Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
File: sEsc31Bs5emTfnf4Jj7PbdslWwU.mft (raw, json)
Hash identifier: 2AonseOzM4fZP/cGfbNh/uMCKfpUjCfGT69MMq9fLyg=
Subject key identifier: 69:24:8F:1E:3E:79:B7:86:A3:E7:20:3F:0A:BA:55:F6:8C:1E:97:F8
Authority key identifier: B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
Certificate issuer: /CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Certificate serial: 019CAB34784D267FEC58A5F80FE438E56326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
Manifest number: 16A2
Signing time: Sun 01 Mar 2026 21:01:08 +0000
Manifest this update: Sun 01 Mar 2026 21:01:08 +0000
Manifest next update: Mon 02 Mar 2026 21:01:08 +0000
Files and hashes: 1: cMQiZnAEZAcj3C0lkcgvF6RD5y8.roa (hash: 42uo0Cj9Z9TNuXBZG2n2ywXXuk81qWLkR5LdFIJRmv0=)
2: sEsc31Bs5emTfnf4Jj7PbdslWwU.crl (hash: 3kt1ccfsHR9MYDvJOQvyIi6iMOjWQIEhJzXgxAww9EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:78:4d:26:7f:ec:58:a5:f8:0f:e4:38:e5:63:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Validity
Not Before: Mar 1 21:01:08 2026 GMT
Not After : Mar 2 21:01:08 2026 GMT
Subject: CN=69248f1e3e79b786a3e7203f0aba55f68c1e97f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1f:a9:14:f3:dc:3d:fe:9b:f8:25:b9:3f:6a:
1b:e7:72:33:84:27:4e:1e:2c:08:14:4f:be:a3:2e:
4e:ea:7e:db:b0:d0:f5:27:18:dc:60:d7:09:1c:ed:
1e:de:a6:73:80:3b:25:bd:97:89:02:a0:5f:6a:d7:
d7:62:cd:5e:0c:5f:41:71:3f:6f:63:e4:6f:61:ad:
06:9c:c5:08:fd:c6:4c:6e:c5:8c:df:c1:78:49:65:
79:a7:77:97:ac:3f:49:12:5d:8d:2c:0d:f8:8b:a5:
a1:d0:62:1f:a1:22:5a:cb:c3:36:26:35:93:76:3c:
0a:06:c8:de:d1:ef:9b:13:67:12:9e:0f:c0:49:99:
f5:8c:f9:a1:25:e8:10:41:6d:93:32:de:ee:ee:18:
09:75:2f:b1:0a:0a:f7:12:d7:63:58:e6:7b:76:32:
ff:b4:ca:c3:2c:87:31:cf:d9:78:9a:6e:7d:31:94:
83:9c:37:77:68:e9:d5:15:03:3d:43:1e:4f:b9:f9:
6d:d7:01:26:9e:e7:eb:dc:f9:2d:6c:6f:0d:df:5d:
5e:dc:98:f3:26:9d:48:33:09:1e:6b:4c:e2:e9:ea:
bd:49:73:2e:16:48:ff:52:32:23:12:ea:b2:70:be:
a2:d8:e1:04:ed:2f:9f:af:85:12:a9:ce:f6:38:e5:
42:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:24:8F:1E:3E:79:B7:86:A3:E7:20:3F:0A:BA:55:F6:8C:1E:97:F8
X509v3 Authority Key Identifier:
keyid:B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ec:d2:61:0b:c9:c8:ad:15:ff:6f:51:08:49:5a:ca:c2:3a:
7c:ba:c9:3f:93:7c:b8:7b:5b:f1:04:c4:fb:64:9f:f3:9e:14:
f5:ab:61:1e:98:03:26:68:fa:83:26:4d:a0:41:cb:16:1a:5b:
17:cc:f9:70:8a:9f:8b:c0:0b:10:16:61:39:eb:4a:23:41:a7:
15:6c:ad:f7:30:b0:73:f1:e7:b6:ac:88:5d:1b:ec:10:85:c6:
79:ea:b8:33:78:c3:f0:7f:5e:6c:7c:d5:c9:2c:cc:c6:e7:ba:
ce:ac:e9:61:26:f4:6f:a3:ed:d4:b6:19:14:30:d9:b4:b8:bc:
90:32:a9:37:7a:ae:0e:cf:e1:99:c3:db:28:b3:34:2d:51:c5:
65:b5:89:69:46:56:e7:b0:ac:6c:f1:2a:09:6b:00:b5:a0:e3:
c9:aa:02:83:16:99:4a:ac:6f:8c:e7:32:a9:a4:30:fc:e9:85:
1b:fc:0d:ce:b9:ae:70:86:8d:b4:87:70:bb:8b:a1:79:90:e2:
6e:2d:7c:94:55:42:d2:2e:87:65:f6:fe:2c:6c:0a:6f:60:25:
c4:e8:51:42:72:00:ed:97:ec:e4:7c:f0:c7:99:d1:58:2e:0c:
dd:7e:3f:b3:cc:41:13:d6:46:ed:e9:c9:40:d9:10:83:f5:af:
0e:00:86:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:59 2026 by rpki-client