Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
File: 05EjiA9CdEbV_wfO-WM-htxJGY0.mft (raw, json)
Hash identifier: bXXvdF4GNhs77Pieufbx8VhW1+AT7LQQmZVQDKZlumI=
Subject key identifier: F6:00:22:99:E4:9F:1E:21:E7:A5:5D:D0:D3:00:9D:4D:72:EA:93:28
Authority key identifier: D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
Certificate issuer: /CN=d39123880f427446d5ff07cef9633e86dc49198d
Certificate serial: 019FAAF5DE6764BDAE7D00E41456FF90A858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
Manifest number: 0AC0
Signing time: Tue 28 Jul 2026 23:01:07 +0000
Manifest this update: Tue 28 Jul 2026 23:01:07 +0000
Manifest next update: Wed 29 Jul 2026 23:01:07 +0000
Files and hashes: 1: 05EjiA9CdEbV_wfO-WM-htxJGY0.crl (hash: VbLnC53xroF7DDeX7w9XCfkdUBXiybCljuoOy1bpp+8=)
2: Icxh7ran8QEFrFaor03QcMoTvV8.roa (hash: MFrKxNDqc3uJ1yrSEp7TKqH0r5nZYxDEls6DmflezRU=)
3: o7HXUZ7wql63_rY2SPAoMeVHALU.roa (hash: tSjVjpZBEc5aPZsTVKoDXrBNuRrVoPjUDCvaDRxzkBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:de:67:64:bd:ae:7d:00:e4:14:56:ff:90:a8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39123880f427446d5ff07cef9633e86dc49198d
Validity
Not Before: Jul 28 23:01:07 2026 GMT
Not After : Jul 29 23:01:07 2026 GMT
Subject: CN=f6002299e49f1e21e7a55dd0d3009d4d72ea9328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:d5:9e:00:0b:93:18:61:c5:48:18:a0:f0:
d4:d8:9e:44:01:c8:54:ba:7f:89:15:85:b4:68:1b:
66:9c:2d:68:40:2a:07:07:a5:09:c9:01:37:cb:9f:
ca:35:5b:5b:4d:a8:d7:ec:00:bd:cb:d9:fc:67:f1:
31:1b:7f:08:64:5d:7b:7c:07:90:dc:a8:ab:9f:7d:
92:d3:13:ca:e2:73:b4:86:c2:1b:d7:91:e5:a1:39:
9e:3c:5b:a8:f6:12:c3:b3:d9:31:c0:3e:d0:aa:00:
e3:48:9f:12:ac:e5:1f:5c:19:40:93:fd:ba:e4:8f:
05:af:7c:54:5f:47:29:62:da:86:37:b3:f6:f9:fa:
53:41:89:94:73:97:25:ee:14:e3:48:53:d5:5c:77:
61:fd:72:f7:d6:b1:ba:5a:0e:8f:05:a5:2b:8b:12:
a5:cd:96:66:1d:58:e9:06:e9:11:21:6c:bb:83:b7:
96:09:fb:0b:43:02:1a:7b:2d:be:6b:c8:85:c5:97:
01:12:21:7f:93:7a:7e:e6:3f:a0:ab:3a:15:b0:d2:
66:5f:94:da:54:f1:30:43:5a:b0:75:2f:3b:c7:cc:
0a:b0:61:d3:32:69:4f:0b:7a:dd:2e:ba:fb:26:15:
dd:70:a6:cc:75:29:55:6b:1c:81:6e:3b:fa:14:d8:
3e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:00:22:99:E4:9F:1E:21:E7:A5:5D:D0:D3:00:9D:4D:72:EA:93:28
X509v3 Authority Key Identifier:
keyid:D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f1:15:d0:28:05:0d:c9:b6:0a:d0:a4:f4:8e:33:d3:e4:96:
22:7c:32:2e:f0:ba:76:49:37:17:23:f1:70:25:7e:1d:b9:46:
a7:25:82:9c:1a:11:79:8a:a5:f8:2f:c2:96:02:91:ae:2a:16:
a8:25:48:18:f6:fc:35:17:3b:19:cb:e7:20:50:3b:43:88:8e:
87:56:99:63:7b:71:26:2e:0d:cd:50:0e:06:3a:9b:af:35:81:
39:3c:0a:1f:80:3e:38:a1:e0:29:f0:fb:f4:a0:1a:11:bf:d4:
24:ec:c8:52:3c:60:31:55:58:6e:d8:8c:e0:2a:dc:0a:d8:bb:
6e:ea:40:d5:42:e9:e9:3d:2a:1b:9b:cf:88:ca:3f:62:cf:b9:
4a:fa:a0:5a:72:8b:6c:ba:81:9f:06:ad:d0:84:4f:1f:44:89:
50:b1:1d:2d:c1:96:d6:20:2c:ed:d2:8a:95:c4:db:a7:7c:e5:
ef:bf:09:99:9e:0d:e0:55:56:02:f8:ac:03:1b:df:41:aa:ff:
80:72:62:89:27:d5:46:5f:90:5f:7c:bc:59:f8:fe:c5:12:fb:
14:88:a3:04:e4:79:38:9e:b1:54:51:60:08:2c:a7:46:ee:6d:
4e:88:17:49:f4:c3:f3:60:c7:c6:5a:b0:81:e9:d2:2b:9f:9c:
12:f7:0b:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9d5nZL2ufQDkFFb/kKhYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzOTEyMzg4MGY0Mjc0NDZkNWZmMDdjZWY5NjMzZTg2ZGM0
OTE5OGQwHhcNMjYwNzI4MjMwMTA3WhcNMjYwNzI5MjMwMTA3WjAzMTEwLwYDVQQD
EyhmNjAwMjI5OWU0OWYxZTIxZTdhNTVkZDBkMzAwOWQ0ZDcyZWE5MzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAXVngALkxhhxUgYoPDU2J5EAchU
un+JFYW0aBtmnC1oQCoHB6UJyQE3y5/KNVtbTajX7AC9y9n8Z/ExG38IZF17fAeQ
3Kirn32S0xPK4nO0hsIb15HloTmePFuo9hLDs9kxwD7QqgDjSJ8SrOUfXBlAk/26
5I8Fr3xUX0cpYtqGN7P2+fpTQYmUc5cl7hTjSFPVXHdh/XL31rG6Wg6PBaUrixKl
zZZmHVjpBukRIWy7g7eWCfsLQwIaey2+a8iFxZcBEiF/k3p+5j+gqzoVsNJmX5Ta
VPEwQ1qwdS87x8wKsGHTMmlPC3rdLrr7JhXdcKbMdSlVaxyBbjv6FNg+hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYAIpnknx4h56Vd0NMAnU1y6pMoMB8GA1UdIwQY
MBaAFNORI4gPQnRG1f8HzvljPobcSRmNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDVFamlBOUNkRWJWX3dmTy1XTS1odHhKR1kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82NjFiODQtMTE0ZC00OTI5LWI2ODQt
Y2NhMGFkMjY4NWNhLzEvMDVFamlBOUNkRWJWX3dmTy1XTS1odHhKR1kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82NjFiODQtMTE0ZC00OTI5LWI2ODQtY2NhMGFkMjY4NWNh
LzEvMDVFamlBOUNkRWJWX3dmTy1XTS1odHhKR1kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/EV0CgF
Dcm2CtCk9I4z0+SWInwyLvC6dkk3FyPxcCV+HblGpyWCnBoReYql+C/ClgKRrioW
qCVIGPb8NRc7GcvnIFA7Q4iOh1aZY3txJi4NzVAOBjqbrzWBOTwKH4A+OKHgKfD7
9KAaEb/UJOzIUjxgMVVYbtiM4CrcCti7bupA1ULp6T0qG5vPiMo/Ys+5SvqgWnKL
bLqBnwat0IRPH0SJULEdLcGW1iAs7dKKlcTbp3zl778JmZ4N4FVWAvisAxvfQar/
gHJiiSfVRl+QX3y8Wfj+xRL7FIijBOR5OJ6xVFFgCCynRu5tTogXSfTD82DHxlqw
genSK5+cEvcL3Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 03:02:38 2026 by rpki-client