Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
File: 5DWo9PNqSBGpLRlhc-HEmarMd9U.mft (raw, json)
Hash identifier: 2XcVRBIT2DtT0NEF9ELpyspfFeuoyMZw7RvalXdEPq0=
Subject key identifier: 01:EE:57:A0:D9:22:BE:D2:36:40:63:E3:C6:19:41:80:CD:85:21:1C
Authority key identifier: E4:35:A8:F4:F3:6A:48:11:A9:2D:19:61:73:E1:C4:99:AA:CC:77:D5
Certificate issuer: /CN=e435a8f4f36a4811a92d196173e1c499aacc77d5
Certificate serial: 01A0C5579E7EF423EFE2EE848238F0D13BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
Manifest number: 1143
Signing time: Mon 21 Sep 2026 19:00:48 +0000
Manifest this update: Mon 21 Sep 2026 19:00:48 +0000
Manifest next update: Tue 22 Sep 2026 19:00:48 +0000
Files and hashes: 1: 5DWo9PNqSBGpLRlhc-HEmarMd9U.crl (hash: EdpwoJI+QXRHINsIjcwp5ivGiwQ3Z/yNGvSj1dXpWAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:9e:7e:f4:23:ef:e2:ee:84:82:38:f0:d1:3b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e435a8f4f36a4811a92d196173e1c499aacc77d5
Validity
Not Before: Sep 21 19:00:48 2026 GMT
Not After : Sep 22 19:00:48 2026 GMT
Subject: CN=01ee57a0d922bed2364063e3c6194180cd85211c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:9f:a0:60:38:bc:b2:8f:8a:3a:0e:b8:27:
c1:51:5c:d2:a7:48:e7:d5:c5:44:40:56:b9:b0:de:
19:18:61:83:3d:3b:66:e0:91:f2:a0:4c:f8:70:13:
c5:3c:5d:d2:85:69:28:de:51:0c:c0:58:64:18:53:
af:dc:05:1d:1a:e3:a7:5d:3e:41:67:69:f7:d1:45:
0c:d8:f1:ca:9f:5b:eb:a2:75:d7:cf:46:8a:3a:8b:
b8:db:94:a6:b5:8b:42:e5:0e:fc:34:f7:e4:d0:df:
2a:5d:a7:45:70:c7:1c:08:88:dc:88:4c:8d:7c:db:
72:41:c6:85:f8:79:3c:88:56:fa:89:89:e6:1e:79:
96:e4:27:f6:49:00:bd:43:d0:61:21:76:d9:1f:88:
d3:a8:ae:66:b6:91:cd:a0:dc:87:ca:ea:d2:93:35:
09:f6:fc:aa:ff:c2:18:a9:37:9f:af:47:ae:cf:6b:
e7:e8:39:f9:53:51:97:90:bd:0e:af:b5:73:67:dd:
4a:e4:8f:5b:58:bd:e1:26:f9:8b:b1:80:7d:16:82:
6c:c8:38:d4:cd:9e:1f:60:f8:dd:7e:ce:2f:66:89:
27:4f:f8:67:3f:97:ca:d8:69:f6:97:84:af:b9:96:
ba:e0:e3:9b:86:8e:ad:76:e0:f8:73:a7:e5:11:87:
32:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EE:57:A0:D9:22:BE:D2:36:40:63:E3:C6:19:41:80:CD:85:21:1C
X509v3 Authority Key Identifier:
keyid:E4:35:A8:F4:F3:6A:48:11:A9:2D:19:61:73:E1:C4:99:AA:CC:77:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a3:e6:e3:f3:54:a1:cf:c9:03:51:e8:13:e7:f4:5d:fe:6c:
0f:06:de:a2:97:61:17:47:07:b4:14:8b:05:da:93:92:b2:01:
9d:b0:54:d4:fb:3f:05:6e:34:9d:37:58:44:8c:13:bb:0b:60:
02:d8:d8:ce:f1:79:87:56:5f:18:7d:be:ab:d2:44:25:a9:99:
ab:bc:03:09:e4:e0:58:9a:11:80:e1:75:91:48:98:0b:05:47:
ac:9c:80:da:6a:18:c2:ed:d3:7c:28:21:31:82:e4:02:1d:bf:
4b:e9:d4:2a:2a:55:e4:0e:f7:7f:8e:62:a8:73:6d:1c:48:b4:
75:ce:e3:a2:ab:dd:85:a2:1b:a8:13:3b:fd:74:fb:ad:ba:9d:
a2:b0:e6:7a:d1:fc:cc:95:21:55:c2:98:07:78:1c:98:53:89:
33:3c:d2:1d:06:af:6e:6c:ff:76:4e:03:ab:95:77:9c:3b:16:
89:40:99:ed:1a:04:d8:9f:4d:83:c7:d8:7a:92:8b:4d:41:9f:
3e:7a:d2:b3:84:fa:81:1f:b9:04:84:6f:9d:6e:14:33:82:56:
29:dd:35:2a:4c:56:11:0c:73:5b:36:60:73:2d:d5:87:be:9e:
65:ec:ea:87:d9:81:b9:1c:06:0f:12:20:2d:53:38:72:f0:bc:
d6:ea:9c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:43:19 2026 by rpki-client