Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: rwS+5aNzOk5rIuEt/otc1YCCJuqQ6tT+r23uHTH0pLI=
Subject key identifier: 9E:B2:BD:7B:49:97:94:25:7B:CF:A9:85:65:FB:B8:52:81:6B:75:00
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 01A0D15BD1C1CFE7438469DBF4A5A3A1FCC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 0AFF
Signing time: Thu 24 Sep 2026 03:00:50 +0000
Manifest this update: Thu 24 Sep 2026 03:00:50 +0000
Manifest next update: Fri 25 Sep 2026 03:00:50 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: 97VT37yhwI0iVtAbeGJhA8LtHJUEARyaY8FJCnwpSDI=)
2: _RW7AkIFcGZwUWpXdXNPZGVtxCs.roa (hash: GKML7mrRakcBCL4DEYIwXRDBDIyno5yMH2FlYeHKryU=)
3: z-ipP4PljIhi0s0enY2Fi4e2AtY.roa (hash: h/WDrCIQ8T04if8DUNRgKtWzsh/GN2hFSKu/XltNf1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:d1:c1:cf:e7:43:84:69:db:f4:a5:a3:a1:fc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Sep 24 03:00:50 2026 GMT
Not After : Sep 25 03:00:50 2026 GMT
Subject: CN=9eb2bd7b499794257bcfa98565fbb852816b7500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:df:6e:b2:1e:9b:c4:96:02:e4:fe:0d:0d:ec:
89:97:49:89:f6:db:28:45:58:76:d9:f7:40:2b:e2:
dd:40:ad:fb:16:79:ba:55:21:24:3c:02:fd:41:ea:
40:2a:56:19:88:ed:f0:f3:16:56:67:21:1a:f2:9c:
73:47:1d:90:ab:4e:bf:43:b9:66:77:03:30:89:92:
1c:3b:67:7a:6f:21:00:65:53:bb:96:20:1e:23:c1:
bf:bf:8b:ed:b2:80:1e:b3:4e:65:a3:37:bc:79:ea:
b5:0a:29:5b:81:8d:5a:55:7c:db:35:6a:80:39:d6:
11:31:63:1c:84:33:85:f6:45:0b:cc:86:d9:a1:f9:
f4:4e:4c:b7:2b:59:b8:68:f4:92:4d:a0:38:4a:de:
3d:5c:77:85:43:42:f6:a9:eb:95:a2:02:23:04:d9:
2d:8d:f6:98:84:8f:44:da:c7:7f:ec:d7:2f:c9:31:
b7:ef:ec:8c:27:84:76:5f:b2:ab:47:f2:86:e2:00:
7f:b4:39:40:0b:37:da:1a:45:41:30:8f:ad:e1:a6:
07:c7:5a:f1:a0:e9:21:01:9c:0c:54:94:8f:a2:2a:
48:08:5e:ae:17:e7:1c:98:38:18:c0:04:c2:26:95:
10:35:41:9d:4b:e0:62:31:41:e9:11:5e:33:37:f5:
c1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B2:BD:7B:49:97:94:25:7B:CF:A9:85:65:FB:B8:52:81:6B:75:00
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c1:0c:ac:3a:9f:36:da:03:3d:f5:f0:9b:35:f6:cc:48:7d:
06:6a:2c:1a:4f:96:77:bc:97:51:81:b7:09:d4:b5:07:af:80:
56:33:f6:9a:90:94:c5:88:ff:c2:df:46:03:1a:6c:bf:e9:39:
31:d4:28:73:aa:15:9b:f2:31:75:2b:ef:2c:1f:93:86:3e:ae:
91:e5:30:f8:9a:79:3a:c4:41:20:65:a6:f5:b8:3c:d3:64:7f:
57:85:14:cd:45:aa:a5:c7:cb:7f:ec:bd:2c:e6:99:4b:1f:eb:
7a:ce:d2:0f:b3:6e:94:fd:e2:dd:33:01:91:53:99:ff:08:0f:
f7:3b:70:db:8c:b6:cc:06:03:52:52:38:5d:b6:3c:37:af:14:
21:cc:05:06:e8:5d:45:c2:10:36:41:c7:29:dc:f8:97:51:72:
ad:40:79:24:4e:99:e0:52:36:cf:be:5e:9b:f1:0e:a0:46:b4:
a1:40:ab:21:49:70:d4:b9:8d:52:53:e4:da:64:ab:c8:a9:b1:
45:38:f7:45:65:5a:44:f1:e5:02:4b:75:46:61:59:cc:c4:ba:
95:c8:af:ef:25:7d:46:db:cf:67:48:23:3e:66:bb:96:56:13:
81:81:13:da:a3:36:5d:b0:15:f3:9b:f9:6e:d9:db:da:b5:7a:
a6:41:9b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:12:33 2026 by rpki-client