Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
File: ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft (raw, json)
Hash identifier: pp3eHIx4tu/JJ0FpmWwILF4g0Rbw6IaDLtS9QC66buU=
Subject key identifier: B6:24:0C:9E:76:50:34:A2:B5:71:5C:66:D6:0D:A8:4D:3A:6D:68:BC
Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
Certificate issuer: /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Certificate serial: 019FA9E2EA87576819F7733FAC4E2482242F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
Manifest number: 08AB
Signing time: Tue 28 Jul 2026 18:00:48 +0000
Manifest this update: Tue 28 Jul 2026 18:00:48 +0000
Manifest next update: Wed 29 Jul 2026 18:00:48 +0000
Files and hashes: 1: ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl (hash: sRmiIL3xF2m2YO2unabS2db9tLXmmDVMzEeGEK2HZ6k=)
2: stYBdowOVPO4I6l2lk6N70Rzn-E.roa (hash: YY8VJy7fjrv/nyUerV6XVPDCUnj9z+ve+4ysfFvneOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:ea:87:57:68:19:f7:73:3f:ac:4e:24:82:24:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Validity
Not Before: Jul 28 18:00:48 2026 GMT
Not After : Jul 29 18:00:48 2026 GMT
Subject: CN=b6240c9e765034a2b5715c66d60da84d3a6d68bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:af:4f:63:cd:11:dc:39:ba:82:87:81:36:
2c:52:db:de:7e:d6:57:39:1c:d5:9c:f1:fb:d3:30:
e3:f2:2f:67:d2:8c:db:99:33:60:38:a9:b6:f8:cd:
af:d1:de:70:7f:f6:0c:c7:99:a1:34:d9:11:23:df:
fb:4c:4a:8c:52:7c:8a:23:11:e1:25:e8:6a:08:2e:
9f:21:4c:d1:b5:7f:13:a4:c7:f5:f9:68:8e:c4:da:
69:15:71:03:cf:03:c3:8a:60:ca:23:f9:c2:db:21:
40:b4:ea:21:4b:d2:75:59:82:fd:d3:3e:c1:77:4e:
af:37:0b:fe:6a:eb:6b:f1:c3:ce:ee:54:7b:e3:f4:
dd:40:36:42:ef:55:8b:cf:fc:bf:db:bb:b0:50:38:
97:a2:18:a5:c0:61:bc:f2:0f:37:81:aa:4c:e4:d2:
36:b1:7e:28:6e:e4:c5:b5:13:cc:9b:85:05:13:0c:
9d:81:52:5f:63:e9:7f:02:bd:27:69:24:13:b6:05:
d6:bb:f1:cc:cc:d7:f2:3a:7e:00:a3:14:0b:cc:42:
c3:45:48:31:fc:c3:c0:0b:f8:2b:a9:3b:ba:26:88:
c3:53:99:8e:15:b0:ca:3e:a9:31:76:80:a5:32:c4:
ee:9b:33:d2:5a:94:29:1b:a8:78:ec:e2:85:c7:89:
d8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:24:0C:9E:76:50:34:A2:B5:71:5C:66:D6:0D:A8:4D:3A:6D:68:BC
X509v3 Authority Key Identifier:
keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ff:7b:a5:44:48:da:0a:27:f2:e3:8d:f3:9c:55:35:bb:41:
b4:c0:60:04:3b:ce:01:0c:7e:46:06:58:e0:94:d1:d2:99:f2:
f4:c7:3d:0c:e1:36:4b:fc:33:07:df:2a:c4:3e:32:1a:15:b2:
21:fb:09:84:fe:3f:75:21:77:e3:57:a3:94:db:c7:db:12:a6:
88:cc:23:2c:5e:38:4a:79:d4:40:00:20:6d:7d:bc:40:0e:01:
76:c4:ac:7b:d0:9e:7f:8f:14:78:4d:13:89:3d:d5:ae:16:7e:
b7:01:36:0c:8e:20:6e:a2:16:a4:cb:12:40:48:65:bb:dd:45:
07:c5:7d:0c:dd:3e:b7:e5:72:86:07:20:e7:d5:74:e7:4c:cd:
1b:2e:00:41:0a:bd:c3:98:ea:a5:08:39:f2:4d:76:24:b8:2f:
8d:0a:9b:f5:d9:e5:f5:08:7d:61:2b:18:ef:37:7e:6a:ff:6a:
78:0a:9b:bc:1a:fe:72:f0:34:7b:f2:54:11:7e:fd:40:82:06:
e5:e9:9e:1c:f9:fb:25:12:4c:cf:8b:29:54:04:e9:c7:de:4e:
f2:5b:53:35:ef:8e:53:c7:21:ac:97:59:71:ce:5b:b9:d9:1c:
4f:0e:62:c9:c6:52:d7:e3:3a:1d:ca:6e:60:20:c2:4f:08:b3:
c4:93:2b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:22:39 2026 by rpki-client