Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
File: 05aWp2gOlVKR_q-h77qfvP8viIs.mft (raw, json)
Hash identifier: VS+XJgiiTRN9G9aAIYLY4gdrXo8UbPknE7RiHl+bQlg=
Subject key identifier: 4A:A6:DA:42:DF:F7:D6:D8:4F:4E:32:0B:D5:C1:62:F3:2C:4A:C4:90
Authority key identifier: D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
Certificate issuer: /CN=d39696a7680e955291feafa1efba9fbcff2f888b
Certificate serial: 019CAAFD13E164AC497DCDD7EC56B16C2A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
Manifest number: 1337
Signing time: Sun 01 Mar 2026 20:00:38 +0000
Manifest this update: Sun 01 Mar 2026 20:00:38 +0000
Manifest next update: Mon 02 Mar 2026 20:00:38 +0000
Files and hashes: 1: 05aWp2gOlVKR_q-h77qfvP8viIs.crl (hash: eO1qMHMdu/40VDtHIgATJ3ocIZPJ2FHhEn4+WL5RgrI=)
2: gbxId3GOowlzCHPpf6Jyfef6KGQ.roa (hash: 4i/aGAudyyDfHz6MTEKI9eUEQHtSeNI1RbC1NE+R+ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:13:e1:64:ac:49:7d:cd:d7:ec:56:b1:6c:2a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39696a7680e955291feafa1efba9fbcff2f888b
Validity
Not Before: Mar 1 20:00:38 2026 GMT
Not After : Mar 2 20:00:38 2026 GMT
Subject: CN=4aa6da42dff7d6d84f4e320bd5c162f32c4ac490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:75:08:4c:a6:ab:7e:b7:89:c4:af:81:f7:56:
55:81:94:f6:87:a3:67:d2:ce:fb:2b:7d:1a:36:62:
dd:0e:84:04:b4:1e:92:e5:98:3d:88:64:38:d7:40:
1c:b4:63:be:ca:d0:5b:f2:f5:a3:59:a3:66:1e:b8:
d1:ef:5a:30:ea:a8:2d:36:5f:1c:60:a8:eb:3b:30:
c4:45:17:24:42:64:26:0e:33:b2:bc:51:e8:a6:04:
69:c7:ca:a1:ad:1e:e4:63:c4:e9:23:92:8e:5a:b4:
9a:dc:bf:3a:d3:b6:e5:a3:9c:dc:98:f7:41:7f:45:
99:c0:4b:65:57:91:60:74:48:a4:70:53:da:7a:ad:
de:1b:ee:b7:af:9b:55:ca:e1:d8:fd:cd:f2:0b:18:
19:73:b6:87:54:c8:dc:fd:b5:54:2c:9d:f4:c1:a5:
1b:bd:12:cd:2c:89:eb:9e:35:49:3f:d2:8c:55:32:
8a:b8:0f:62:53:1b:4f:5f:db:35:53:67:e2:43:04:
6a:1e:e7:1b:ca:c2:ac:7f:cb:6b:cc:36:61:15:6b:
03:8c:c1:e6:e1:f1:3f:08:87:f3:01:68:64:15:bf:
f3:6b:55:96:96:14:01:89:3f:be:55:17:81:50:a9:
d2:ef:4b:d1:4b:96:54:e9:7c:f5:95:c7:c6:cf:4b:
32:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A6:DA:42:DF:F7:D6:D8:4F:4E:32:0B:D5:C1:62:F3:2C:4A:C4:90
X509v3 Authority Key Identifier:
keyid:D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:09:87:52:a0:3b:d8:00:99:80:69:94:a0:02:0e:8e:bf:3f:
2e:c2:31:d3:5e:a5:38:e9:5f:56:ea:b3:be:e1:6a:01:22:3c:
96:7a:2a:e8:5e:a4:4e:74:37:1e:6f:dd:35:d2:12:02:48:f9:
a2:a8:43:8f:8d:3e:8e:ea:e7:e0:b8:78:d9:9b:30:f8:80:1e:
91:48:77:ab:87:82:d9:5c:9e:08:19:f2:59:ab:ac:f8:3e:e7:
82:4a:13:ec:20:fd:44:b5:72:74:80:a3:28:69:b3:10:5e:9f:
dc:fe:ab:30:f4:88:e6:00:2b:7a:eb:7e:4b:1e:3b:c8:70:12:
52:2c:2c:a5:68:94:7f:bf:25:0b:8d:71:71:04:e5:da:21:93:
4d:75:9d:b6:aa:fb:3b:a7:c1:42:5f:17:5c:4d:94:b1:a7:ad:
13:5a:d4:47:a1:56:29:22:11:4d:8f:e5:b5:e8:ee:65:e4:00:
bd:ae:f4:79:dc:83:17:ee:75:57:2f:05:57:8c:99:07:aa:f3:
82:3c:af:4d:a7:52:b2:7b:1e:f7:b0:bb:66:5c:1a:a2:c1:6f:
20:cb:c3:24:d0:16:b3:78:a4:bc:1a:9b:6a:ff:c1:57:fd:54:
2e:ec:c3:07:39:f8:c7:c6:52:8b:12:37:b6:9b:14:51:9f:50:
4b:5a:aa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:14 2026 by rpki-client