Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
File: 5DWo9PNqSBGpLRlhc-HEmarMd9U.mft (raw, json)
Hash identifier: 04jISpRBU2mNBygyO3ARilJ+dclbix1MunD1YCVKzu8=
Subject key identifier: 6C:91:6B:CE:40:5A:BB:44:40:D9:8D:5D:A9:12:7C:23:BB:FA:D3:FE
Authority key identifier: E4:35:A8:F4:F3:6A:48:11:A9:2D:19:61:73:E1:C4:99:AA:CC:77:D5
Certificate issuer: /CN=e435a8f4f36a4811a92d196173e1c499aacc77d5
Certificate serial: 01A0CD11105FD23E2CC24B73586FD5D81A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
Manifest number: 1147
Signing time: Wed 23 Sep 2026 07:00:42 +0000
Manifest this update: Wed 23 Sep 2026 07:00:42 +0000
Manifest next update: Thu 24 Sep 2026 07:00:42 +0000
Files and hashes: 1: 5DWo9PNqSBGpLRlhc-HEmarMd9U.crl (hash: 0Hm9k6lsw8tmjHKM/FJkSqLccdoFoDfW40QUS3+jLVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:10:5f:d2:3e:2c:c2:4b:73:58:6f:d5:d8:1a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e435a8f4f36a4811a92d196173e1c499aacc77d5
Validity
Not Before: Sep 23 07:00:42 2026 GMT
Not After : Sep 24 07:00:42 2026 GMT
Subject: CN=6c916bce405abb4440d98d5da9127c23bbfad3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:78:2a:57:a6:f4:79:b9:35:56:9b:b8:d0:76:
64:22:84:74:fc:63:d5:a8:d8:b4:87:ee:9c:ed:bf:
6f:92:50:26:5d:fe:88:06:71:ed:8a:5a:2f:0e:94:
1a:67:6f:d5:cc:ec:57:78:76:50:6c:6a:b4:aa:4d:
0c:c2:68:bc:e2:5e:7d:45:2c:13:0f:a3:2a:4e:80:
46:68:98:77:bb:77:c4:d3:66:ed:45:75:ac:80:90:
e5:a6:17:f4:4e:3f:02:70:f6:8a:a6:19:16:21:80:
5a:6c:f2:72:ad:4e:9f:ef:e4:f7:f7:4a:d1:e1:82:
c6:fd:ce:f7:44:7d:bf:e9:97:92:e3:d9:c4:fd:a7:
51:b8:0c:5e:e1:25:38:3b:7a:5c:46:63:a6:59:f9:
44:b4:c4:96:32:e9:2a:28:fb:08:61:63:13:06:b9:
96:08:43:50:c9:4f:6f:87:02:6d:10:e7:e6:d1:7b:
58:9d:3e:ec:b0:71:66:0d:9d:b5:2f:9a:66:1b:d0:
d4:a2:9d:52:59:73:5c:58:20:7d:18:08:0d:9f:b7:
de:4b:74:d2:76:64:07:3d:d8:14:8c:6c:af:8e:dc:
64:47:b1:6e:cd:0a:3a:b8:91:f6:b0:6e:da:3a:cc:
af:cd:2e:8f:30:bd:8e:31:e3:c8:f6:05:5a:a8:47:
44:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:91:6B:CE:40:5A:BB:44:40:D9:8D:5D:A9:12:7C:23:BB:FA:D3:FE
X509v3 Authority Key Identifier:
keyid:E4:35:A8:F4:F3:6A:48:11:A9:2D:19:61:73:E1:C4:99:AA:CC:77:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:02:fb:3b:76:02:c2:a4:6f:e9:78:68:d3:a7:c5:48:12:56:
38:1d:fe:81:71:82:1e:6b:55:92:83:63:ab:0c:11:67:88:d3:
f4:d3:f2:4f:ef:ec:c9:2c:10:4e:ed:61:97:a9:73:1a:e7:d7:
59:88:e7:d9:25:53:b5:3f:5f:f9:bb:65:25:c6:d9:25:c6:df:
b8:fc:7c:c0:97:6b:6c:0f:de:61:35:79:15:31:d7:a3:48:e5:
46:38:49:ad:bb:17:76:c7:b0:7b:b4:6c:a7:49:4d:fe:8c:e9:
b9:c6:b1:02:b2:e1:1b:34:b7:99:4b:7b:ee:31:20:f3:55:91:
2e:21:be:30:c1:39:d5:e8:57:ed:d0:9c:8f:ac:9d:5c:ed:dd:
dc:ac:33:06:6f:b1:df:30:67:26:b8:31:32:d8:9a:88:f5:ce:
65:59:b3:c0:4e:62:df:59:59:72:45:22:f7:4c:b7:e5:1b:04:
1c:b7:8c:09:66:d3:2b:c0:12:06:a2:a2:3a:7c:8d:ad:c9:b7:
cd:ff:b7:27:a5:19:bd:fa:ef:33:8b:8e:13:14:c3:f3:02:ca:
17:6f:ce:fb:64:b0:eb:c9:22:f8:1d:ca:35:59:ea:f2:df:2a:
b2:13:b2:e5:73:b3:7c:05:98:a2:72:4d:17:8f:2f:b6:3f:03:
7a:11:c7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:08:04 2026 by rpki-client