Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
File: 5Duq_GSzPkPbeNx67WBe9wQG2a8.mft (raw, json)
Hash identifier: G0lI2d0PgqIIDn474ossCTIZOtR803QszRWewkAhUzM=
Subject key identifier: 5F:F6:86:E5:5C:75:C1:90:B8:E0:85:4E:FD:CD:52:97:28:B5:16:88
Authority key identifier: E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
Certificate issuer: /CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Certificate serial: 019F90C7966A0EDE9DF144511E0E88064A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
Manifest number: 0A59
Signing time: Thu 23 Jul 2026 21:00:27 +0000
Manifest this update: Thu 23 Jul 2026 21:00:27 +0000
Manifest next update: Fri 24 Jul 2026 21:00:27 +0000
Files and hashes: 1: 5Duq_GSzPkPbeNx67WBe9wQG2a8.crl (hash: nVtjMSNwv9z/VEqHLYfQasYGaTwMXoT1NB48BNrGef8=)
2: _RW7AkIFcGZwUWpXdXNPZGVtxCs.roa (hash: GKML7mrRakcBCL4DEYIwXRDBDIyno5yMH2FlYeHKryU=)
3: z-ipP4PljIhi0s0enY2Fi4e2AtY.roa (hash: h/WDrCIQ8T04if8DUNRgKtWzsh/GN2hFSKu/XltNf1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:96:6a:0e:de:9d:f1:44:51:1e:0e:88:06:4a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43baafc64b33e43db78dc7aed605ef70406d9af
Validity
Not Before: Jul 23 21:00:27 2026 GMT
Not After : Jul 24 21:00:27 2026 GMT
Subject: CN=5ff686e55c75c190b8e0854efdcd529728b51688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:9e:52:a0:42:0b:2f:0a:5e:7d:7c:be:9c:
38:cc:13:2e:d2:63:92:11:d3:a2:94:9c:54:d3:a7:
20:a7:9d:9d:73:d3:05:8f:3b:cd:a9:a9:20:1c:52:
22:21:8b:49:73:fa:1f:15:08:ed:c2:91:d9:fd:36:
4c:d3:13:cc:6c:b8:06:af:00:15:00:13:ec:a5:5d:
eb:07:9e:f0:49:4f:22:eb:de:cc:33:30:a2:7f:71:
f8:4d:8f:eb:da:f2:1f:9d:97:64:fa:62:c2:ed:f7:
b6:f1:b5:46:9b:93:ba:60:88:20:8d:1d:9d:8a:d1:
bd:78:26:04:61:36:35:16:e0:93:e2:b9:a8:3e:6b:
dd:95:44:18:c0:24:0d:90:89:7f:7c:4b:e2:26:ad:
5d:dc:1c:2c:2d:6d:e8:b3:12:4d:71:1e:93:ea:ca:
65:d8:98:80:a9:9c:5b:37:94:c4:a1:cb:41:0f:e0:
6f:37:fe:e2:93:d7:78:60:0c:5e:0e:1d:a6:51:13:
c4:e1:09:4a:22:92:47:56:34:93:dd:a2:4e:34:27:
2f:a8:d3:d7:0a:58:45:82:3d:9c:70:03:84:9d:86:
54:69:8a:44:62:7a:30:b0:72:e3:17:f7:83:10:68:
d7:56:bc:30:95:96:43:6d:3a:22:3a:fd:f0:81:8d:
f4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F6:86:E5:5C:75:C1:90:B8:E0:85:4E:FD:CD:52:97:28:B5:16:88
X509v3 Authority Key Identifier:
keyid:E4:3B:AA:FC:64:B3:3E:43:DB:78:DC:7A:ED:60:5E:F7:04:06:D9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Duq_GSzPkPbeNx67WBe9wQG2a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c80d48-830c-4cc3-ae52-e6812dab6999/1/5Duq_GSzPkPbeNx67WBe9wQG2a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ba:42:2b:3a:fe:75:1e:0c:58:ef:16:e8:c7:27:ef:b3:7a:
84:b6:91:9e:b5:82:63:2d:77:a7:f8:73:4e:56:ed:24:6f:ae:
56:af:6a:8f:12:40:92:94:6a:c2:20:90:c7:ad:f5:ac:67:69:
25:2c:3e:d8:72:da:a4:58:55:2b:fc:80:de:18:5b:44:98:00:
c4:b8:67:2a:c2:40:3b:c3:b0:14:53:14:ac:95:6b:c8:91:ce:
50:57:8f:15:8d:02:44:dc:e4:c1:a4:5b:c8:8f:f1:b2:53:5c:
0b:1f:a5:76:25:7a:21:82:d2:ca:37:b6:ce:9e:20:83:1f:e9:
6b:91:58:d9:f0:55:9c:72:c2:5c:48:91:8e:45:fb:5b:ea:60:
24:83:a5:73:87:64:53:e5:29:ca:20:f7:dc:78:4a:65:b4:66:
5a:95:b2:e0:4b:5b:b1:40:c9:c3:03:5d:1a:7e:11:af:b6:ab:
f3:04:d0:72:6e:d4:83:3b:66:34:10:53:a1:f2:7d:9d:86:97:
6d:e6:d9:5c:1a:55:ee:41:0b:3a:ad:ef:bd:a6:49:28:b8:b8:
0b:e2:cb:84:d4:38:49:be:a7:1e:13:8d:49:b8:a6:5b:87:88:
5b:f5:09:9d:88:2e:b7:d0:f3:b0:e5:6e:db:a8:1e:8f:51:5e:
1f:7e:f6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:56 2026 by rpki-client