Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
File: 05aWp2gOlVKR_q-h77qfvP8viIs.mft (raw, json)
Hash identifier: TrdBOu+uhK3FGpHTkipSwN5U6/DfL8bCYr7Zg+BH1yg=
Subject key identifier: C6:6C:1E:68:7B:40:8B:FE:81:E6:BB:06:0A:CF:CE:9D:7C:64:ED:17
Authority key identifier: D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
Certificate issuer: /CN=d39696a7680e955291feafa1efba9fbcff2f888b
Certificate serial: 019DD2766C079D1B39958CC9B29A919AB223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
Manifest number: 13D0
Signing time: Tue 28 Apr 2026 05:01:09 +0000
Manifest this update: Tue 28 Apr 2026 05:01:09 +0000
Manifest next update: Wed 29 Apr 2026 05:01:09 +0000
Files and hashes: 1: 05aWp2gOlVKR_q-h77qfvP8viIs.crl (hash: nqnC16330Fz9DI8WBk9i6Oj6RU2fgzBTFfVYpySDyMQ=)
2: gbxId3GOowlzCHPpf6Jyfef6KGQ.roa (hash: 4i/aGAudyyDfHz6MTEKI9eUEQHtSeNI1RbC1NE+R+ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d2:76:6c:07:9d:1b:39:95:8c:c9:b2:9a:91:9a:b2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39696a7680e955291feafa1efba9fbcff2f888b
Validity
Not Before: Apr 28 05:01:09 2026 GMT
Not After : Apr 29 05:01:09 2026 GMT
Subject: CN=c66c1e687b408bfe81e6bb060acfce9d7c64ed17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a6:d2:3f:74:92:bc:e7:af:78:9f:af:71:11:
48:0f:9a:88:79:b9:3d:0c:23:5c:9f:5c:88:8e:ef:
7f:9d:75:f7:47:3a:e9:c0:21:2f:58:da:0f:77:29:
1b:28:27:4a:34:57:27:a9:ad:8a:38:45:9c:37:58:
f8:a4:01:6b:ec:55:5c:0d:72:0b:ed:76:32:d7:a4:
5c:8a:22:bd:46:87:e1:c7:e9:a6:2c:5a:51:7e:7e:
f2:74:3a:65:b3:f4:26:8c:2c:05:da:e1:be:ff:07:
be:5a:ae:a3:b6:7b:56:9b:9b:83:45:1f:d8:bb:df:
d4:5c:4a:dc:74:b4:a0:c9:d2:84:09:cd:05:a6:40:
47:22:c4:8f:d4:ef:78:3f:6a:8e:61:31:d0:10:b2:
2b:58:d9:67:47:09:05:78:db:31:b5:7d:14:6a:21:
f6:1a:12:29:dd:dd:83:7c:3a:b7:45:d1:f8:fe:7e:
c0:1e:74:8d:f9:75:82:ac:61:47:00:ed:ec:e5:2e:
21:d3:16:44:f9:cc:8e:51:4b:63:81:aa:0c:a3:ce:
40:dd:b1:1d:c9:48:2e:d1:4c:93:2e:8f:1f:5a:b5:
fd:f7:cb:b3:73:87:4f:7f:23:48:13:64:35:2c:42:
ac:34:41:f2:9a:64:32:03:35:15:a6:d5:67:99:06:
aa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6C:1E:68:7B:40:8B:FE:81:E6:BB:06:0A:CF:CE:9D:7C:64:ED:17
X509v3 Authority Key Identifier:
keyid:D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f2:76:aa:9f:70:2f:67:83:7d:4d:d2:d7:2e:cd:79:db:29:
a1:53:b3:c8:45:86:11:11:61:08:3e:83:62:06:05:b0:ac:78:
57:38:7b:62:b3:93:fc:1e:76:a9:a2:4f:56:b5:8a:f7:e6:3f:
13:c3:38:ff:39:da:15:ab:84:67:b8:79:b6:da:82:bd:2b:dc:
77:a0:82:a8:5b:2a:b3:26:cd:c8:84:b5:fc:17:97:43:d1:49:
8b:c2:e5:95:32:32:44:8d:82:af:d1:74:81:05:a3:26:bb:8c:
5c:66:92:2b:9b:3d:15:41:5a:d3:a3:3f:9e:e9:73:8b:15:49:
b9:fd:47:c7:18:e9:d3:df:75:7f:23:c9:6a:26:be:1f:b8:64:
36:f9:82:47:e0:51:18:ce:43:9a:f7:ca:3c:bf:1e:12:12:96:
5d:11:bc:ae:31:0a:5a:d5:0a:e7:4d:02:42:e6:fe:37:06:fd:
1b:34:c0:21:f9:45:8c:dd:cd:5f:44:af:aa:db:a2:5a:93:3b:
bc:e9:19:e0:7b:28:b1:13:60:9a:8a:0a:bf:6e:41:de:8f:60:
ed:3c:8c:76:d7:82:a3:11:ca:05:b7:31:f2:5c:55:e1:62:29:
05:6f:84:96:70:6d:ae:c2:68:33:9e:e1:fb:10:0b:40:ed:31:
6d:e7:ab:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 08:22:37 2026 by rpki-client