Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
File: 5DWo9PNqSBGpLRlhc-HEmarMd9U.mft (raw, json)
Hash identifier: 8LYy8u7yC8lF85f5Y8+PGX7T3PNYeJeufu4HKnZfQFI=
Subject key identifier: F5:7B:82:86:01:25:A2:AA:E1:B7:21:7C:6A:B1:E0:88:95:79:4B:0A
Authority key identifier: E4:35:A8:F4:F3:6A:48:11:A9:2D:19:61:73:E1:C4:99:AA:CC:77:D5
Certificate issuer: /CN=e435a8f4f36a4811a92d196173e1c499aacc77d5
Certificate serial: 019FAB6415535F90D31304933F116D60BCBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
Manifest number: 10B1
Signing time: Wed 29 Jul 2026 01:01:30 +0000
Manifest this update: Wed 29 Jul 2026 01:01:30 +0000
Manifest next update: Thu 30 Jul 2026 01:01:30 +0000
Files and hashes: 1: 5DWo9PNqSBGpLRlhc-HEmarMd9U.crl (hash: prgqV++Ac105eJVufZuIqTIEbpw/1Fv6RLIhOWwjJ9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:64:15:53:5f:90:d3:13:04:93:3f:11:6d:60:bc:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e435a8f4f36a4811a92d196173e1c499aacc77d5
Validity
Not Before: Jul 29 01:01:30 2026 GMT
Not After : Jul 30 01:01:30 2026 GMT
Subject: CN=f57b82860125a2aae1b7217c6ab1e08895794b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:3d:89:cf:b7:09:d0:44:f4:1f:83:e1:e2:
8f:94:30:20:2d:16:f6:69:8b:d9:1f:7a:f5:a5:1d:
09:1e:ee:f9:c3:fa:ba:59:42:df:76:a8:b0:a0:96:
29:01:2e:6a:d6:cd:2c:d2:a2:84:53:fb:01:b4:c6:
cf:61:61:ec:a9:6b:21:e4:a4:c2:21:0c:10:1e:1e:
8b:03:bb:84:ba:96:3a:25:58:bc:22:04:87:9d:87:
b2:80:55:3b:1c:ed:12:ec:11:f2:68:8c:38:5c:36:
20:e5:40:3d:54:90:dd:22:d8:2c:06:45:a4:48:d8:
40:8b:c0:bd:8c:ff:e5:de:25:ad:fe:38:f5:34:a9:
ac:a1:f9:5d:d3:24:41:ee:04:05:c5:1b:10:cc:08:
0e:ea:b2:8b:e1:92:2e:4a:8e:d1:af:6e:db:63:4e:
3d:c8:64:51:1d:e5:82:bf:9c:68:9a:6f:90:7e:86:
b5:1b:d8:6f:b2:04:c4:61:01:3d:b1:8d:b1:b6:6c:
d2:42:ba:a5:4b:23:f7:b0:db:fc:be:6a:4a:28:97:
2f:f7:20:05:f4:19:49:65:b4:52:90:bd:c0:bb:e2:
cc:d0:5e:54:20:0e:bd:d2:18:92:c8:ab:3b:5c:6e:
45:5e:3d:c2:da:0b:53:48:74:71:10:18:79:13:04:
f3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7B:82:86:01:25:A2:AA:E1:B7:21:7C:6A:B1:E0:88:95:79:4B:0A
X509v3 Authority Key Identifier:
keyid:E4:35:A8:F4:F3:6A:48:11:A9:2D:19:61:73:E1:C4:99:AA:CC:77:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f0:4e:01:97:42:1f:86:30:0d:81:20:a6:cd:19:f0:3c:e0:
fc:8e:45:df:02:a9:59:65:2b:1a:d1:ec:53:a9:30:a5:cc:c7:
23:0a:ae:60:d2:5a:03:66:16:17:d5:5c:3c:16:64:76:03:62:
c8:3f:ad:e8:7e:b3:92:1a:cc:a0:1f:ec:8f:c4:ff:ee:0b:9e:
89:5a:85:74:5a:ae:f6:0d:67:66:c8:d1:53:ee:64:4e:94:f7:
4f:12:19:70:9a:e8:7d:f3:79:bf:d3:e6:0f:f2:1b:ac:f6:9b:
a1:72:76:81:e5:3c:5e:25:f8:c9:e9:ca:7e:a6:f2:e8:5d:fd:
45:d6:19:05:63:17:3f:68:f3:7e:a1:3e:71:6d:ab:c4:a8:7e:
b9:58:a0:ae:56:b7:af:17:c2:0d:ac:dd:9d:86:ef:59:5c:f5:
05:99:8e:7a:e4:9b:75:f6:07:7e:64:ab:af:f5:8b:5b:c3:7a:
3a:bf:81:37:2d:b9:4e:b9:12:a5:34:da:1b:84:30:4a:34:be:
92:00:a0:cd:84:12:7e:35:d0:26:ac:0d:74:cd:2d:4a:b6:4b:
2a:20:72:cd:8d:ab:1e:c2:76:73:ae:f2:18:69:ea:b1:d6:0e:
94:9d:ed:c1:01:a3:e9:9c:e3:dc:a6:61:60:e1:49:b1:d3:e5:
d1:5e:88:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rZBVTX5DTEwSTPxFtYLy8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MzVhOGY0ZjM2YTQ4MTFhOTJkMTk2MTczZTFjNDk5YWFj
Yzc3ZDUwHhcNMjYwNzI5MDEwMTMwWhcNMjYwNzMwMDEwMTMwWjAzMTEwLwYDVQQD
EyhmNTdiODI4NjAxMjVhMmFhZTFiNzIxN2M2YWIxZTA4ODk1Nzk0YjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz89ic+3CdBE9B+D4eKPlDAgLRb2
aYvZH3r1pR0JHu75w/q6WULfdqiwoJYpAS5q1s0s0qKEU/sBtMbPYWHsqWsh5KTC
IQwQHh6LA7uEupY6JVi8IgSHnYeygFU7HO0S7BHyaIw4XDYg5UA9VJDdItgsBkWk
SNhAi8C9jP/l3iWt/jj1NKmsofld0yRB7gQFxRsQzAgO6rKL4ZIuSo7Rr27bY049
yGRRHeWCv5xomm+Qfoa1G9hvsgTEYQE9sY2xtmzSQrqlSyP3sNv8vmpKKJcv9yAF
9BlJZbRSkL3Au+LM0F5UIA690hiSyKs7XG5FXj3C2gtTSHRxEBh5EwTzMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPV7goYBJaKq4bchfGqx4IiVeUsKMB8GA1UdIwQY
MBaAFOQ1qPTzakgRqS0ZYXPhxJmqzHfVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNURXbzlQTnFTQkdwTFJsaGMtSEVtYXJNZDlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80MmJhNzUtOTJlNi00NzkzLThhZDkt
YjgwZTlmYTQyZGZiLzEvNURXbzlQTnFTQkdwTFJsaGMtSEVtYXJNZDlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80MmJhNzUtOTJlNi00NzkzLThhZDktYjgwZTlmYTQyZGZi
LzEvNURXbzlQTnFTQkdwTFJsaGMtSEVtYXJNZDlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvBOAZdC
H4YwDYEgps0Z8Dzg/I5F3wKpWWUrGtHsU6kwpczHIwquYNJaA2YWF9VcPBZkdgNi
yD+t6H6zkhrMoB/sj8T/7gueiVqFdFqu9g1nZsjRU+5kTpT3TxIZcJroffN5v9Pm
D/IbrPaboXJ2geU8XiX4yenKfqby6F39RdYZBWMXP2jzfqE+cW2rxKh+uVigrla3
rxfCDazdnYbvWVz1BZmOeuSbdfYHfmSrr/WLW8N6Or+BNy25TrkSpTTaG4QwSjS+
kgCgzYQSfjXQJqwNdM0tSrZLKiByzY2rHsJ2c67yGGnqsdYOlJ3twQGj6Zzj3KZh
YOFJsdPl0V6IhQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:22 2026 by rpki-client