Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: gVETNwe39HKSNiE8VohCJD6AnjU+xlvOgVL7sT2mYbc=
Subject key identifier: 5E:04:C5:0F:F4:18:BA:B9:89:6B:2D:6D:0C:B1:B1:DC:D8:E5:6B:15
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 019D98BD96F53073127641C5BCF264449019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 0954
Signing time: Fri 17 Apr 2026 00:00:54 +0000
Manifest this update: Fri 17 Apr 2026 00:00:54 +0000
Manifest next update: Sat 18 Apr 2026 00:00:54 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: TVfxOqgbZAjkxjPZJdgOgAHPKSVNuzDwb5usVAP2vmI=)
2: _RW7AkIFcGZwUWpXdXNPZGVtxCs.roa (hash: GKML7mrRakcBCL4DEYIwXRDBDIyno5yMH2FlYeHKryU=)
3: z-ipP4PljIhi0s0enY2Fi4e2AtY.roa (hash: h/WDrCIQ8T04if8DUNRgKtWzsh/GN2hFSKu/XltNf1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:96:f5:30:73:12:76:41:c5:bc:f2:64:44:90:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Apr 17 00:00:54 2026 GMT
Not After : Apr 18 00:00:54 2026 GMT
Subject: CN=5e04c50ff418bab9896b2d6d0cb1b1dcd8e56b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:0f:25:1d:7c:69:f9:97:ce:a6:a9:79:f6:
23:12:ac:8d:e3:2c:b7:fa:80:b3:7a:f4:62:64:cc:
62:26:b5:d5:e7:76:c6:4e:39:56:d2:50:ba:17:d1:
a6:be:01:c7:66:77:43:f6:55:18:92:7a:fb:f1:88:
6a:9a:4d:23:9a:f5:77:99:5b:50:e5:e6:e1:03:9b:
10:10:cd:74:84:b1:29:b3:5b:5d:d0:04:a8:3c:6e:
21:58:d9:86:2e:7b:9a:d9:09:23:fd:81:68:df:de:
b1:57:83:55:73:3b:93:08:bf:1f:28:64:5c:6d:88:
be:30:1e:03:bd:6f:b6:e8:29:9e:0e:5e:17:eb:fe:
81:d4:e7:30:8f:e0:08:98:75:f3:c7:99:0f:7a:af:
df:f7:17:9e:c0:13:d1:f8:f4:7e:9d:84:90:77:f4:
f6:85:8f:e7:7f:98:19:d8:68:3e:c1:3e:2e:53:fe:
29:53:d7:ec:6b:e3:e0:42:45:6b:0c:96:a4:2b:c5:
43:3e:9b:9f:88:ff:f9:37:3d:55:9e:25:04:58:dd:
1d:1f:a6:73:2c:04:10:58:ff:d2:25:a5:1c:19:5e:
f3:c6:7b:1e:21:00:d5:e0:f7:2b:49:a9:63:c6:d9:
a4:29:80:bd:44:14:e2:59:89:fa:f4:6e:04:00:45:
ef:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:04:C5:0F:F4:18:BA:B9:89:6B:2D:6D:0C:B1:B1:DC:D8:E5:6B:15
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:28:f2:44:02:0a:1e:54:4c:c9:7e:22:39:be:84:de:4b:af:
7a:f4:a0:8a:42:30:70:d2:17:7e:6a:e8:8e:df:52:a8:5b:dc:
d4:21:84:51:f4:19:7e:b3:91:43:15:f0:cf:c5:eb:14:29:e7:
01:57:9a:fa:30:ff:c4:65:1d:34:9b:b8:38:c1:65:27:8f:df:
46:1a:be:80:0b:34:2b:15:0a:10:cf:45:6f:9d:3e:a7:d4:ba:
62:bb:d9:e1:a1:b2:7d:60:c5:b7:ee:58:b4:bc:7c:ac:16:3a:
5a:45:7e:24:42:f0:17:2e:6d:79:fd:68:12:70:9d:22:c6:b8:
f5:65:5c:83:ee:b6:b3:59:04:03:14:60:31:21:30:52:19:60:
f2:6a:c4:94:46:f6:ff:85:e6:6d:c0:3c:01:bd:0f:71:e9:f0:
c8:c3:1a:de:a9:ca:fb:e1:cf:01:fd:f7:1d:5a:5a:76:6f:63:
84:a6:e8:9a:df:8f:92:3d:8a:4d:b8:d4:2f:82:ee:28:79:20:
fc:34:76:8f:d8:01:d0:fc:ea:a6:23:09:93:5e:cc:80:1d:5b:
e9:b8:27:8b:94:92:e5:cc:6a:aa:fa:ae:b0:a0:dd:34:6f:e2:
0c:dd:af:75:e9:4b:3a:60:b4:a2:82:7b:39:d6:31:d0:43:4a:
e5:ce:52:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:45 2026 by rpki-client