Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
File: 05aWp2gOlVKR_q-h77qfvP8viIs.mft (raw, json)
Hash identifier: B/55pQQgI/pfb3vPa9/NO4N705A8GK51ZQo8Xr32E9Q=
Subject key identifier: 49:3C:16:6C:28:D7:B5:AB:EF:7C:17:83:E6:43:EB:AB:A7:7E:B5:BD
Authority key identifier: D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
Certificate issuer: /CN=d39696a7680e955291feafa1efba9fbcff2f888b
Certificate serial: 019D2884919A2FF2819044B869991D54B440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
Manifest number: 1378
Signing time: Thu 26 Mar 2026 05:01:09 +0000
Manifest this update: Thu 26 Mar 2026 05:01:09 +0000
Manifest next update: Fri 27 Mar 2026 05:01:09 +0000
Files and hashes: 1: 05aWp2gOlVKR_q-h77qfvP8viIs.crl (hash: H1jORe8eXKZxLSdfxDzYku7iiqmJNgG7xEMtefbDIVQ=)
2: gbxId3GOowlzCHPpf6Jyfef6KGQ.roa (hash: 4i/aGAudyyDfHz6MTEKI9eUEQHtSeNI1RbC1NE+R+ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:91:9a:2f:f2:81:90:44:b8:69:99:1d:54:b4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39696a7680e955291feafa1efba9fbcff2f888b
Validity
Not Before: Mar 26 05:01:09 2026 GMT
Not After : Mar 27 05:01:09 2026 GMT
Subject: CN=493c166c28d7b5abef7c1783e643ebaba77eb5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:c3:61:c6:23:9a:2a:67:a6:2f:30:0e:41:
21:04:2f:c1:0c:74:17:af:63:49:a9:2c:87:3d:b0:
bb:84:de:4b:cf:47:3d:fd:a7:86:fa:6e:dd:e2:ec:
d4:51:46:1f:ba:1b:c7:27:ce:d6:98:41:cb:fd:bd:
6d:0b:62:ca:7e:3d:14:85:f3:fa:0f:b6:26:2c:91:
7e:52:18:25:8f:5d:6c:58:b8:d3:84:84:cc:75:c4:
36:8b:aa:f0:f8:7f:62:51:7f:0c:a1:b7:a0:4e:be:
a9:a4:f0:34:c9:ee:cb:33:f1:d0:79:57:45:d5:7a:
4b:37:1d:60:93:6d:b0:49:b3:5d:41:e2:fe:3b:c8:
57:ab:74:61:a4:cf:f4:e4:00:e2:2a:68:01:96:31:
40:4c:8b:2c:fb:e2:b1:df:50:0f:8d:95:55:6d:4a:
ec:98:75:dc:81:72:83:34:5f:87:09:ee:9b:73:d5:
33:1a:b6:c9:d6:68:8f:88:f5:27:92:a8:92:a9:2d:
67:24:ba:4c:20:5b:9a:5d:c7:ca:64:18:da:6e:74:
20:94:64:d7:8f:f0:02:a5:6e:cc:8a:83:2f:c3:c0:
06:db:6d:80:95:78:cb:8b:54:9d:49:df:06:0b:36:
6b:e1:2b:39:e0:83:49:93:bc:63:cb:b0:de:15:8d:
21:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3C:16:6C:28:D7:B5:AB:EF:7C:17:83:E6:43:EB:AB:A7:7E:B5:BD
X509v3 Authority Key Identifier:
keyid:D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6f:25:ae:22:56:b5:b4:9a:d6:76:01:4e:1a:e1:a6:b8:da:
eb:cc:de:7e:89:19:6b:ee:ad:8e:15:d4:9b:bc:38:96:ef:50:
75:09:65:09:5b:7b:23:a5:4b:da:16:cf:42:71:4f:e0:7a:6c:
9c:c4:b9:46:68:12:3e:c8:82:b9:68:d4:02:38:52:18:0a:04:
fa:4d:60:54:da:8e:ef:49:8e:83:70:42:e2:89:85:27:79:ea:
7a:6c:f2:9d:5c:be:b9:87:6e:d2:6c:8a:a7:9b:be:3f:8a:4f:
ce:0c:e9:8f:6f:4f:66:14:1d:8a:c6:9e:ee:f1:ae:f5:eb:98:
be:63:fe:0d:f6:3e:31:11:6d:d8:bf:36:4a:4f:9e:65:ad:e2:
d9:95:7c:d3:9c:40:44:e9:77:0e:ec:e6:11:81:b8:5b:04:f4:
63:5e:de:30:db:bb:b4:13:9c:cb:3c:b9:f9:6c:c7:c7:b2:c8:
f5:86:03:7d:fe:c7:03:93:06:57:25:e3:90:e7:d6:ad:8e:53:
42:e8:25:ef:2d:9d:81:ce:2d:be:cd:be:95:47:5b:28:e7:e0:
0e:22:92:e3:75:8a:20:6a:eb:3e:d4:87:55:3c:85:ba:fb:55:
28:5f:52:91:a1:52:d3:3c:d5:22:62:46:fd:5c:fe:8c:fa:2e:
97:7d:a3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:44 2026 by rpki-client