Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
File: 05EjiA9CdEbV_wfO-WM-htxJGY0.mft (raw, json)
Hash identifier: FaUhWAizfbPgdTKE7sX414d6rHlv93hySCVJjXgRKuw=
Subject key identifier: 87:85:AC:97:44:3C:E9:FF:2A:D8:B7:34:1A:99:80:E3:33:E7:3E:4A
Authority key identifier: D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
Certificate issuer: /CN=d39123880f427446d5ff07cef9633e86dc49198d
Certificate serial: 019D9BBEB0E69D2F053148AF0255EF55DC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
Manifest number: 09AF
Signing time: Fri 17 Apr 2026 14:00:58 +0000
Manifest this update: Fri 17 Apr 2026 14:00:58 +0000
Manifest next update: Sat 18 Apr 2026 14:00:58 +0000
Files and hashes: 1: 05EjiA9CdEbV_wfO-WM-htxJGY0.crl (hash: npK3RMxho4dStuMp8KcvtY21QCqTghcy8L5voxd+wmo=)
2: Icxh7ran8QEFrFaor03QcMoTvV8.roa (hash: MFrKxNDqc3uJ1yrSEp7TKqH0r5nZYxDEls6DmflezRU=)
3: o7HXUZ7wql63_rY2SPAoMeVHALU.roa (hash: tSjVjpZBEc5aPZsTVKoDXrBNuRrVoPjUDCvaDRxzkBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:b0:e6:9d:2f:05:31:48:af:02:55:ef:55:dc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39123880f427446d5ff07cef9633e86dc49198d
Validity
Not Before: Apr 17 14:00:58 2026 GMT
Not After : Apr 18 14:00:58 2026 GMT
Subject: CN=8785ac97443ce9ff2ad8b7341a9980e333e73e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:bc:0a:8b:10:5a:95:58:20:18:4e:77:61:
d9:4d:80:f2:fe:61:68:45:79:b8:77:d4:77:ac:cc:
ec:0e:eb:d2:1b:e7:31:a1:2f:e5:9f:2f:bf:b7:23:
cb:9d:4e:19:72:a9:5b:0c:3c:a9:a5:33:5b:d7:7f:
85:d8:f1:cb:bc:22:ae:94:62:c0:30:7c:7e:6e:7d:
f7:f1:9f:60:50:0f:cd:08:7b:cb:29:d7:25:56:cf:
a1:30:20:ad:7c:38:67:e7:a6:76:e8:1b:b3:a6:6e:
3c:61:cb:61:52:71:36:b6:77:9b:d5:75:32:54:36:
b7:d6:32:76:d2:b0:29:ad:0b:1c:62:f2:6b:db:f5:
af:b2:b4:3e:12:10:26:11:3a:22:26:15:75:74:b9:
6d:f1:94:df:8f:f5:56:de:de:9b:d4:0f:f8:cc:9c:
22:eb:98:79:1f:2d:09:c6:37:a4:01:02:e1:e0:8c:
c6:7e:7e:e0:80:c9:1f:26:b8:23:64:f4:d8:24:cd:
3d:d7:65:e6:55:40:c0:06:1b:19:4b:fa:e7:cd:01:
3f:ee:a9:66:d4:65:ca:4b:ac:a4:1f:5d:5d:58:51:
94:98:3d:31:1b:c5:32:55:6f:a8:25:8a:a6:60:75:
ec:d4:48:58:c8:92:92:80:76:f4:36:18:9f:8a:48:
df:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:85:AC:97:44:3C:E9:FF:2A:D8:B7:34:1A:99:80:E3:33:E7:3E:4A
X509v3 Authority Key Identifier:
keyid:D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:68:b5:10:a5:18:fc:7c:1f:dd:95:8d:6c:3f:6d:83:fc:41:
16:19:6c:4c:7e:97:2a:00:3f:3b:04:12:05:d1:5d:8e:be:d3:
f2:c0:b4:b8:a4:2c:c0:1b:1c:00:5b:f7:a0:cd:7c:68:a0:ec:
08:27:f1:b1:ec:18:cb:3b:44:14:da:fc:4b:5b:bb:1c:ed:dc:
e5:28:be:a0:01:6d:19:fd:4f:51:fd:50:43:9f:79:c5:1c:2c:
21:7e:a4:d8:30:01:d2:4e:92:59:85:b9:bf:90:7c:28:ed:01:
93:c7:54:48:1b:98:5c:48:e9:10:e0:6a:05:5b:72:4e:22:3b:
21:aa:01:d6:10:9a:99:80:f7:ef:dd:bd:dd:34:a1:5a:8d:cd:
23:12:32:75:a8:d6:59:4f:fe:b0:64:7d:23:f5:e8:78:05:90:
8f:4f:d9:b7:83:ad:04:24:5e:58:70:be:5d:a4:08:11:14:15:
6b:c6:ce:2e:68:24:05:11:11:81:73:26:54:e6:c3:ea:a1:fe:
52:36:59:d1:ad:4b:59:16:4e:ff:5a:5a:ea:fe:94:ef:65:ba:
5a:c7:cc:5b:45:d9:16:58:4f:02:a2:01:6d:ba:10:39:f5:bd:
3c:d6:9e:35:ba:60:35:86:86:ee:20:e0:5a:33:08:74:be:14:
87:7c:06:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:59:17 2026 by rpki-client