Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
File: 05aWp2gOlVKR_q-h77qfvP8viIs.mft (raw, json)
Hash identifier: vTc1dIU7KlzCCV5BNwmzj695GRpce0sCBLYi2jN3zYM=
Subject key identifier: B9:44:17:C0:0F:D9:43:9D:D6:73:A1:31:4B:88:DA:F7:AC:53:3D:B2
Authority key identifier: D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
Certificate issuer: /CN=d39696a7680e955291feafa1efba9fbcff2f888b
Certificate serial: 019FA9ABE806FB9AB7B83F75DE3271159244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
Manifest number: 14C4
Signing time: Tue 28 Jul 2026 17:00:43 +0000
Manifest this update: Tue 28 Jul 2026 17:00:43 +0000
Manifest next update: Wed 29 Jul 2026 17:00:43 +0000
Files and hashes: 1: 05aWp2gOlVKR_q-h77qfvP8viIs.crl (hash: kOlMO/HtlriWEpclN+sBkdTiV1iUSeBrbGrEz1s7O1I=)
2: gbxId3GOowlzCHPpf6Jyfef6KGQ.roa (hash: 4i/aGAudyyDfHz6MTEKI9eUEQHtSeNI1RbC1NE+R+ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:e8:06:fb:9a:b7:b8:3f:75:de:32:71:15:92:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39696a7680e955291feafa1efba9fbcff2f888b
Validity
Not Before: Jul 28 17:00:43 2026 GMT
Not After : Jul 29 17:00:43 2026 GMT
Subject: CN=b94417c00fd9439dd673a1314b88daf7ac533db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e3:5c:e8:ca:00:71:cb:12:8a:a8:fa:22:80:
6d:46:38:44:3b:64:e1:6d:2b:01:fb:f3:15:91:57:
fb:f6:16:d1:9c:0d:3a:20:02:32:2d:7a:1e:13:24:
e1:f9:94:a5:b9:74:40:02:4e:55:f6:71:2b:4c:69:
8c:4a:39:0b:10:dc:0d:60:0a:64:8c:6b:41:ff:a0:
3f:ca:da:f2:ad:67:b6:6d:0a:59:6d:62:fc:63:37:
d1:80:87:3e:c5:52:3c:c2:84:78:02:6c:22:6a:ca:
d2:2b:1a:bd:55:cd:9f:03:b3:31:e3:f8:77:59:60:
80:b7:be:85:e0:ba:6a:96:f8:dd:15:ac:ef:6a:99:
3e:4d:d3:93:d2:f6:2f:a8:9c:bd:33:99:b2:3d:3f:
fa:5f:2a:24:1f:1d:9a:a7:52:3f:f6:9f:d0:b7:27:
97:27:b1:06:d7:c9:4b:f8:e4:8f:25:03:3f:1d:e5:
dc:a5:5e:5a:c4:f6:6f:f5:69:ca:21:4b:ed:b0:bb:
7a:2f:db:66:09:a8:d2:ee:a9:02:be:31:a5:33:ce:
0f:f1:37:f0:a3:0f:e0:f8:67:78:63:2e:3e:8b:95:
03:09:95:44:e7:2f:77:9f:a5:1d:28:40:04:74:5a:
ba:5c:ec:57:00:dc:23:ef:d7:dd:bb:17:69:b1:06:
d1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:44:17:C0:0F:D9:43:9D:D6:73:A1:31:4B:88:DA:F7:AC:53:3D:B2
X509v3 Authority Key Identifier:
keyid:D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ad:0a:cc:3f:ff:e6:4d:e6:0d:b3:b9:0e:aa:00:f7:2f:d0:
ba:ba:a5:17:50:55:14:1d:da:0e:fe:37:f9:2f:91:65:61:66:
3a:de:2f:6c:55:f3:37:5c:7b:b3:86:24:6d:04:0d:5e:77:f7:
2a:0e:55:c1:86:aa:35:66:de:97:b8:f6:6e:ac:25:f1:78:b0:
04:d7:b7:5a:16:d6:98:64:3a:9d:74:21:db:e8:e2:e5:1b:1d:
b6:90:49:30:a5:4e:41:f1:a1:a2:14:44:da:f7:83:77:44:53:
b8:26:8d:e4:03:98:d4:8b:65:ad:42:97:5c:7f:33:10:d4:7b:
70:95:52:d9:da:a3:c4:25:f6:c5:a9:af:2a:81:91:2d:d3:d7:
1a:c4:80:0d:7c:da:f6:80:91:8e:dc:4c:d0:c1:a5:2a:9d:02:
2f:20:41:5c:91:17:2b:33:e7:1c:f9:5e:0a:eb:77:35:64:82:
91:b6:b6:7b:b9:08:ab:c2:bc:77:9f:68:49:27:3f:9f:cd:a6:
d7:74:78:d1:d9:dc:b2:41:9e:69:c6:37:d2:f8:c6:a5:e6:c7:
60:d3:ea:af:9b:7d:c3:59:20:8b:d4:b4:c7:31:63:1c:54:19:
c5:d6:5c:d8:2e:8c:47:0a:4c:e1:d4:e0:88:c8:76:3f:b6:00:
ea:fc:04:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:04 2026 by rpki-client