Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
File: ESXJC-alxXrBYrVYE8_HZm7wg1o.mft (raw, json)
Hash identifier: x+RafoqegiRP6OzNDp8EaXHzSGTmNqEPJfdf9sjq69s=
Subject key identifier: AC:E7:09:23:CD:5B:FA:70:47:8F:C2:2B:88:7A:3D:64:F2:00:2A:66
Authority key identifier: 11:25:C9:0B:E6:A5:C5:7A:C1:62:B5:58:13:CF:C7:66:6E:F0:83:5A
Certificate issuer: /CN=1125c90be6a5c57ac162b55813cfc7666ef0835a
Certificate serial: 019CABD9A6949511A2C5400011CA4378639B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
Manifest number: 065E
Signing time: Mon 02 Mar 2026 00:01:33 +0000
Manifest this update: Mon 02 Mar 2026 00:01:33 +0000
Manifest next update: Tue 03 Mar 2026 00:01:33 +0000
Files and hashes: 1: ESXJC-alxXrBYrVYE8_HZm7wg1o.crl (hash: QmP/n8gzrjt0YK+p/t5Ts5eIhfnQ+JINo+Inpo2gPi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a6:94:95:11:a2:c5:40:00:11:ca:43:78:63:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1125c90be6a5c57ac162b55813cfc7666ef0835a
Validity
Not Before: Mar 2 00:01:33 2026 GMT
Not After : Mar 3 00:01:33 2026 GMT
Subject: CN=ace70923cd5bfa70478fc22b887a3d64f2002a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:8b:27:e8:30:f7:a5:74:bd:09:ce:12:1a:
2f:53:e6:0a:21:47:a8:d6:c5:4a:41:bd:ef:92:b1:
63:c2:bf:88:0e:e0:a4:2a:03:6c:bc:4c:3d:4a:32:
9f:f3:0e:61:25:a8:a2:49:cf:6b:f5:79:66:1e:24:
4e:8c:09:34:dd:51:2b:f2:6e:59:0d:50:63:03:1e:
c7:16:e5:2d:35:1b:6b:08:fe:08:b0:e3:81:d4:41:
8b:a7:27:89:ca:94:1b:0c:1b:4d:5c:97:5e:a8:f6:
e1:18:c3:41:6f:ce:d3:a7:9d:08:3d:9e:c3:cc:42:
90:7d:31:71:64:0a:41:6d:d7:cb:b8:f6:9d:ce:74:
65:27:c7:17:52:34:18:27:74:7f:4b:36:89:af:08:
60:60:67:4d:30:aa:06:eb:bd:6c:ba:f0:63:4d:17:
53:b3:7c:34:27:5c:46:45:ac:ed:42:7a:cd:c5:72:
87:94:5c:f8:c3:48:27:33:52:5b:b0:88:ee:cd:ca:
ff:06:07:5d:1b:65:df:66:fc:f5:22:6c:36:c3:c9:
61:ca:39:5b:ab:58:fc:4f:0b:79:57:8d:8a:fd:27:
cc:41:27:68:d1:1c:9e:4b:b5:4a:fd:dd:46:98:64:
54:4b:53:bd:57:cd:cd:08:9e:01:cb:d8:25:ec:7b:
49:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E7:09:23:CD:5B:FA:70:47:8F:C2:2B:88:7A:3D:64:F2:00:2A:66
X509v3 Authority Key Identifier:
keyid:11:25:C9:0B:E6:A5:C5:7A:C1:62:B5:58:13:CF:C7:66:6E:F0:83:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e3:46:48:e0:cf:7c:a8:a5:c6:3e:b1:6d:93:01:3e:28:e2:
2b:3a:fa:9c:4c:3d:cc:81:65:c8:a0:21:f1:d9:84:26:7e:bc:
56:ee:60:3a:37:93:37:3f:18:67:83:22:d7:af:88:b4:34:2c:
d2:68:1c:5d:16:1f:10:fe:10:bf:e4:a8:41:48:17:13:f7:e8:
0b:2b:7f:cc:b9:0e:ad:8a:e1:75:8f:5b:1d:22:06:56:16:a5:
82:64:c3:84:2e:55:b4:94:18:75:40:60:c7:91:04:ce:55:01:
50:12:59:a2:de:11:87:a8:6c:0c:de:2f:8b:d7:c6:ad:23:2a:
9c:3d:31:39:a4:63:a3:77:0c:22:ee:e8:31:d3:2b:d1:cf:7f:
aa:bd:5c:39:1a:64:0b:8f:3e:83:f9:5f:78:1b:51:dc:b3:fa:
66:4d:8e:04:b2:52:19:5c:a4:70:4d:d2:11:ca:fc:34:23:ca:
05:25:a0:f1:02:1f:1f:e7:e9:3d:d9:54:35:03:27:9e:9b:ed:
7e:bc:71:20:6c:71:37:bf:d8:5a:b5:39:9f:63:ff:6e:3f:a8:
3c:48:64:31:6b:e6:50:9b:87:e0:5a:16:f8:d9:71:48:06:42:
7f:3e:a4:14:5f:c6:bf:35:bb:06:1b:7f:7b:21:58:6b:f5:65:
27:fe:a0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:07 2026 by rpki-client