Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: 9dRQIhdI+/J2nxAZjOByQIS4noJ4EqXLyf4vKLc7KrY=
Subject key identifier: B5:A7:DA:8E:D7:AB:60:DE:0B:05:58:7F:17:29:AF:02:AE:87:1A:2C
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 01A0C9A24717E4A9A4E73E1B8C59B7727D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 0AFB
Signing time: Tue 22 Sep 2026 15:00:50 +0000
Manifest this update: Tue 22 Sep 2026 15:00:50 +0000
Manifest next update: Wed 23 Sep 2026 15:00:50 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: GB2OBqyDriiUeG1SeJwZrrXcZ+wuUc7/kDw0yFVujws=)
2: _RW7AkIFcGZwUWpXdXNPZGVtxCs.roa (hash: GKML7mrRakcBCL4DEYIwXRDBDIyno5yMH2FlYeHKryU=)
3: z-ipP4PljIhi0s0enY2Fi4e2AtY.roa (hash: h/WDrCIQ8T04if8DUNRgKtWzsh/GN2hFSKu/XltNf1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:47:17:e4:a9:a4:e7:3e:1b:8c:59:b7:72:7d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Sep 22 15:00:50 2026 GMT
Not After : Sep 23 15:00:50 2026 GMT
Subject: CN=b5a7da8ed7ab60de0b05587f1729af02ae871a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:52:0d:6e:af:9e:81:15:e6:40:11:7f:4f:
47:88:f3:25:c7:fa:c3:eb:63:ff:c6:c3:1c:64:f7:
10:7e:8f:e6:8d:17:8c:51:1f:da:f0:1f:7a:39:70:
40:e3:47:3f:f5:f9:4f:2c:70:7b:c8:83:be:cf:df:
29:8a:95:ef:f0:9e:3e:9c:e9:75:12:5c:28:21:c9:
6d:93:c9:ed:8a:c0:e6:fc:41:71:8c:33:7d:ab:37:
1d:d7:c5:ba:da:71:59:0d:80:c5:35:d7:51:f0:aa:
21:44:74:86:87:df:5a:f5:2a:ec:55:f2:8c:ba:04:
9b:e2:55:ee:fb:18:01:54:27:5f:b8:9d:68:a3:05:
74:e7:60:6d:b7:48:b5:e0:35:8d:38:d7:3d:7c:aa:
f5:8f:06:6f:94:18:2c:6d:5c:dd:ac:5d:36:03:fb:
cc:7b:a1:da:c1:5f:c4:11:f2:cb:23:1b:42:bb:fd:
f1:d1:d1:2b:f1:21:f2:25:4c:7c:ae:d8:d8:95:e6:
cf:0e:63:91:41:56:d7:a2:2a:3f:87:30:10:a1:d3:
ec:0a:cb:96:87:ae:6b:31:7a:0a:92:92:61:81:2b:
c7:04:24:e5:e6:2b:39:2e:20:6d:03:a2:91:8b:a9:
f0:86:a7:32:8a:8c:14:ca:c3:b8:29:6e:2f:4c:ad:
d2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A7:DA:8E:D7:AB:60:DE:0B:05:58:7F:17:29:AF:02:AE:87:1A:2C
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ed:5c:e0:37:12:1d:8d:96:d5:61:ea:4d:67:84:96:33:8e:
24:33:9b:05:2d:48:62:cd:b6:ba:18:4e:3b:b1:61:6a:45:0d:
a4:e5:5c:86:f5:f1:e2:ce:04:94:c8:9b:66:ae:48:b1:f7:7e:
59:0f:89:44:87:40:4c:77:8c:90:33:c9:fa:92:a9:8d:2b:13:
ec:2f:3f:3d:2c:51:85:b0:2f:2a:fc:07:6e:04:a0:e2:20:41:
38:61:ac:fe:2e:dc:73:75:71:55:a3:86:05:68:55:6a:37:80:
6d:82:ed:6a:85:5e:4d:06:fb:6d:f5:84:e0:af:59:a7:92:d6:
56:cc:9a:61:a2:0c:3f:d1:8d:db:0f:81:e1:1e:f1:be:f8:db:
84:2a:3b:8e:7e:f0:4d:8d:ce:77:ab:06:2d:ce:b4:f3:ce:f0:
05:a3:c9:b0:a4:7a:bd:18:3a:ab:bd:e8:c5:de:6c:05:05:aa:
a3:c9:6b:22:61:fb:d3:ac:88:d4:60:1c:83:31:db:58:6b:7b:
2e:43:52:d7:44:93:bc:54:d2:1e:d6:f9:27:fb:ff:60:7a:21:
e9:11:7e:08:da:03:70:ee:c2:e2:93:04:a9:0c:c8:2a:bd:46:
02:58:fa:f1:38:05:3d:1c:fd:c7:f1:62:00:5b:80:3b:da:92:
50:8a:e6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:58:07 2026 by rpki-client