDlfJBSI2MB8GA1UdIwQY
MBaAFOQ7qvxksz5D23jceu1gXvcEBtmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTIt
ZTY4MTJkYWI2OTk5LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTItZTY4MTJkYWI2OTk5
LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgsbYTCK
Puck62W65KAGhcdMZSELqhZy/mS6fXdJVw4NtDU9iDz6b+HyE8ebi2fCTjJyeJs0
Z/ciBofA45rwD4lqRelax1DrMZLDHqyYNG/zFpNZPNgZ1K+ZbYzedUXv29VtIaxb
F4IGwj055gwKB87NUtAdQxpftsiKrr9T7QpnjA7vYG2By3X3jKGdT3u5c3b8ah0N
O/+pbCy2it0attKPVoobZ2Eaw4jAQrXnzhDFOH8gfFQMkrF8vymx1MI88/3gqKBL
xoDoFTrmksZE5pXNsc4Uh8Hlal9zqa2BRNPCpqaxf5UmSmkMycoXH1Lo68eaP7M+
C+K70LlE3sZBLw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:09 2026 by rpki-client