Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
File: 05SToXmX0x6NWqbMyaa9dX8VwDA.mft (raw, json)
Hash identifier: ArnqERhaT/A/v/SDpRPSgXJJN60OvpqJ2GeN3Wc1tfU=
Subject key identifier: 45:00:CD:A5:C8:A1:2B:4E:25:FF:AB:8D:00:0E:9E:AC:0E:29:18:70
Authority key identifier: D3:94:93:A1:79:97:D3:1E:8D:5A:A6:CC:C9:A6:BD:75:7F:15:C0:30
Certificate issuer: /CN=d39493a17997d31e8d5aa6ccc9a6bd757f15c030
Certificate serial: 01A1DD5DF39F1B9B4C48FFC7D26156ADF815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 04:01:24 +0000
Manifest this update: Sun 15 Nov 2026 04:01:24 +0000
Manifest next update: Mon 16 Nov 2026 04:01:24 +0000
Files and hashes: 1: 05SToXmX0x6NWqbMyaa9dX8VwDA.crl (hash: 1YVxemNGupOuX6UPKAKU9VA67oBFzzJJhozOCxrPQZY=)
2: GYTJOXM2KAErnG1MoWoHjCRsIK8.roa (hash: x/UFZWfoFFTJcB68KF8XFytGvxdsRxCPtJo/zu08E5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5d:f3:9f:1b:9b:4c:48:ff:c7:d2:61:56:ad:f8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39493a17997d31e8d5aa6ccc9a6bd757f15c030
Validity
Not Before: Nov 15 04:01:24 2026 GMT
Not After : Nov 16 04:01:24 2026 GMT
Subject: CN=4500cda5c8a12b4e25ffab8d000e9eac0e291870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:ec:e2:7b:69:a8:10:b6:f5:17:5c:4a:c3:
f2:07:2e:ac:fe:45:fb:68:a3:bb:77:10:a3:ea:42:
fc:0b:5e:c1:8a:88:a9:d2:ec:a5:0c:3d:a5:5e:7b:
ac:c8:04:66:3d:9d:79:99:2a:2e:2c:99:dd:b2:64:
42:9d:14:66:6f:de:6b:0b:6f:a6:55:d7:57:a6:fb:
0d:f3:ca:dc:98:4a:01:99:33:c9:0b:3a:0d:e6:b3:
04:0b:b3:26:eb:f2:d6:8a:7e:1d:f7:86:4e:f7:56:
3a:6a:45:9e:42:ef:f5:46:33:8f:f7:81:66:40:1a:
f2:8d:7f:da:0b:20:ed:00:12:2b:d9:e7:68:72:96:
e1:05:25:10:5e:71:a8:c7:da:b4:d6:3c:8b:34:2a:
ac:43:e7:be:5e:a0:71:7f:c8:63:1c:55:52:83:47:
a1:d8:3e:d1:1f:9b:dd:45:17:e8:14:3d:1e:24:3b:
ef:05:40:37:c6:d9:37:52:c0:45:e2:b7:1b:e3:31:
e3:d9:4b:ea:9f:54:00:bb:b8:43:bf:97:e9:ae:bc:
94:5f:10:b7:c6:68:f5:81:b6:9a:61:62:9a:81:64:
d6:f5:90:d5:23:2e:87:71:ce:b6:52:76:23:c7:3f:
97:20:da:1a:0c:3d:74:8e:39:4f:a3:b8:2d:41:9f:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:00:CD:A5:C8:A1:2B:4E:25:FF:AB:8D:00:0E:9E:AC:0E:29:18:70
X509v3 Authority Key Identifier:
keyid:D3:94:93:A1:79:97:D3:1E:8D:5A:A6:CC:C9:A6:BD:75:7F:15:C0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b8:16:c5:ce:ef:4c:b5:f4:ed:3f:7c:58:4c:9f:07:d7:91:
5f:cb:01:94:9f:c7:46:3b:20:1f:ff:c0:5d:9f:01:ea:65:96:
91:04:93:aa:89:13:99:47:50:fc:5c:3c:f6:cb:cc:9f:e0:8f:
f6:d3:33:35:75:9d:b2:c2:c8:64:96:e5:0e:10:6d:0e:14:2d:
5a:86:fa:fc:ff:cc:49:51:0b:69:2f:e3:b7:39:00:76:b7:77:
9a:7d:ca:db:c8:1f:94:88:45:f0:b5:2b:55:42:e4:e1:c1:70:
88:67:46:93:90:f2:4d:5b:99:bf:0f:e8:20:0f:9f:a5:3d:3b:
09:a9:cb:13:7b:7c:bc:7a:cb:cc:1f:31:6b:e8:f6:14:cf:4d:
42:d0:00:51:b2:a6:8a:9d:a4:18:58:8d:4b:04:7e:6f:ba:f0:
57:37:4f:da:68:28:02:82:53:2c:84:49:5e:45:6a:6a:af:eb:
6e:a6:b1:ba:4b:bd:1d:c2:a4:9d:7e:84:a3:70:69:4c:9b:20:
67:ee:61:3d:c1:36:b9:46:57:0b:69:55:44:56:72:78:03:ec:
f7:87:e0:89:a2:07:85:28:ce:05:15:8e:fe:a0:15:87:4a:7c:
86:59:c6:1b:81:e9:ba:a8:92:73:cf:b8:43:09:8d:96:c3:93:
d4:ce:f8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:50:35 2026 by rpki-client