Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
File: 5DWo9PNqSBGpLRlhc-HEmarMd9U.mft (raw, json)
Hash identifier: Eucpfz9qJftXeH1qJpLK73MkR4SH+5vwqB4mEBMrZdE=
Subject key identifier: C0:7A:23:A5:AB:D2:BA:24:60:0B:3A:21:80:0D:32:73:80:0A:D7:B3
Authority key identifier: E4:35:A8:F4:F3:6A:48:11:A9:2D:19:61:73:E1:C4:99:AA:CC:77:D5
Certificate issuer: /CN=e435a8f4f36a4811a92d196173e1c499aacc77d5
Certificate serial: 01A1DF4C3792496E706030C98767D68E1029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
Manifest number: 11D5
Signing time: Sun 15 Nov 2026 13:01:16 +0000
Manifest this update: Sun 15 Nov 2026 13:01:16 +0000
Manifest next update: Mon 16 Nov 2026 13:01:16 +0000
Files and hashes: 1: 5DWo9PNqSBGpLRlhc-HEmarMd9U.crl (hash: +Y/CKd29FVNnFV6zWNCPxU44zcWQINb1NfyfXpYRcbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:37:92:49:6e:70:60:30:c9:87:67:d6:8e:10:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e435a8f4f36a4811a92d196173e1c499aacc77d5
Validity
Not Before: Nov 15 13:01:16 2026 GMT
Not After : Nov 16 13:01:16 2026 GMT
Subject: CN=c07a23a5abd2ba24600b3a21800d3273800ad7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:cf:8f:cc:4f:ae:76:68:a4:42:5d:8d:92:
8b:11:44:f2:f0:8c:85:58:b3:19:35:7c:bb:1a:e8:
f3:f2:60:7a:c1:97:43:51:b3:25:9d:8e:f9:9f:57:
9f:56:70:c0:37:e6:2e:4b:55:a5:2a:25:f1:08:24:
ed:20:37:b2:f4:79:91:76:0e:82:9d:de:25:41:60:
b7:5a:c1:b2:d3:4f:2a:52:c6:57:fc:fe:3a:03:2e:
8d:de:ee:0e:a7:47:4b:03:84:9e:6d:3b:33:e9:43:
e9:75:b3:be:d3:ee:11:67:9a:b9:0e:20:ab:cd:85:
c8:7e:8f:8e:44:85:71:a5:b2:cb:99:aa:d6:84:27:
34:51:41:2a:50:ba:91:0f:72:76:fa:69:7a:ba:97:
73:6a:35:37:fe:cc:5c:69:ac:c4:34:ac:78:89:8a:
55:1b:6d:20:c7:8d:f7:db:75:1b:75:37:f4:9c:d7:
6c:ba:2d:ad:84:ad:2c:b0:24:70:17:86:e7:35:0f:
ac:0b:bc:68:ee:81:3c:7a:1d:4a:08:ad:fe:4f:70:
37:21:d5:1a:c5:f3:32:23:87:11:e6:80:cf:b5:1d:
cd:16:c6:57:ba:7c:d9:ca:1e:b8:c5:b3:dc:71:f6:
d4:44:a1:92:4f:93:02:e1:81:5f:32:96:f5:5a:a1:
74:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7A:23:A5:AB:D2:BA:24:60:0B:3A:21:80:0D:32:73:80:0A:D7:B3
X509v3 Authority Key Identifier:
keyid:E4:35:A8:F4:F3:6A:48:11:A9:2D:19:61:73:E1:C4:99:AA:CC:77:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:cf:d4:2e:52:56:89:57:1b:3c:56:94:8f:84:2a:84:b6:3b:
31:ba:1a:7f:af:20:92:1e:52:16:3e:6b:bd:02:82:3c:3d:fc:
a0:6c:1e:ef:34:76:25:86:35:44:0d:17:ba:1d:87:f7:8f:6c:
fd:15:00:c3:83:5c:af:9a:88:e4:29:6f:c2:52:3c:0e:3e:69:
39:c1:87:62:92:8e:19:31:54:7d:d3:9e:8e:57:28:c3:4d:30:
c8:00:36:fb:67:c8:61:03:0e:24:af:9a:99:72:6c:c5:88:3d:
92:5c:f8:82:d6:55:86:a7:c9:8c:ba:35:4d:63:d0:c2:c5:fc:
0f:2e:2a:e9:7f:93:5e:3f:38:77:ef:8e:1d:60:a4:51:4e:13:
cd:7d:93:cb:f6:13:6c:4e:e0:ab:c6:77:96:34:96:0a:65:49:
ac:b1:5e:1d:f5:85:ea:4c:8e:10:2d:23:fa:bd:37:78:eb:0a:
c3:b3:af:3e:88:71:6f:44:b5:50:7d:0f:c4:26:df:77:44:8f:
98:36:fc:91:12:0b:e4:90:1b:ae:cf:66:b0:08:93:11:a8:e8:
89:59:8e:f5:90:82:21:7e:ee:43:f8:66:4f:45:e5:0d:f2:60:
47:5e:37:d9:b2:d4:3d:0a:a4:2f:ff:a4:ba:cc:b0:81:92:2c:
3c:19:49:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:22:36 2026 by rpki-client