Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
File: ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft (raw, json)
Hash identifier: u4Pi5AAzmLwputCSjsNaJBen3NQJzcogYo8DNMBEA4E=
Subject key identifier: 83:76:71:31:17:4E:3D:69:04:18:B0:95:4F:EE:EE:F8:EC:6D:50:D5
Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
Certificate issuer: /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Certificate serial: 01A0C7B4234275192162139F68EE58FB296C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
Manifest number: 093F
Signing time: Tue 22 Sep 2026 06:01:06 +0000
Manifest this update: Tue 22 Sep 2026 06:01:06 +0000
Manifest next update: Wed 23 Sep 2026 06:01:06 +0000
Files and hashes: 1: ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl (hash: hcNH/0xro5MKF8XqbLRADlhASzdgBsuBFDKlmqBVRXc=)
2: stYBdowOVPO4I6l2lk6N70Rzn-E.roa (hash: YY8VJy7fjrv/nyUerV6XVPDCUnj9z+ve+4ysfFvneOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b4:23:42:75:19:21:62:13:9f:68:ee:58:fb:29:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Validity
Not Before: Sep 22 06:01:06 2026 GMT
Not After : Sep 23 06:01:06 2026 GMT
Subject: CN=83767131174e3d690418b0954feeeef8ec6d50d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:0c:0d:03:04:8b:4d:0d:63:a4:e6:8a:ed:
b2:df:3b:7d:53:cb:5d:71:a3:72:9f:41:7e:35:3d:
2f:a4:5f:f3:39:51:ce:6f:99:2b:cd:68:4e:8d:a5:
86:16:f5:5b:78:0d:e7:bb:77:6c:da:61:b6:32:1c:
d3:3a:be:50:12:b7:dd:c3:05:ed:b1:04:d4:80:66:
42:e5:78:44:21:d9:20:e3:25:a1:fd:66:2d:9b:51:
cd:fc:cf:86:7b:1a:99:c0:49:af:f6:0e:ff:79:e1:
af:93:ed:60:f3:f1:bc:3d:d8:be:27:e8:d9:b4:d7:
5c:09:a9:a3:e6:bc:ff:d3:d4:ec:e3:08:4e:34:c8:
85:5e:7a:fe:28:d7:a3:1c:da:40:24:62:fb:09:3f:
c1:a0:f7:b1:26:3f:bf:25:83:47:66:0e:9b:27:f0:
76:e4:ed:52:b3:b5:54:96:86:db:84:5f:85:65:67:
65:f7:74:21:58:35:a6:5d:23:ef:d0:0b:84:7f:89:
16:0e:78:de:f0:1a:67:f9:bb:f3:20:b4:31:65:0f:
5f:bd:bb:8f:89:e7:e8:b1:2f:d5:ab:f8:6a:65:e0:
95:20:e2:a5:7a:aa:c3:b3:5d:7b:cc:7e:d8:08:84:
df:3f:75:59:19:34:08:c3:8a:ea:62:e5:af:3a:1a:
b3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:76:71:31:17:4E:3D:69:04:18:B0:95:4F:EE:EE:F8:EC:6D:50:D5
X509v3 Authority Key Identifier:
keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6f:b7:6e:e3:d2:57:2d:43:69:fd:c5:43:59:71:15:2d:11:
f5:11:60:a8:6d:49:f1:8e:d4:3b:ea:39:86:3d:dc:43:ea:17:
70:97:3c:4a:db:96:e7:3a:7c:0f:4b:81:1b:bd:7c:8c:cb:e9:
3a:b8:29:70:3d:c7:dd:20:a7:01:8d:a2:38:d4:60:07:68:25:
da:bb:9c:8e:ce:1f:e4:48:5f:ef:6a:f1:c4:93:3a:be:2d:fa:
66:cf:ec:2a:65:6a:6d:87:a2:ad:e4:93:72:6d:74:c5:bb:25:
57:ee:7b:13:c6:6e:78:4b:e0:64:7f:e4:57:de:e9:49:06:0f:
8c:e4:2e:47:32:95:e9:d9:c9:fc:9e:83:f6:93:b2:3c:70:a4:
2c:70:f2:14:fa:d9:ee:c2:ea:3d:92:ed:2d:a4:3f:10:11:70:
1a:e6:ff:9b:b8:15:30:60:66:a7:a0:f1:d8:6b:e7:8c:6d:e4:
43:71:80:94:c7:fe:2f:98:c1:1d:37:d8:a2:83:22:e1:02:55:
0b:d5:63:dd:2a:b8:6b:02:f1:75:cc:ac:fc:5d:8e:85:22:7f:
e2:25:6b:83:05:35:37:74:0c:50:95:6d:1a:3f:1a:9a:a3:6c:
d7:db:b7:80:88:ad:fc:9b:0c:fe:cf:d9:84:77:fa:6b:8a:59:
50:3c:89:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:21:43 2026 by rpki-client