Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
File: 05EjiA9CdEbV_wfO-WM-htxJGY0.mft (raw, json)
Hash identifier: j04Y6sL9RVMzICBve1V6jPpzidRn+TpWIEtkYMEjHfE=
Subject key identifier: 20:C0:CF:E0:2B:2C:59:92:FC:83:18:E1:81:7C:8A:32:DA:23:8A:77
Authority key identifier: D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
Certificate issuer: /CN=d39123880f427446d5ff07cef9633e86dc49198d
Certificate serial: 01A12F213A3329B7D468381947AF7A4B63D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
Manifest number: 0B89
Signing time: Mon 12 Oct 2026 08:01:09 +0000
Manifest this update: Mon 12 Oct 2026 08:01:09 +0000
Manifest next update: Tue 13 Oct 2026 08:01:09 +0000
Files and hashes: 1: 05EjiA9CdEbV_wfO-WM-htxJGY0.crl (hash: pqpgsjpLX06+55nyp+/Q9voXzOwsBAZhdrL+GRlKLCI=)
2: Icxh7ran8QEFrFaor03QcMoTvV8.roa (hash: MFrKxNDqc3uJ1yrSEp7TKqH0r5nZYxDEls6DmflezRU=)
3: o7HXUZ7wql63_rY2SPAoMeVHALU.roa (hash: tSjVjpZBEc5aPZsTVKoDXrBNuRrVoPjUDCvaDRxzkBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:21:3a:33:29:b7:d4:68:38:19:47:af:7a:4b:63:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39123880f427446d5ff07cef9633e86dc49198d
Validity
Not Before: Oct 12 08:01:09 2026 GMT
Not After : Oct 13 08:01:09 2026 GMT
Subject: CN=20c0cfe02b2c5992fc8318e1817c8a32da238a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6a:2d:ff:7d:89:e6:19:15:2d:70:2b:7c:5d:
c0:de:d9:de:e6:6c:5c:01:3e:4f:93:4d:15:19:55:
cd:e0:35:e5:a5:bd:41:55:19:de:59:27:54:40:22:
a3:d0:28:ec:ee:97:d1:a9:18:9f:82:d9:b3:ee:0d:
57:0b:2b:8b:67:a5:b5:87:35:39:03:de:24:7f:2a:
4c:02:2b:21:04:55:a2:58:85:73:d0:57:b5:36:6c:
7b:08:90:4f:fd:34:b0:c8:ed:7d:06:37:40:3f:75:
18:66:76:af:ca:06:ba:e0:ed:f2:98:0d:26:c6:44:
b2:2c:6f:fe:0e:e3:a4:2f:a5:d2:bb:2e:59:ca:30:
c7:d1:0a:b9:a5:86:e2:00:fb:37:ed:ea:64:a5:9e:
a7:e9:9e:2b:56:19:8c:e5:12:b3:34:82:07:37:35:
e4:d8:0d:9a:03:cf:20:ee:3f:3a:7c:3d:73:66:1f:
ba:85:2a:37:6b:0d:4d:69:a2:43:9e:55:fb:89:cb:
bf:7d:57:c0:c4:71:b0:b6:3e:53:05:e6:a6:cb:4d:
e1:09:d8:5e:1b:f3:b4:e8:cd:e3:54:29:d6:1b:06:
44:94:6e:b3:51:79:3b:30:d0:22:08:9b:22:2c:e2:
57:78:65:13:df:0e:e4:21:fe:a7:38:75:ae:d0:c5:
ec:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C0:CF:E0:2B:2C:59:92:FC:83:18:E1:81:7C:8A:32:DA:23:8A:77
X509v3 Authority Key Identifier:
keyid:D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:33:0e:b1:26:cf:f7:76:21:4a:ca:78:bc:2a:01:00:6e:db:
a1:5a:d5:e5:0a:f8:68:0d:71:d4:3f:c0:ac:92:03:bf:7b:c0:
53:07:f1:6e:85:ea:8b:09:ee:8d:a8:0d:d0:63:d1:91:73:53:
d8:59:24:db:25:cc:6d:d2:75:98:62:73:ec:03:73:73:d3:70:
68:8b:94:0c:ce:f4:2b:4d:02:a3:6d:63:18:67:27:41:99:9a:
9b:23:34:96:c3:74:f8:6d:45:29:01:a7:53:08:8e:5c:32:59:
b1:57:c1:08:26:49:e3:97:8b:8d:21:d7:b1:8d:e7:d3:64:a3:
ca:af:ad:75:a1:89:7c:59:16:9e:5c:c6:a8:f5:e7:a8:a8:e7:
77:be:78:3f:48:75:d6:a6:46:16:0b:b5:a6:ce:21:ec:e3:ed:
e7:e2:57:33:d0:97:65:54:b2:ce:b9:33:73:7e:f5:4e:75:ae:
2e:36:e3:cc:d0:7a:db:57:1c:fd:d8:52:72:80:f5:72:86:00:
e2:95:24:c6:03:a8:9d:1e:7f:69:b5:49:e4:60:61:98:f8:35:
38:e5:e4:da:0b:0d:fa:9b:75:08:23:0f:fb:18:0b:e2:e5:cf:
6d:d5:24:38:f9:c2:d5:a5:61:34:f8:ed:1a:6e:22:19:54:68:
bc:41:1f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:19:19 2026 by rpki-client