Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
File: 05EjiA9CdEbV_wfO-WM-htxJGY0.mft (raw, json)
Hash identifier: zJdVW/6biGWXcs2VUp4qhu5DGx5pAU/cql2STFUHgMo=
Subject key identifier: 20:8C:20:A5:60:C9:10:5E:4E:4C:5C:F0:3B:EA:CD:B9:05:A1:87:38
Authority key identifier: D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
Certificate issuer: /CN=d39123880f427446d5ff07cef9633e86dc49198d
Certificate serial: 019F91DA4D2FE849EA9B9F6C3B5B351CB409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
Manifest number: 0AB3
Signing time: Fri 24 Jul 2026 02:00:30 +0000
Manifest this update: Fri 24 Jul 2026 02:00:30 +0000
Manifest next update: Sat 25 Jul 2026 02:00:30 +0000
Files and hashes: 1: 05EjiA9CdEbV_wfO-WM-htxJGY0.crl (hash: A90kyZ/XKGEQVnoQLL584AGWD50MFfybuz0LwlEUw+E=)
2: Icxh7ran8QEFrFaor03QcMoTvV8.roa (hash: MFrKxNDqc3uJ1yrSEp7TKqH0r5nZYxDEls6DmflezRU=)
3: o7HXUZ7wql63_rY2SPAoMeVHALU.roa (hash: tSjVjpZBEc5aPZsTVKoDXrBNuRrVoPjUDCvaDRxzkBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:4d:2f:e8:49:ea:9b:9f:6c:3b:5b:35:1c:b4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39123880f427446d5ff07cef9633e86dc49198d
Validity
Not Before: Jul 24 02:00:30 2026 GMT
Not After : Jul 25 02:00:30 2026 GMT
Subject: CN=208c20a560c9105e4e4c5cf03beacdb905a18738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:5a:2b:ce:60:f8:86:1a:86:e8:17:8e:32:
bc:1e:00:a4:da:53:f6:95:d6:d9:8b:e7:7d:b1:aa:
c1:f1:14:1a:91:60:49:3b:9a:cb:db:b8:d7:ac:cf:
77:1f:60:d9:ec:ce:47:99:29:a5:45:30:2f:46:bb:
b8:2e:1e:e8:7c:51:83:9a:0e:6e:64:76:a4:2b:a4:
18:6f:e5:52:15:7f:86:f9:1b:d0:8c:47:10:fe:99:
52:44:67:34:d0:57:a0:3e:1a:df:42:ac:5b:af:87:
53:7e:51:b5:70:57:ff:8e:ce:c4:78:04:cf:1c:9f:
72:ba:78:14:71:94:e1:f6:ec:c9:bb:73:8f:14:7b:
7d:ee:6f:a7:82:5e:ae:5b:c5:7e:d4:81:29:4c:a5:
0d:a5:90:5f:95:ee:86:64:d0:3b:6e:49:82:50:5b:
66:f6:1b:fe:db:74:13:e0:14:b7:9b:d5:7f:28:ab:
96:67:b9:d8:c9:89:6c:19:8d:f3:92:e0:a8:e2:73:
3b:f8:ba:60:3c:b0:63:84:18:7d:91:ae:e1:39:3a:
c7:ec:55:af:eb:50:a1:1f:e3:83:6f:ce:9f:6e:48:
e1:f5:03:67:ed:cb:19:13:a9:78:cd:1e:16:67:f6:
47:c3:93:ab:48:a2:c9:c4:22:cf:ef:e5:be:9d:6b:
ce:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8C:20:A5:60:C9:10:5E:4E:4C:5C:F0:3B:EA:CD:B9:05:A1:87:38
X509v3 Authority Key Identifier:
keyid:D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:81:b1:8c:74:e4:5d:ce:e7:06:f0:2a:94:8e:1e:57:08:2e:
7a:5d:ed:57:79:12:84:a0:03:17:b3:8b:66:dd:ae:45:0d:7d:
35:0a:79:b3:ee:ce:00:70:c0:cb:bb:3d:80:1a:cd:45:62:64:
05:d9:ec:bb:22:c3:fe:f7:0f:2a:0b:96:e9:b0:98:f7:c2:c6:
77:3a:41:e0:02:66:7c:2b:46:5e:1a:d7:be:99:de:9d:d1:69:
76:85:48:a4:15:24:85:63:3e:8a:3d:6b:25:ef:79:08:c9:b4:
63:4f:eb:be:a7:23:57:f7:8f:eb:c6:0d:95:77:2e:53:eb:c8:
d8:49:35:9e:97:85:69:c5:42:46:4c:e4:19:70:c9:47:6c:f8:
17:1b:41:40:a9:a6:a9:d7:9c:83:37:ab:89:b4:8f:cf:f2:2b:
f7:02:76:27:0f:e7:b0:82:2c:89:4d:7f:2e:61:df:60:1b:93:
99:27:0f:02:14:61:e6:34:e0:4c:5c:83:4d:a2:b1:8a:33:8f:
b9:55:65:9b:38:2e:ed:c1:df:78:48:13:a8:02:cb:ba:c5:cd:
2f:85:71:15:ef:95:0c:5e:35:06:52:a2:ff:0e:90:12:96:f1:
36:b9:77:b8:f0:60:98:20:50:4b:62:cb:a3:e3:92:c6:4e:95:
21:99:b1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:11:21 2026 by rpki-client