Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
File: 05EjiA9CdEbV_wfO-WM-htxJGY0.mft (raw, json)
Hash identifier: 9F4ko2YFM5FPeGFsNUi9lGC9UX7mK8WcX+3zGw1NIVI=
Subject key identifier: 70:CB:D7:9E:21:17:42:44:30:6F:B1:1C:BB:11:34:7A:45:35:07:DF
Authority key identifier: D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
Certificate issuer: /CN=d39123880f427446d5ff07cef9633e86dc49198d
Certificate serial: 019D3940C4F9DEE14765EA9B4A8834D58FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
Manifest number: 097C
Signing time: Sun 29 Mar 2026 11:00:39 +0000
Manifest this update: Sun 29 Mar 2026 11:00:39 +0000
Manifest next update: Mon 30 Mar 2026 11:00:39 +0000
Files and hashes: 1: 05EjiA9CdEbV_wfO-WM-htxJGY0.crl (hash: U1+zHfF5fohghNNIY3QMiCCJNdDI/ofiJVqxrLlwKDQ=)
2: Icxh7ran8QEFrFaor03QcMoTvV8.roa (hash: MFrKxNDqc3uJ1yrSEp7TKqH0r5nZYxDEls6DmflezRU=)
3: o7HXUZ7wql63_rY2SPAoMeVHALU.roa (hash: tSjVjpZBEc5aPZsTVKoDXrBNuRrVoPjUDCvaDRxzkBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:c4:f9:de:e1:47:65:ea:9b:4a:88:34:d5:8f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39123880f427446d5ff07cef9633e86dc49198d
Validity
Not Before: Mar 29 11:00:39 2026 GMT
Not After : Mar 30 11:00:39 2026 GMT
Subject: CN=70cbd79e21174244306fb11cbb11347a453507df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f8:02:bf:d1:bd:47:e4:ab:95:65:4b:ca:f2:
68:14:17:a1:00:5f:08:83:d2:ed:71:ee:71:f2:06:
94:5b:0b:50:91:9a:f8:14:a8:6a:d1:84:26:ed:7e:
f4:33:8f:70:c0:f6:b8:02:66:58:b8:66:a7:50:64:
f1:2f:b3:3b:8a:50:46:9f:99:f6:a7:d1:f5:4c:77:
7f:9c:02:0c:11:2a:fd:ad:68:b6:f1:6b:7e:a3:d7:
5d:ea:71:0b:90:d9:8e:3e:e1:9e:ef:6f:ee:f8:64:
53:35:76:b3:17:2b:08:f6:ba:0c:df:dc:74:af:1a:
fc:08:c6:25:cf:15:0f:34:2f:b4:97:b6:10:9a:e8:
01:fd:db:e0:26:cb:72:69:73:02:80:30:31:28:c5:
ac:6a:1f:5f:08:7d:71:22:07:b0:df:43:0b:2a:f2:
5a:8d:0b:f8:41:95:82:9b:12:54:f4:95:8c:2a:01:
a0:f2:32:1c:18:0f:d0:5a:ff:65:6d:47:3b:b6:de:
6b:60:01:2a:4a:bb:70:8e:2d:f0:e0:3e:c7:2a:9c:
74:ad:58:d7:87:90:68:f6:7c:83:20:ed:8b:13:e8:
3f:b4:91:77:55:53:4f:a4:7e:b6:20:e9:54:e4:82:
e9:bd:14:c6:ec:4a:4d:2d:c6:d4:50:5e:d9:2f:9e:
8f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CB:D7:9E:21:17:42:44:30:6F:B1:1C:BB:11:34:7A:45:35:07:DF
X509v3 Authority Key Identifier:
keyid:D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:96:b5:d9:3f:49:93:0b:1d:3a:a7:5d:66:ae:bc:d7:1d:df:
13:bd:94:1e:13:fc:3d:84:4a:32:ba:33:8a:2a:f2:49:c5:a9:
68:63:9f:cb:6b:77:31:ea:6e:eb:4b:1b:39:3f:36:f3:3d:65:
11:51:59:e4:de:f9:d3:d4:9d:36:8a:83:22:5f:0f:f1:6b:c0:
0a:22:3c:d6:27:df:8e:a0:73:74:c6:f2:8a:8f:fa:0f:f3:61:
a6:8a:d6:ac:88:e0:79:de:92:29:16:5f:50:ba:e7:e9:a0:0e:
01:8c:68:c3:bb:c8:39:14:73:37:dd:67:60:dd:de:3b:9e:48:
80:70:a7:6c:98:6e:25:d4:05:e8:d9:2b:03:26:61:87:3a:2f:
1d:2b:05:04:c5:4e:fe:5d:a0:9c:53:af:ce:a6:da:5b:47:5c:
53:d1:6b:9c:cf:ea:c9:a5:5a:c0:1d:80:75:a3:83:7c:94:4b:
6f:70:d9:5d:43:5a:06:f4:72:45:68:bf:b5:3f:21:da:d3:52:
86:6d:09:aa:61:11:c1:de:ad:a7:6e:a1:c8:5e:23:18:38:83:
4e:61:85:47:76:cb:db:51:a3:53:8e:b7:05:b5:32:e4:1c:3c:
a6:26:fb:67:eb:c3:53:89:ce:4c:ac:20:b8:65:87:f6:26:c0:
96:3d:9f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:43 2026 by rpki-client