Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
File: 05EjiA9CdEbV_wfO-WM-htxJGY0.mft (raw, json)
Hash identifier: hyBIB9+a3MG9sSnAP0ECyjayOS37BQKJ0Yzqmr1/75M=
Subject key identifier: AE:40:2D:A3:C4:90:CA:94:0B:2D:9D:6A:5D:5E:DC:E5:42:57:EA:0A
Authority key identifier: D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
Certificate issuer: /CN=d39123880f427446d5ff07cef9633e86dc49198d
Certificate serial: 019E1D2260ABE1BBFB2F97BD735FE0F3656E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
Manifest number: 09F2
Signing time: Tue 12 May 2026 17:00:52 +0000
Manifest this update: Tue 12 May 2026 17:00:52 +0000
Manifest next update: Wed 13 May 2026 17:00:52 +0000
Files and hashes: 1: 05EjiA9CdEbV_wfO-WM-htxJGY0.crl (hash: 9RL4hVeHPdOjvXSatevgq65cRsElwS3sKDDbWBEuuws=)
2: Icxh7ran8QEFrFaor03QcMoTvV8.roa (hash: MFrKxNDqc3uJ1yrSEp7TKqH0r5nZYxDEls6DmflezRU=)
3: o7HXUZ7wql63_rY2SPAoMeVHALU.roa (hash: tSjVjpZBEc5aPZsTVKoDXrBNuRrVoPjUDCvaDRxzkBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:60:ab:e1:bb:fb:2f:97:bd:73:5f:e0:f3:65:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39123880f427446d5ff07cef9633e86dc49198d
Validity
Not Before: May 12 17:00:52 2026 GMT
Not After : May 13 17:00:52 2026 GMT
Subject: CN=ae402da3c490ca940b2d9d6a5d5edce54257ea0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:c6:6f:53:b4:61:86:df:ac:33:e5:d9:9b:
ba:20:1f:f0:3b:08:01:c9:a4:e0:42:86:62:99:13:
01:e8:f8:ac:d6:a0:0e:ce:5b:e3:a4:2d:12:22:bc:
1c:d5:f6:e9:b9:62:3f:0b:7c:3f:e9:17:67:0a:ab:
78:ed:4e:8f:66:bf:9b:41:88:8b:3c:29:68:b7:b7:
f7:d9:d1:0c:6c:45:dd:74:3e:a0:67:ab:eb:03:34:
95:28:92:8c:23:fe:11:b2:1a:dc:8b:ad:28:e7:13:
c4:2b:d3:1d:cc:f1:28:c5:aa:ac:d1:ba:97:dc:d7:
66:33:79:3a:04:91:e9:13:6e:97:81:ff:66:c8:7e:
3b:b0:73:d1:e9:98:cf:87:b0:23:2a:00:a7:84:80:
d6:d2:1b:85:2d:f6:d9:09:7a:0b:63:10:9a:f9:68:
77:c0:78:f7:1d:c4:70:0d:53:49:8a:5c:b7:35:6c:
b4:eb:b6:b0:1a:2d:8d:c0:ab:0c:78:a9:e5:eb:41:
e1:f8:8b:5e:62:df:08:98:d9:9f:f0:a9:f3:ec:b7:
7a:67:57:5c:d4:db:d0:9f:08:8b:21:7e:af:30:7e:
3c:60:0a:1f:4e:aa:1e:94:a9:f6:66:30:85:fb:3a:
20:8e:e9:52:9d:8c:90:7f:66:db:a6:b8:15:f2:fd:
80:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:40:2D:A3:C4:90:CA:94:0B:2D:9D:6A:5D:5E:DC:E5:42:57:EA:0A
X509v3 Authority Key Identifier:
keyid:D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ab:4e:d9:fc:ba:c2:6b:f9:b4:4b:83:14:e7:40:23:02:a1:
0e:50:b2:00:51:95:c2:d8:92:5f:1e:80:7d:c9:b9:4c:6b:8a:
d1:70:92:d5:24:56:8c:77:a4:a6:f8:8b:a0:4e:73:b4:0d:40:
2c:7e:35:44:f3:7c:76:a1:a1:fa:18:7a:be:40:6a:0c:53:20:
b7:61:0a:df:20:e8:83:2d:41:78:2f:f5:9e:b0:19:0a:f6:21:
e9:df:57:2d:bf:fa:81:8a:8c:c2:64:63:6e:c1:f6:fd:8a:31:
cb:25:35:3f:1b:92:5f:a3:01:b1:37:78:87:e6:ed:14:73:a3:
b5:10:4d:74:f3:80:ec:e5:56:4c:6e:06:51:54:05:27:c5:55:
6c:44:29:16:ef:d2:15:16:e1:48:0a:e9:8c:51:60:66:88:77:
cb:68:37:08:b9:87:86:a5:d2:fa:92:2f:b5:50:d7:2f:cb:fd:
22:a3:a9:8e:38:6c:98:6e:3a:38:4e:d1:f5:87:73:38:1d:95:
d0:37:4c:72:d8:9a:55:d0:09:2d:ed:a2:88:92:71:b0:89:c8:
b3:38:df:b6:f8:a7:ae:1e:17:11:dc:fb:e1:96:16:db:1e:a8:
8b:6e:d2:e2:7c:0f:7d:88:44:92:95:48:a9:5c:a3:b6:97:10:
25:e0:7c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:26 2026 by rpki-client