Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: bJprGWgvawX6mFfEmpxZM29OwsgFW41ErCdDygQWDF4=
Subject key identifier: C5:16:A2:87:DF:36:71:A5:72:1D:11:AA:83:C9:71:A8:2D:86:01:C7
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 019D28BB3C49E854731719E5F1AC1550C5B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 091A
Signing time: Thu 26 Mar 2026 06:00:52 +0000
Manifest this update: Thu 26 Mar 2026 06:00:52 +0000
Manifest next update: Fri 27 Mar 2026 06:00:52 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: lYGQp0woaPVXGv4wChR/XDpJGfXw6F60cnfffhV2P+I=)
2: _RW7AkIFcGZwUWpXdXNPZGVtxCs.roa (hash: GKML7mrRakcBCL4DEYIwXRDBDIyno5yMH2FlYeHKryU=)
3: z-ipP4PljIhi0s0enY2Fi4e2AtY.roa (hash: h/WDrCIQ8T04if8DUNRgKtWzsh/GN2hFSKu/XltNf1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:3c:49:e8:54:73:17:19:e5:f1:ac:15:50:c5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Mar 26 06:00:52 2026 GMT
Not After : Mar 27 06:00:52 2026 GMT
Subject: CN=c516a287df3671a5721d11aa83c971a82d8601c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:7c:23:c5:07:3e:12:8f:78:32:3c:b3:bb:
37:35:b5:bd:b4:19:1d:93:75:2e:40:cc:39:e3:80:
e2:32:1a:fd:d3:1d:8c:f7:6f:63:c5:15:67:51:4c:
9e:5c:ca:92:90:16:1f:6e:1a:31:f3:9e:5c:73:3a:
c4:58:75:f5:73:86:31:66:c8:5d:05:3d:ce:b2:7d:
d4:03:28:26:ea:32:1f:b9:8b:d8:47:4c:0d:90:4f:
3d:b7:b7:1c:3b:9a:7b:ba:8f:64:0c:e9:10:38:ef:
48:74:2d:fe:0a:4b:33:97:e1:4b:75:64:fe:1e:fd:
e4:86:a9:79:e5:27:7a:13:ff:67:8b:b5:25:17:bc:
0b:e7:79:f4:15:41:4f:53:4d:7d:57:46:8b:e3:23:
62:48:c0:d9:e3:25:94:c7:c6:35:1f:85:e4:2f:b2:
d8:0c:91:ca:6f:0c:6d:bc:23:91:8d:40:f0:74:19:
1d:cb:9e:f7:70:65:a6:25:ed:54:9a:f4:bc:b2:33:
5d:46:57:01:6f:dd:9b:2c:36:2b:23:67:ae:4d:9c:
e1:cf:8e:68:96:0c:15:05:8d:89:64:72:1e:c4:e5:
af:2d:57:e2:ff:c0:a0:63:73:80:2c:9c:07:8b:c3:
a2:e5:58:7d:2b:04:36:0d:4f:a3:89:3a:2e:8b:c2:
2b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:16:A2:87:DF:36:71:A5:72:1D:11:AA:83:C9:71:A8:2D:86:01:C7
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:63:e9:05:d9:39:48:f3:5a:1a:b4:2c:ea:0f:29:94:f3:fb:
2a:d9:7d:5a:3d:0a:ae:e5:ce:5f:a9:2e:45:9a:d5:3c:e1:9a:
b3:f8:8e:27:4e:f5:d9:71:c6:3d:50:d1:92:6a:8c:f6:b4:2b:
5d:ee:d0:9c:d3:56:75:5e:f9:55:9e:4a:c5:55:3d:a5:85:de:
4a:43:21:b1:84:10:7f:ae:ae:e6:41:54:0e:26:7f:02:09:76:
cc:c9:60:25:7d:99:c1:eb:c7:1d:57:c1:23:57:99:d0:00:33:
b0:fe:41:26:d8:3b:d2:49:ac:50:d3:19:f6:1a:e6:a4:65:d2:
5e:62:3b:e8:c2:25:aa:b0:80:bb:4c:95:24:7c:8b:39:21:68:
e9:f4:a6:2c:a0:ae:25:c1:d3:20:f8:55:6a:57:8a:57:d2:c1:
84:f0:a8:c8:05:d8:81:16:6e:89:24:ee:bc:36:a9:d8:db:a0:
68:87:2b:c7:0e:51:99:88:c0:56:b2:c8:ab:83:99:45:1e:58:
ac:56:3b:89:b6:e8:f0:20:6f:ef:1a:22:f3:d2:e0:20:3c:77:
85:3a:88:96:0d:92:d1:cd:77:7d:24:1e:63:e6:fc:eb:88:78:
dc:8b:e1:88:df:54:e6:45:37:1f:13:dc:ed:3a:d2:ec:7b:14:
97:68:9f:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ouzxJ6FRzFxnl8awVUMW0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0M2JhYWZjNjRiMzNlNDNkYjc4ZGM3YWVkNjA1ZWY3MDQw
NmQ5YWYwHhcNMjYwMzI2MDYwMDUyWhcNMjYwMzI3MDYwMDUyWjAzMTEwLwYDVQQD
EyhjNTE2YTI4N2RmMzY3MWE1NzIxZDExYWE4M2M5NzFhODJkODYwMWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH58I8UHPhKPeDI8s7s3NbW9tBkd
k3UuQMw544DiMhr90x2M929jxRVnUUyeXMqSkBYfbhox855cczrEWHX1c4YxZshd
BT3Osn3UAygm6jIfuYvYR0wNkE89t7ccO5p7uo9kDOkQOO9IdC3+Ckszl+FLdWT+
Hv3khql55Sd6E/9ni7UlF7wL53n0FUFPU019V0aL4yNiSMDZ4yWUx8Y1H4XkL7LY
DJHKbwxtvCORjUDwdBkdy573cGWmJe1UmvS8sjNdRlcBb92bLDYrI2euTZzhz45o
lgwVBY2JZHIexOWvLVfi/8CgY3OALJwHi8Oi5Vh9KwQ2DU+jiToui8IrEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUWooffNnGlch0RqoPJcagthgHHMB8GA1UdIwQY
MBaAFOQ7qvxksz5D23jceu1gXvcEBtmvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTIt
ZTY4MTJkYWI2OTk5LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jODBkNDgtODMwYy00Y2MzLWFlNTItZTY4MTJkYWI2OTk5
LzEvNUR1cV9HU3pQa1BiZU54NjdXQmU5d1FHMmE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmPpBdk5
SPNaGrQs6g8plPP7Ktl9Wj0KruXOX6kuRZrVPOGas/iOJ0712XHGPVDRkmqM9rQr
Xe7QnNNWdV75VZ5KxVU9pYXeSkMhsYQQf66u5kFUDiZ/Agl2zMlgJX2ZwevHHVfB
I1eZ0AAzsP5BJtg70kmsUNMZ9hrmpGXSXmI76MIlqrCAu0yVJHyLOSFo6fSmLKCu
JcHTIPhValeKV9LBhPCoyAXYgRZuiSTuvDap2NugaIcrxw5RmYjAVrLIq4OZRR5Y
rFY7ibbo8CBv7xoi89LgIDx3hTqIlg2S0c13fSQeY+b864h43IvhiN9U5kU3HxPc
7TrS7HsUl2if/g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:33 2026 by rpki-client