Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
File: ESXJC-alxXrBYrVYE8_HZm7wg1o.mft (raw, json)
Hash identifier: vFR6t5UfGGilBjhOJ4pVbfrbAOwNrmTvOhy+0lD9Df0=
Subject key identifier: BC:F1:B4:CD:FE:96:B3:87:07:60:08:5B:18:A7:EE:3C:7B:57:FD:50
Authority key identifier: 11:25:C9:0B:E6:A5:C5:7A:C1:62:B5:58:13:CF:C7:66:6E:F0:83:5A
Certificate issuer: /CN=1125c90be6a5c57ac162b55813cfc7666ef0835a
Certificate serial: 019DA309FA5BCD05E775C5FE6D4D37CEFB36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
Manifest number: 06DE
Signing time: Sun 19 Apr 2026 00:00:33 +0000
Manifest this update: Sun 19 Apr 2026 00:00:33 +0000
Manifest next update: Mon 20 Apr 2026 00:00:33 +0000
Files and hashes: 1: ESXJC-alxXrBYrVYE8_HZm7wg1o.crl (hash: OCFLqU7hPQ0wVNwLT4GC3lL7Lo3vt+05Cv8BS9Cbk8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:09:fa:5b:cd:05:e7:75:c5:fe:6d:4d:37:ce:fb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1125c90be6a5c57ac162b55813cfc7666ef0835a
Validity
Not Before: Apr 19 00:00:33 2026 GMT
Not After : Apr 20 00:00:33 2026 GMT
Subject: CN=bcf1b4cdfe96b3870760085b18a7ee3c7b57fd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c6:dc:72:4f:4a:12:57:13:cb:be:5d:18:78:
75:0d:75:83:07:07:a0:9e:04:28:cf:35:f5:bb:05:
4d:98:d2:6a:67:97:39:6e:80:a0:2f:2c:d9:e4:16:
c6:2c:3c:15:86:98:cc:40:82:2b:cc:c4:a9:5c:0e:
f2:ff:33:bd:40:8d:f5:8d:90:0f:b9:6c:4c:00:a2:
91:cc:66:f4:e9:57:48:9d:99:71:30:a9:4c:30:fd:
7a:1b:16:cc:81:cc:40:f4:41:35:64:b3:7f:c6:d0:
ea:af:83:30:e6:d2:84:35:4d:68:75:2b:72:b2:46:
ce:68:74:ef:4a:74:22:c2:30:49:81:1d:1e:c6:b2:
d6:2f:d3:58:73:01:01:24:47:a2:d6:50:5d:f4:1d:
a4:12:ef:52:87:e5:d1:f4:a7:2d:8a:c7:ad:eb:88:
c4:be:d1:a8:1b:8c:ca:b6:09:7e:92:ea:2a:5e:8c:
50:0f:7b:7b:68:3b:30:50:0f:4e:9e:5a:42:33:0c:
a4:8b:f8:6c:9c:ce:23:2a:9b:19:93:4c:55:74:ba:
4e:21:8f:06:58:20:e3:02:5d:bb:ec:69:09:98:8a:
25:9d:90:66:ba:90:43:41:b5:80:f3:80:0f:bf:3a:
6f:62:16:bf:b8:3d:00:c8:ea:8e:0c:ac:68:69:97:
85:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F1:B4:CD:FE:96:B3:87:07:60:08:5B:18:A7:EE:3C:7B:57:FD:50
X509v3 Authority Key Identifier:
keyid:11:25:C9:0B:E6:A5:C5:7A:C1:62:B5:58:13:CF:C7:66:6E:F0:83:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a3:12:ab:5b:fe:40:31:e1:77:a5:af:1b:de:02:44:a8:0f:
86:22:9e:99:4f:e9:b5:f8:f4:9e:68:1f:01:9e:a2:af:bb:98:
b4:16:b4:57:4e:d0:5c:fb:74:21:ac:d1:11:97:69:26:54:56:
cc:bf:7f:34:41:84:40:b7:0d:84:05:c2:8d:77:3c:b5:d9:d6:
e7:c1:4d:f5:28:69:45:a4:bf:a8:c2:e9:8c:db:c7:6b:20:bd:
ff:16:75:74:d1:20:ad:bd:e3:2d:50:c7:68:ce:cf:f8:92:b4:
87:19:e5:c0:7d:62:cc:3a:61:0f:c2:11:08:e9:2f:c5:b8:f5:
16:fa:61:1c:22:94:70:77:e1:8e:28:b8:50:69:23:7f:de:bc:
26:72:3d:f2:f5:fd:ea:6d:c3:06:85:2a:6a:57:57:2a:45:0e:
87:8d:72:6f:b7:cd:f5:36:f5:02:44:52:0a:8d:6c:cf:20:fe:
fc:82:98:ed:7c:75:24:10:03:c4:1f:34:ec:24:82:b5:1c:11:
28:73:3c:8b:d0:ea:4e:57:86:25:d8:06:61:24:a0:aa:2e:db:
59:6d:a5:13:af:ad:f0:a0:62:79:4f:15:98:2f:6b:93:98:62:
05:81:ce:bd:14:df:f7:f5:f6:69:ef:74:f4:4d:8a:5f:91:8c:
45:79:55:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:21 2026 by rpki-client