Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
File: 5DWo9PNqSBGpLRlhc-HEmarMd9U.mft (raw, json)
Hash identifier: qpU1Gum1CaeESfrcg46CZXkBqldb24MejuChpUDXIT8=
Subject key identifier: 3D:DA:9D:0A:1C:3E:72:62:44:EC:B6:F8:BB:B6:9B:A5:E6:7A:E4:6D
Authority key identifier: E4:35:A8:F4:F3:6A:48:11:A9:2D:19:61:73:E1:C4:99:AA:CC:77:D5
Certificate issuer: /CN=e435a8f4f36a4811a92d196173e1c499aacc77d5
Certificate serial: 019F905A949EC525E1356F5984B359F036F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
Manifest number: 10A3
Signing time: Thu 23 Jul 2026 19:01:23 +0000
Manifest this update: Thu 23 Jul 2026 19:01:23 +0000
Manifest next update: Fri 24 Jul 2026 19:01:23 +0000
Files and hashes: 1: 5DWo9PNqSBGpLRlhc-HEmarMd9U.crl (hash: 5KkwI7vDBIw/5iLGaltOwwfUHioY68LDQAj2DzLeBo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:94:9e:c5:25:e1:35:6f:59:84:b3:59:f0:36:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e435a8f4f36a4811a92d196173e1c499aacc77d5
Validity
Not Before: Jul 23 19:01:23 2026 GMT
Not After : Jul 24 19:01:23 2026 GMT
Subject: CN=3dda9d0a1c3e726244ecb6f8bbb69ba5e67ae46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:61:98:ab:6c:ce:7c:08:08:67:13:c9:5b:
4b:7b:17:a9:90:16:14:4d:bf:4b:51:9c:b6:0e:bb:
46:2a:65:dc:52:3f:e9:53:02:64:77:92:20:c0:bb:
a7:f5:7a:b3:71:f9:f1:5a:b1:08:15:c3:5a:1d:3a:
f1:51:0c:28:05:4d:8f:1f:87:9f:b1:d2:b7:f8:f7:
8e:38:8e:dd:dc:ce:be:ba:88:e7:25:ae:95:06:df:
c3:60:1a:ae:d7:01:cc:da:2d:36:04:4c:b1:51:38:
6e:c8:d9:15:f2:bf:02:24:e2:ba:fe:f2:86:10:d3:
ac:79:79:67:b3:8e:15:42:1e:05:ad:d7:6d:46:a0:
eb:a9:2b:7c:21:fc:ee:52:e9:50:cf:cb:5f:ae:5b:
8c:0d:37:b8:ca:f2:e2:f9:91:22:20:39:a3:3d:48:
fc:1d:83:fe:80:38:ff:16:4a:ff:44:93:03:9c:34:
1f:4e:98:d2:ec:18:ac:15:b4:e4:f8:44:71:c3:77:
ee:8e:4e:31:39:b9:cf:4d:cf:84:79:6f:71:16:e5:
33:f7:2c:9b:bb:4e:51:12:2a:b2:ce:4b:9b:f9:64:
5e:45:d3:df:ea:cb:51:fb:80:c6:fa:f9:8b:70:2e:
53:76:94:9f:88:8a:e3:f4:72:fb:4d:56:99:38:b0:
82:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DA:9D:0A:1C:3E:72:62:44:EC:B6:F8:BB:B6:9B:A5:E6:7A:E4:6D
X509v3 Authority Key Identifier:
keyid:E4:35:A8:F4:F3:6A:48:11:A9:2D:19:61:73:E1:C4:99:AA:CC:77:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5DWo9PNqSBGpLRlhc-HEmarMd9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42ba75-92e6-4793-8ad9-b80e9fa42dfb/1/5DWo9PNqSBGpLRlhc-HEmarMd9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:53:d0:30:81:c5:7d:1a:9d:49:74:4e:9d:63:73:c4:ed:cb:
38:83:70:54:bb:c3:90:82:87:4d:5f:98:b3:bb:27:99:71:49:
65:00:49:e5:78:4a:9a:fe:7b:86:6a:c9:37:27:c1:70:be:50:
a1:76:af:32:37:54:d8:24:81:05:58:5d:c5:98:cb:b8:f0:1c:
6f:40:ae:47:6f:ba:f2:f1:42:68:96:18:c2:02:cf:44:2c:5a:
b0:5e:c3:63:93:b3:b9:7b:b5:7c:46:a5:8a:fd:dc:e5:b2:aa:
e9:78:84:14:e0:ae:a4:e4:64:31:3f:06:d0:24:5b:83:cb:44:
57:56:08:5b:01:95:cf:a3:6d:fb:95:6b:1d:34:37:04:23:03:
3f:6d:09:30:03:3c:fa:9c:50:d3:94:e0:b8:07:76:09:35:ae:
ef:18:1f:07:92:40:e2:b2:c2:1a:b3:45:05:1e:25:63:51:2e:
d3:8d:97:4f:f6:87:e6:be:9d:ea:91:24:c4:74:8f:95:19:ca:
a9:0a:0e:da:fb:16:39:21:00:00:df:2c:80:fb:b1:8d:7f:f4:
c1:78:81:bc:b3:84:77:08:f7:ae:7c:bd:00:cb:6d:81:3c:9f:
7f:42:b6:21:0d:f6:85:80:e3:07:17:e7:ec:04:a9:f2:bb:f0:
9c:26:20:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:46 2026 by rpki-client