Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: Lhk40rD6QsLErV+omOLhbXHOTlHNEFivOphJA3i7URo=
Subject key identifier: 04:38:89:62:6F:85:14:E6:69:BC:33:C2:29:35:58:A8:29:21:C6:57
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 019E1C0FD8D91DEAACC1EEEF5E5BA8893F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 0998
Signing time: Tue 12 May 2026 12:01:00 +0000
Manifest this update: Tue 12 May 2026 12:01:00 +0000
Manifest next update: Wed 13 May 2026 12:01:00 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: 3781J7X4MN5CyA0yjZ2JbjXc+RZsl1U3Gaz0GqDywBo=)
2: _RW7AkIFcGZwUWpXdXNPZGVtxCs.roa (hash: GKML7mrRakcBCL4DEYIwXRDBDIyno5yMH2FlYeHKryU=)
3: z-ipP4PljIhi0s0enY2Fi4e2AtY.roa (hash: h/WDrCIQ8T04if8DUNRgKtWzsh/GN2hFSKu/XltNf1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:d8:d9:1d:ea:ac:c1:ee:ef:5e:5b:a8:89:3f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: May 12 12:01:00 2026 GMT
Not After : May 13 12:01:00 2026 GMT
Subject: CN=043889626f8514e669bc33c2293558a82921c657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a3:ed:0d:af:6e:45:cd:df:2b:7d:cb:96:9b:
d0:ef:79:3c:15:38:cc:ec:48:94:c2:83:7a:3e:9c:
29:fe:7b:ce:77:51:07:cb:91:b8:4b:83:11:bd:ff:
77:ab:fe:34:99:82:04:aa:09:02:66:1b:32:5f:93:
af:9a:52:66:f5:4b:cc:a9:b6:c1:e2:ed:09:30:0c:
82:2b:71:58:67:3d:5a:85:a4:d9:91:c6:4b:4f:e8:
96:b4:e5:87:ee:3a:65:d5:e8:39:32:97:21:96:14:
74:c3:5e:7f:45:12:27:4c:4e:11:38:1d:4e:7f:8e:
ad:9b:26:00:32:4d:72:13:48:f5:db:54:4d:6f:e1:
1b:fe:a4:c7:c9:ca:27:2e:d3:ec:b5:9a:a9:94:c3:
c0:e2:78:98:e7:a1:14:96:f1:79:20:f2:13:46:f9:
50:c9:a6:d0:76:a7:11:d9:56:27:3b:fa:e0:19:4b:
e5:f8:ea:14:39:a8:51:43:e2:86:a0:83:00:b4:9f:
e2:8b:99:b6:63:a2:56:3d:b7:4a:5d:77:dc:e8:cb:
b5:d3:f1:d8:af:86:36:fe:1f:b0:3f:a8:b4:d9:6a:
80:9b:d8:08:9f:41:6a:c2:20:62:fb:ef:31:3e:76:
c2:d0:72:70:e1:5f:54:34:f6:99:e8:fa:1f:75:d7:
b3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:38:89:62:6F:85:14:E6:69:BC:33:C2:29:35:58:A8:29:21:C6:57
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:fc:fd:83:e5:1b:89:75:30:99:9c:f1:05:2e:0c:4d:7a:bb:
2f:2b:16:81:94:5b:e3:95:21:2b:f3:5f:c0:29:e4:e7:ad:cb:
f1:ca:90:86:63:54:df:2c:22:d8:67:2f:24:96:46:d6:75:14:
a7:d0:96:de:7d:45:8c:d5:71:35:9b:de:da:c6:84:61:3d:7d:
67:f3:0f:3a:74:fb:15:d2:ed:33:72:b0:10:ac:87:b1:79:3e:
61:10:65:90:7f:39:04:0d:aa:1e:c4:b2:f7:66:b8:70:26:1c:
bb:5b:4c:5a:32:fe:78:9e:8b:fe:60:5b:16:0f:0a:fd:23:95:
d8:cf:a4:97:41:17:d9:a9:0a:13:35:b6:8a:c9:3a:d3:34:cd:
db:07:46:46:84:0b:e5:4a:dc:80:c1:75:9c:02:91:95:f9:5f:
22:fc:26:84:74:a3:52:cf:8d:e3:e4:c5:06:0c:01:d2:26:56:
b3:57:5e:7e:5f:c9:53:b2:65:40:ed:3f:f8:32:9b:9e:5e:99:
94:e1:76:73:6a:09:7f:93:f3:ab:f4:ed:66:23:9d:5a:ef:b7:
b0:8f:ea:38:77:b2:74:07:3a:03:7d:a8:eb:8b:f1:e2:cb:09:
2c:9e:93:1a:7b:79:e0:41:e8:7c:ce:e7:06:65:78:8b:b7:d0:
68:57:3c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:56 2026 by rpki-client