Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
File: 05EjiA9CdEbV_wfO-WM-htxJGY0.mft (raw, json)
Hash identifier: 7IE0MNL4ZR0fL7RLmnMJeK/4vEzOLf0NT/8AbgVvWrM=
Subject key identifier: 8F:F3:C6:CC:85:AC:AB:32:1A:6E:FE:42:36:F3:0A:1E:F1:B7:09:A8
Authority key identifier: D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
Certificate issuer: /CN=d39123880f427446d5ff07cef9633e86dc49198d
Certificate serial: 019E307245C73A12FEA55314EFA4B0BE48AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
Manifest number: 09FC
Signing time: Sat 16 May 2026 11:00:55 +0000
Manifest this update: Sat 16 May 2026 11:00:55 +0000
Manifest next update: Sun 17 May 2026 11:00:55 +0000
Files and hashes: 1: 05EjiA9CdEbV_wfO-WM-htxJGY0.crl (hash: 3DN6AhFH9CHc5botjWLoAZp44ZABPm6g8uPY0F7z48M=)
2: Icxh7ran8QEFrFaor03QcMoTvV8.roa (hash: MFrKxNDqc3uJ1yrSEp7TKqH0r5nZYxDEls6DmflezRU=)
3: o7HXUZ7wql63_rY2SPAoMeVHALU.roa (hash: tSjVjpZBEc5aPZsTVKoDXrBNuRrVoPjUDCvaDRxzkBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:45:c7:3a:12:fe:a5:53:14:ef:a4:b0:be:48:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39123880f427446d5ff07cef9633e86dc49198d
Validity
Not Before: May 16 11:00:55 2026 GMT
Not After : May 17 11:00:55 2026 GMT
Subject: CN=8ff3c6cc85acab321a6efe4236f30a1ef1b709a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e6:ba:fd:67:2d:86:05:77:1f:e7:53:1d:53:
31:c2:73:ab:12:62:8b:b5:a6:6e:c8:5e:e3:c7:09:
a0:6f:99:a5:86:9e:e8:cb:1d:4a:a3:0a:b2:49:47:
60:9c:ae:ca:0b:4a:5e:17:27:05:96:eb:b0:38:17:
1b:09:34:42:1d:1f:09:62:1d:14:04:e1:83:66:39:
a7:92:58:4c:be:c1:1c:18:b1:1f:3d:1c:6f:d5:f4:
30:2c:da:51:81:a9:f2:67:1c:7c:51:4e:6f:20:67:
6d:67:38:35:f4:cf:96:f4:07:57:fe:ea:1c:3d:ef:
b7:69:18:1a:2f:a8:a8:37:7e:6a:d8:60:ec:7b:4d:
5c:a1:ad:d6:0d:1f:cc:4e:69:5a:c8:72:04:c5:86:
8d:23:a5:38:e7:e4:0a:ba:5a:d7:4a:96:e3:08:2c:
49:34:a1:a6:40:8d:d1:a3:d7:f0:42:e0:44:ec:a6:
0d:7b:74:89:27:db:1e:87:09:e2:bd:f4:08:79:da:
28:d6:29:71:38:54:97:8e:15:e1:b4:e8:81:b0:2e:
68:c0:13:59:a6:ce:2d:11:61:95:d5:e1:ca:89:66:
30:59:eb:89:42:ea:91:2a:9d:f8:13:34:56:13:44:
aa:dc:75:a3:8c:d0:df:d0:09:52:31:1a:cf:52:3a:
b4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F3:C6:CC:85:AC:AB:32:1A:6E:FE:42:36:F3:0A:1E:F1:B7:09:A8
X509v3 Authority Key Identifier:
keyid:D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ce:8b:e5:6d:3c:b3:69:0b:69:c2:31:2b:c3:0b:70:f6:fe:
8d:2f:25:14:a5:26:5b:8a:b2:62:c0:91:6e:24:dc:c1:18:df:
05:f9:e6:e5:91:98:46:b5:ec:1b:e5:0f:3b:92:4a:ee:76:83:
b0:9d:4f:c1:ec:47:7e:c8:42:fc:ee:60:3d:c3:73:9f:4d:58:
4d:10:98:be:56:13:15:66:a3:65:8c:7f:21:55:bb:67:c5:5e:
37:51:68:07:ff:a4:70:b6:8a:a5:5a:93:43:a9:36:e1:1a:1e:
45:0e:55:19:e1:b6:41:ad:be:0c:1f:07:aa:01:51:37:ee:c0:
fe:7d:09:05:8e:64:a6:b9:59:c6:ab:e5:e8:b0:d2:a7:c6:25:
de:41:cb:16:be:f1:c5:e7:e0:06:c9:a1:79:3f:b7:19:33:43:
a1:c3:69:4f:d0:d5:62:d7:c9:92:38:ec:a2:08:fe:44:53:2a:
27:36:69:ad:5b:0b:62:c8:92:55:1b:3e:51:3c:da:ae:1e:1c:
a4:12:2f:1c:86:65:1d:6b:4d:96:76:24:77:9e:b3:9e:f4:02:
b2:21:a5:f1:64:ee:65:cc:07:09:6e:67:2e:36:cc:86:81:5f:
e6:2c:6a:18:2c:7a:06:5a:6f:9b:4d:01:b7:42:6f:c1:30:6a:
ae:c2:46:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:44 2026 by rpki-client