Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: BQ6S4nns8l6Newt8dhnfeSyrE9K+dXnQKvjpqagJBug=
Subject key identifier: DE:57:EE:39:4F:D8:2E:06:2B:CE:75:E8:D4:CD:9D:A3:D8:B3:86:11
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 019EBE481E0C8927AEA03A94F3ACF35F4BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 09EC
Signing time: Sat 13 Jun 2026 00:00:57 +0000
Manifest this update: Sat 13 Jun 2026 00:00:57 +0000
Manifest next update: Sun 14 Jun 2026 00:00:57 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: FKONuDgL1Kj3yVLkOAtrrQjm5Ubps2RnHq47BXCWT38=)
2: _RW7AkIFcGZwUWpXdXNPZGVtxCs.roa (hash: GKML7mrRakcBCL4DEYIwXRDBDIyno5yMH2FlYeHKryU=)
3: z-ipP4PljIhi0s0enY2Fi4e2AtY.roa (hash: h/WDrCIQ8T04if8DUNRgKtWzsh/GN2hFSKu/XltNf1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:48:1e:0c:89:27:ae:a0:3a:94:f3:ac:f3:5f:4b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Jun 13 00:00:57 2026 GMT
Not After : Jun 14 00:00:57 2026 GMT
Subject: CN=de57ee394fd82e062bce75e8d4cd9da3d8b38611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:2d:a2:5d:87:1c:26:d4:56:f3:f9:e5:f7:
29:76:1f:94:58:a1:35:c6:9a:bc:c2:ae:4c:2f:53:
15:98:47:72:29:08:f0:42:8d:66:b4:2c:8f:30:8c:
f3:b5:88:c3:6b:45:97:f0:72:d5:a2:77:b2:53:c5:
d6:95:50:ee:c4:e3:20:71:d5:92:98:59:ea:2e:52:
87:49:4e:8c:59:bd:35:a8:78:99:26:61:8b:06:58:
e0:d1:ff:12:fc:b8:df:93:5d:48:20:29:de:cc:2c:
ed:0a:b1:06:c5:79:9f:22:89:ac:d2:30:50:eb:47:
db:1e:a4:43:f0:dd:d6:9d:e7:9a:71:96:f8:82:bb:
e6:b7:43:03:78:9a:7d:1a:d2:e5:e5:d1:c0:d4:fa:
b8:a1:a8:97:a5:4d:f9:8d:79:93:b9:e3:e2:31:f3:
b9:8d:a6:8d:02:02:2e:8f:fa:48:5e:7a:f3:28:55:
9d:5c:a6:2e:da:a0:10:45:a9:aa:7d:c3:1c:4e:59:
e7:9c:06:99:89:5c:cd:dd:59:7f:ae:cf:83:6f:8a:
21:ad:bd:29:cc:8b:f8:8a:d2:05:d3:04:78:72:1d:
ec:8c:9d:d7:34:14:85:28:62:e7:34:7d:fb:20:2b:
89:6c:07:73:db:38:5f:31:a7:e7:1f:7d:5c:c6:50:
11:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:57:EE:39:4F:D8:2E:06:2B:CE:75:E8:D4:CD:9D:A3:D8:B3:86:11
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:65:24:e2:7e:35:0c:d2:a9:5f:7a:2a:a5:71:b8:62:db:ac:
16:81:35:a9:7f:03:01:20:1d:6d:e4:90:26:61:4c:21:ee:45:
39:42:0a:55:8c:fb:1e:89:eb:b6:7d:65:f7:02:dd:df:5b:13:
9d:85:c8:24:e2:89:b3:e8:47:cd:bd:17:ec:3b:10:a4:fb:2c:
ea:d4:f0:2b:65:b4:ae:84:eb:f9:da:15:13:cc:8d:3b:20:cb:
f4:c9:7d:3e:9e:c8:96:62:40:25:95:b8:12:7c:c2:97:77:92:
23:ef:45:2c:ee:a2:66:67:74:fc:75:a6:77:7a:11:7e:c1:9a:
be:9a:e2:03:ef:0e:11:db:83:54:d7:19:92:00:f5:4a:11:28:
de:9e:2c:5b:fe:ac:31:1b:2d:c4:7b:39:e1:e8:00:63:b1:e7:
aa:8b:f8:90:9c:f0:c5:c8:17:e9:01:76:c3:20:25:7f:36:09:
3b:e4:92:ed:c4:d1:85:12:36:ae:74:9c:43:39:c0:29:2f:52:
64:c2:d9:eb:2f:14:bf:da:3e:fa:f4:d8:5d:0d:f6:d2:9f:fa:
0b:88:53:2c:e5:e4:35:64:30:56:9d:45:9f:b4:2f:ce:76:de:
40:c1:98:50:d6:c6:3c:1c:df:d8:d4:05:42:6e:82:f0:0c:e5:
a6:67:bb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:10:33 2026 by rpki-client