Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
File: 05EjiA9CdEbV_wfO-WM-htxJGY0.mft (raw, json)
Hash identifier: MOUed5DIf2G6BAmP43ZGwUXUauOndksiVPGvq5omW64=
Subject key identifier: C1:EC:BA:B4:0D:47:05:41:C7:B5:92:01:AF:87:6B:9F:1C:E7:C7:53
Authority key identifier: D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
Certificate issuer: /CN=d39123880f427446d5ff07cef9633e86dc49198d
Certificate serial: 019CAC469E9797CBD975B85F111F7F298EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
Manifest number: 0933
Signing time: Mon 02 Mar 2026 02:00:35 +0000
Manifest this update: Mon 02 Mar 2026 02:00:35 +0000
Manifest next update: Tue 03 Mar 2026 02:00:35 +0000
Files and hashes: 1: 05EjiA9CdEbV_wfO-WM-htxJGY0.crl (hash: eMKsuFVE/rXHAiO6JFnRbrgg5lNmi5b00Istr2dpgrA=)
2: Icxh7ran8QEFrFaor03QcMoTvV8.roa (hash: MFrKxNDqc3uJ1yrSEp7TKqH0r5nZYxDEls6DmflezRU=)
3: o7HXUZ7wql63_rY2SPAoMeVHALU.roa (hash: tSjVjpZBEc5aPZsTVKoDXrBNuRrVoPjUDCvaDRxzkBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:9e:97:97:cb:d9:75:b8:5f:11:1f:7f:29:8e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39123880f427446d5ff07cef9633e86dc49198d
Validity
Not Before: Mar 2 02:00:35 2026 GMT
Not After : Mar 3 02:00:35 2026 GMT
Subject: CN=c1ecbab40d470541c7b59201af876b9f1ce7c753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:a6:eb:82:4c:70:ce:c5:41:29:e8:18:39:
2e:4f:2d:6a:56:40:77:29:99:5a:e9:1f:4f:7c:1d:
0d:80:55:f0:e1:d2:b4:7a:3f:ce:11:01:a4:82:c4:
79:fb:fa:b6:a4:e5:0c:b3:3a:c9:62:ee:3c:d2:ba:
b6:0a:fa:02:11:0d:01:6f:ec:c5:3c:d0:0d:eb:4a:
9d:85:48:8a:39:61:f4:75:48:32:89:8f:d1:0d:03:
c5:2b:6f:f0:71:e0:aa:8d:23:f4:86:de:b7:89:82:
d9:28:d9:d0:e3:8b:df:d4:c2:fc:25:af:77:96:57:
21:57:12:48:8d:91:88:7a:45:96:9e:1e:64:c6:8d:
79:13:03:eb:8f:c7:04:0f:39:1d:aa:b5:b4:9a:84:
78:51:21:4b:67:fa:e0:b4:15:06:b4:99:fc:16:cd:
25:a1:39:41:54:7c:e3:48:7e:14:4b:d9:a3:f3:b3:
12:5d:92:79:c5:f9:80:4e:0d:b4:05:a5:32:f9:4a:
1b:2b:12:c0:07:cc:3a:f0:1c:36:74:92:f0:f1:62:
04:e8:45:63:3c:e4:c7:94:5d:4d:5b:d1:85:53:93:
c2:1e:f9:c9:42:8a:7c:c1:1b:c3:94:eb:24:8f:71:
26:87:68:69:a1:3b:31:70:a0:07:cc:f1:c9:b6:60:
82:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EC:BA:B4:0D:47:05:41:C7:B5:92:01:AF:87:6B:9F:1C:E7:C7:53
X509v3 Authority Key Identifier:
keyid:D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4a:78:75:f1:b7:59:94:ec:36:91:c6:6d:80:7a:a7:27:fd:
f9:6b:26:63:ae:f0:69:2d:d0:9c:8e:30:c3:50:6d:51:14:69:
82:97:e1:95:47:2f:b4:d9:90:bb:e7:e6:62:54:e3:33:78:ca:
43:8d:ce:57:12:4b:40:52:b7:37:aa:05:d0:85:bd:51:1e:0d:
64:fa:73:6c:fc:92:13:e7:f2:f9:e0:b4:97:05:31:e8:ca:b4:
75:89:e9:63:9d:54:88:c5:dc:02:8b:f7:30:a2:53:45:31:9a:
66:e0:a3:e4:58:b7:f0:74:ac:d9:de:ab:a8:76:6e:27:10:98:
3b:38:ea:49:64:3b:bd:86:18:83:71:18:6a:04:67:ec:02:82:
40:c8:34:fd:ff:bf:de:54:00:a1:94:8b:c8:5b:79:fa:fd:4c:
0a:44:9e:39:d7:bb:a6:84:63:f8:7c:d9:7f:9a:b9:98:68:8f:
d6:89:f4:42:f7:23:61:f4:af:58:da:0d:c7:89:7c:94:ea:c4:
55:81:7b:0a:fc:f9:ab:6e:26:77:37:1e:ef:9a:6e:64:e8:6a:
f4:71:0f:de:3b:cf:05:52:d5:26:7e:6d:76:ea:b1:c2:72:5d:
ea:58:d4:5e:b1:9c:bf:3f:c5:b3:0d:12:d9:c7:f1:a9:ac:7c:
5c:a7:26:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:07 2026 by rpki-client