Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
File: 05EjiA9CdEbV_wfO-WM-htxJGY0.mft (raw, json)
Hash identifier: 6c7Aw2wdzF/9Md/U0yjoWcHo21ak0cVUmkLs0+NYifg=
Subject key identifier: 82:EE:81:88:E0:A4:7B:73:8F:13:7C:D1:CF:7C:63:FE:02:0E:B3:08
Authority key identifier: D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
Certificate issuer: /CN=d39123880f427446d5ff07cef9633e86dc49198d
Certificate serial: 01A001DD0DDA24DC9A1445E73373FE701A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
Manifest number: 0AED
Signing time: Fri 14 Aug 2026 20:00:59 +0000
Manifest this update: Fri 14 Aug 2026 20:00:59 +0000
Manifest next update: Sat 15 Aug 2026 20:00:59 +0000
Files and hashes: 1: 05EjiA9CdEbV_wfO-WM-htxJGY0.crl (hash: nNk6roMc9o/VzcHieBO+8F0mpiKG+tunvLCRZyQXiDE=)
2: Icxh7ran8QEFrFaor03QcMoTvV8.roa (hash: MFrKxNDqc3uJ1yrSEp7TKqH0r5nZYxDEls6DmflezRU=)
3: o7HXUZ7wql63_rY2SPAoMeVHALU.roa (hash: tSjVjpZBEc5aPZsTVKoDXrBNuRrVoPjUDCvaDRxzkBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:0d:da:24:dc:9a:14:45:e7:33:73:fe:70:1a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39123880f427446d5ff07cef9633e86dc49198d
Validity
Not Before: Aug 14 20:00:59 2026 GMT
Not After : Aug 15 20:00:59 2026 GMT
Subject: CN=82ee8188e0a47b738f137cd1cf7c63fe020eb308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f8:b1:f3:5d:43:41:43:ba:c9:5f:31:4d:10:
eb:0e:5b:04:1d:f2:cd:e3:ac:a6:e8:00:ee:08:7e:
bc:48:b7:7c:29:e4:35:e5:f0:ef:dd:1a:d7:30:e2:
96:35:72:ef:50:2d:d3:34:94:61:5e:8a:c5:93:44:
54:85:b3:a2:a4:ee:e7:29:c2:e7:7a:af:f3:59:0d:
1a:87:23:f4:32:ae:61:ed:9e:3e:ef:4e:bc:9f:7e:
57:14:03:e3:23:c5:f9:03:e3:76:a7:6e:4f:9b:93:
5d:2f:5a:b1:c1:95:8b:da:4d:a7:99:1f:63:f1:59:
56:42:71:55:23:36:05:46:ba:b3:4c:db:1d:01:6c:
4f:dd:3f:e2:f3:e6:00:5c:c8:eb:49:64:d2:d5:5f:
ab:1c:f0:4c:e8:cf:34:d6:cd:52:e2:94:fc:d1:7e:
32:0f:b9:95:c3:89:5a:15:8a:38:76:c0:68:e8:0a:
40:b9:40:db:7e:3a:a3:f9:f7:8a:7c:59:4d:36:f6:
43:2a:8e:68:7d:86:7c:8d:0b:26:eb:8b:2b:19:2e:
31:00:60:54:db:c2:42:66:0b:81:d5:19:26:1d:a2:
8b:6c:8f:b0:19:95:68:a0:4b:16:b9:ec:07:6c:43:
16:95:01:90:ac:a5:eb:9a:c1:0b:59:56:7c:64:7d:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EE:81:88:E0:A4:7B:73:8F:13:7C:D1:CF:7C:63:FE:02:0E:B3:08
X509v3 Authority Key Identifier:
keyid:D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:02:08:91:f5:51:cb:a2:54:e5:cd:cf:20:5d:59:62:80:6e:
84:ac:de:e5:48:8c:0a:59:3b:38:e9:12:2d:e6:26:1a:8a:90:
d6:3d:7f:ae:8d:53:32:77:21:de:e0:88:55:8b:7e:83:7f:78:
45:6a:ca:f2:59:8c:5d:74:7d:3a:79:7a:3d:4e:0e:4b:12:c4:
a1:22:0c:f6:d5:8f:d7:c8:fa:8a:a1:3d:fc:49:0b:9e:c1:ce:
14:14:70:9d:5a:ac:f1:bf:36:35:98:4e:3c:59:d5:dc:94:9b:
0e:ac:a4:36:a2:95:45:39:4b:9b:22:6f:5f:c2:15:d8:71:65:
f3:74:a6:f7:e4:de:76:dc:c3:e7:f8:d2:f3:84:09:7e:94:03:
13:30:a1:4e:42:0b:bb:8a:c5:40:fb:ce:96:eb:06:da:9f:01:
61:90:77:16:93:8f:35:96:f2:65:2e:7f:9c:f1:2e:5d:2b:3d:
6d:2e:9a:7f:de:a8:5f:21:a8:cc:2c:56:f5:11:d8:e0:30:90:
6e:b3:17:9f:03:47:ec:a5:bc:4e:11:1c:3e:74:dc:eb:1d:22:
f5:50:be:1c:cd:c9:e2:59:d9:2c:20:c3:19:2d:c6:ba:e0:a4:
46:d0:f4:8e:ec:d1:97:c6:d2:14:af:6c:3c:0e:68:3e:05:5e:
1d:b3:1e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:56 2026 by rpki-client