Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
File: 05aWp2gOlVKR_q-h77qfvP8viIs.mft (raw, json)
Hash identifier: Va6doMWRo5alN5pFJsNYuDNfX6lVCoNmn5ELDQDh5fk=
Subject key identifier: 27:FF:46:29:7C:E9:4E:F7:F6:41:1A:90:E7:CD:EA:54:D3:68:CE:1D
Authority key identifier: D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
Certificate issuer: /CN=d39696a7680e955291feafa1efba9fbcff2f888b
Certificate serial: 019D9886575E2A1B3FA73C62A9DE3090C2CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
Manifest number: 13B2
Signing time: Thu 16 Apr 2026 23:00:34 +0000
Manifest this update: Thu 16 Apr 2026 23:00:34 +0000
Manifest next update: Fri 17 Apr 2026 23:00:34 +0000
Files and hashes: 1: 05aWp2gOlVKR_q-h77qfvP8viIs.crl (hash: 3ya4zqmZJpZJ1j+SJ+XzwCjEqo1SF+m+ZTpe/5wl2Vo=)
2: gbxId3GOowlzCHPpf6Jyfef6KGQ.roa (hash: 4i/aGAudyyDfHz6MTEKI9eUEQHtSeNI1RbC1NE+R+ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:57:5e:2a:1b:3f:a7:3c:62:a9:de:30:90:c2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39696a7680e955291feafa1efba9fbcff2f888b
Validity
Not Before: Apr 16 23:00:34 2026 GMT
Not After : Apr 17 23:00:34 2026 GMT
Subject: CN=27ff46297ce94ef7f6411a90e7cdea54d368ce1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:af:76:2d:1c:83:87:00:4e:80:4e:d9:a0:37:
17:99:02:f1:59:ac:ab:80:1a:be:03:f6:4e:9c:ea:
26:e5:ba:f8:a6:f7:14:15:c8:17:56:b0:17:5a:b6:
e8:98:5c:66:d0:00:e3:aa:b7:ae:1a:0b:0b:3c:1e:
65:e7:1d:d6:fd:59:5e:d8:7e:63:a6:d1:9f:30:e1:
30:e0:15:64:94:c3:f2:13:1b:7d:1d:fb:7d:93:4e:
6f:69:9e:08:b0:8c:da:b0:70:9d:9c:c6:82:57:a1:
8a:1d:dc:8d:55:a5:74:c5:e1:74:f9:9b:e2:28:62:
24:ac:e7:d4:6d:7d:c0:7a:4b:79:a6:d6:a1:df:45:
45:3c:06:22:87:14:16:93:f7:eb:f9:e6:ed:4a:ab:
b9:68:62:24:31:47:88:31:74:8b:3a:e9:1c:15:b4:
f4:5a:6d:12:cc:03:f0:90:cf:2c:07:12:42:3b:50:
50:ba:c4:0d:eb:b9:d1:8c:6a:34:cc:cc:37:de:04:
26:65:35:90:6e:26:fe:2d:20:76:16:04:f9:99:2a:
62:c6:a2:62:32:91:05:8b:4c:15:3c:28:0b:46:bd:
f8:b6:91:6c:5b:12:5e:d3:2c:92:e0:2e:14:a3:aa:
6d:e3:98:82:d7:cd:67:40:3c:a8:6c:3f:cd:b2:b3:
86:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FF:46:29:7C:E9:4E:F7:F6:41:1A:90:E7:CD:EA:54:D3:68:CE:1D
X509v3 Authority Key Identifier:
keyid:D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:43:3a:28:d7:39:8f:7f:e8:50:42:38:be:e9:c9:d2:90:90:
2b:be:f2:d9:b2:37:d6:69:6a:ac:6b:a4:08:83:3a:2d:b4:46:
75:53:3c:68:b3:6a:b4:f2:a8:7d:0c:3d:fb:31:06:32:c7:29:
c7:b6:52:c3:b2:91:96:8d:ab:32:9c:c8:89:eb:10:d8:a9:54:
fe:55:34:8f:11:d6:b4:2c:d5:a9:c3:4e:b0:1d:47:3f:9c:c9:
f5:65:07:fd:68:69:eb:d2:d6:3b:23:44:ac:f8:7f:3d:a8:75:
0f:69:bf:49:b9:1d:09:54:a4:ff:53:fe:38:f5:27:7b:e8:47:
5f:d4:3d:68:81:bb:df:1d:e2:f6:5f:af:c7:97:98:68:39:dd:
27:b5:eb:7c:91:62:7c:06:03:52:c8:4c:60:d3:66:d9:15:5d:
6a:5d:9b:d2:2b:49:a3:e8:76:09:34:f7:9d:9d:79:ee:5a:83:
c9:f5:ab:b3:ca:fa:df:de:8c:f8:a0:aa:1a:f1:04:ed:73:0a:
bd:cd:a4:d1:1d:5e:03:b0:7d:2c:92:04:20:ac:79:d4:ac:91:
09:48:eb:66:ea:f4:1c:a0:81:7b:93:c0:49:cf:e5:6e:fe:fa:
cf:ac:4e:02:f4:bc:f1:46:c8:4f:7e:7e:0c:91:be:d1:ee:b5:
cf:9e:e5:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YhldeKhs/pzxiqd4wkMLLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzOTY5NmE3NjgwZTk1NTI5MWZlYWZhMWVmYmE5ZmJjZmYy
Zjg4OGIwHhcNMjYwNDE2MjMwMDM0WhcNMjYwNDE3MjMwMDM0WjAzMTEwLwYDVQQD
EygyN2ZmNDYyOTdjZTk0ZWY3ZjY0MTFhOTBlN2NkZWE1NGQzNjhjZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz692LRyDhwBOgE7ZoDcXmQLxWayr
gBq+A/ZOnOom5br4pvcUFcgXVrAXWrbomFxm0ADjqreuGgsLPB5l5x3W/Vle2H5j
ptGfMOEw4BVklMPyExt9Hft9k05vaZ4IsIzasHCdnMaCV6GKHdyNVaV0xeF0+Zvi
KGIkrOfUbX3Aekt5ptah30VFPAYihxQWk/fr+ebtSqu5aGIkMUeIMXSLOukcFbT0
Wm0SzAPwkM8sBxJCO1BQusQN67nRjGo0zMw33gQmZTWQbib+LSB2FgT5mSpixqJi
MpEFi0wVPCgLRr34tpFsWxJe0yyS4C4Uo6pt45iC181nQDyobD/NsrOGiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCf/Ril86U739kEakOfN6lTTaM4dMB8GA1UdIwQY
MBaAFNOWlqdoDpVSkf6voe+6n7z/L4iLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy82OGU4NTctZTJlOS00MmQ1LTg2NGUt
Y2M3YWQxNmQxYjBjLzEvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy82OGU4NTctZTJlOS00MmQ1LTg2NGUtY2M3YWQxNmQxYjBj
LzEvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0M6KNc5
j3/oUEI4vunJ0pCQK77y2bI31mlqrGukCIM6LbRGdVM8aLNqtPKofQw9+zEGMscp
x7ZSw7KRlo2rMpzIiesQ2KlU/lU0jxHWtCzVqcNOsB1HP5zJ9WUH/Whp69LWOyNE
rPh/Pah1D2m/SbkdCVSk/1P+OPUne+hHX9Q9aIG73x3i9l+vx5eYaDndJ7XrfJFi
fAYDUshMYNNm2RVdal2b0itJo+h2CTT3nZ157lqDyfWrs8r6396M+KCqGvEE7XMK
vc2k0R1eA7B9LJIEIKx51KyRCUjrZur0HKCBe5PASc/lbv76z6xOAvS88UbIT35+
DJG+0e61z57lwg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:42:10 2026 by rpki-client