Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
File: 05EjiA9CdEbV_wfO-WM-htxJGY0.mft (raw, json)
Hash identifier: HVOT5kQHu4ZAU33VruDo/Aw1CDei/r/q33GIsInoycc=
Subject key identifier: 5B:12:EB:FA:F5:8C:C4:13:9C:A1:A3:8A:60:CE:98:31:AD:B1:FA:BE
Authority key identifier: D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
Certificate issuer: /CN=d39123880f427446d5ff07cef9633e86dc49198d
Certificate serial: 019D25F18721A8ABBDF1878E17957093DF47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
Manifest number: 0972
Signing time: Wed 25 Mar 2026 17:01:18 +0000
Manifest this update: Wed 25 Mar 2026 17:01:18 +0000
Manifest next update: Thu 26 Mar 2026 17:01:18 +0000
Files and hashes: 1: 05EjiA9CdEbV_wfO-WM-htxJGY0.crl (hash: CNlVMf8ytLz6jtskNXlvDmWvdtv//JEVbJ7l3RsCLD8=)
2: Icxh7ran8QEFrFaor03QcMoTvV8.roa (hash: MFrKxNDqc3uJ1yrSEp7TKqH0r5nZYxDEls6DmflezRU=)
3: o7HXUZ7wql63_rY2SPAoMeVHALU.roa (hash: tSjVjpZBEc5aPZsTVKoDXrBNuRrVoPjUDCvaDRxzkBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:87:21:a8:ab:bd:f1:87:8e:17:95:70:93:df:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39123880f427446d5ff07cef9633e86dc49198d
Validity
Not Before: Mar 25 17:01:18 2026 GMT
Not After : Mar 26 17:01:18 2026 GMT
Subject: CN=5b12ebfaf58cc4139ca1a38a60ce9831adb1fabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:60:c0:04:c0:e0:73:35:03:4c:97:c1:57:
a2:45:e3:5a:61:63:f2:ba:2c:7e:5a:59:9d:20:60:
4b:31:9c:4b:f6:22:36:9f:0c:a4:00:cf:2d:0a:a0:
0a:da:c7:f5:6b:9f:ef:c9:4a:78:7f:92:f6:6b:0b:
74:3e:9e:ff:de:43:94:51:99:d1:ab:3c:9a:3f:10:
b1:bf:62:6b:1a:9a:ec:df:53:ad:d5:77:28:d8:c9:
ef:2b:5f:6d:1a:0a:16:57:b5:b1:92:44:9c:83:26:
8c:a2:1b:95:48:43:95:e5:b0:34:08:14:5c:b9:03:
7b:58:a3:2b:c5:09:78:72:a2:13:14:21:fd:6c:a4:
e2:55:b8:40:8c:e2:0e:c2:08:9c:9b:71:78:9f:61:
99:0e:17:bf:44:2c:39:ac:ad:a3:92:78:80:2f:71:
03:18:8d:d2:fc:db:35:f7:6b:85:b7:cc:fa:ed:97:
ca:91:5b:d7:ba:b2:58:d9:33:eb:f9:65:85:65:79:
db:c1:ae:ae:54:c7:1f:17:b4:22:b6:b8:d2:f8:36:
15:d3:ce:db:ca:e6:f5:71:b0:04:3f:53:6e:46:eb:
22:0d:0c:1b:41:54:f1:13:d3:ba:5f:06:96:38:f6:
bf:94:0f:c6:6d:1f:3d:59:31:ad:7b:42:d6:54:7e:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:12:EB:FA:F5:8C:C4:13:9C:A1:A3:8A:60:CE:98:31:AD:B1:FA:BE
X509v3 Authority Key Identifier:
keyid:D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e4:a1:66:41:bd:66:a4:71:fc:6e:69:dd:3b:e6:2f:2b:ea:
53:c8:fd:c4:b1:40:18:e7:17:f8:ad:67:f8:95:cd:56:6c:76:
3e:c3:9e:7c:07:1e:d9:f8:c1:69:2a:44:2d:ac:81:eb:a7:dc:
c7:46:58:bc:3d:6e:cd:db:21:ab:d0:60:f5:b1:cb:cf:dc:43:
d2:19:e8:af:eb:c4:4b:e2:66:ef:fa:3d:11:51:8b:72:00:68:
49:25:d4:ba:0a:de:dc:84:f8:6d:0b:2e:c5:cb:39:63:34:a6:
ed:0e:73:f9:4b:50:ca:d7:85:8f:64:f6:44:e7:da:f9:ae:e9:
80:ee:9f:09:9e:22:d7:4f:79:2b:50:04:5d:1a:98:39:ab:10:
14:f3:c3:0b:0e:43:c2:a0:af:c0:15:c6:af:81:ff:15:47:e6:
82:2f:0c:f3:86:ed:58:46:67:b4:a4:70:be:8e:2d:a7:8f:27:
36:49:e5:12:2c:b2:2a:27:d4:ca:e3:8c:d6:ca:20:53:ec:37:
4c:57:c1:63:27:3e:cb:07:ce:61:f6:dd:e9:40:86:ba:f6:3b:
9b:a7:0c:4c:95:30:f9:7c:f5:6a:8f:5d:9a:96:78:b6:6a:a0:
72:b8:6e:a0:67:e4:e1:30:ae:a7:c5:d2:19:59:1f:fc:7a:2c:
69:73:2a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:58:36 2026 by rpki-client