Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
File: ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft (raw, json)
Hash identifier: B/eycsXWc4EbxGq+n8nko3sk3s+0xeTyKS+jSXOrNxs=
Subject key identifier: 25:A4:83:E2:9B:A5:9C:9C:85:0E:15:10:85:E1:B7:78:55:84:44:67
Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
Certificate issuer: /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Certificate serial: 019CAD229CE328AEE2D122F58A10B702FCA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
Manifest number: 071F
Signing time: Mon 02 Mar 2026 06:00:52 +0000
Manifest this update: Mon 02 Mar 2026 06:00:52 +0000
Manifest next update: Tue 03 Mar 2026 06:00:52 +0000
Files and hashes: 1: ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl (hash: i6gTnelQ8iNX8lDxSlvuffuN7pC/x3GCR1XzjRCpvwA=)
2: stYBdowOVPO4I6l2lk6N70Rzn-E.roa (hash: YY8VJy7fjrv/nyUerV6XVPDCUnj9z+ve+4ysfFvneOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:9c:e3:28:ae:e2:d1:22:f5:8a:10:b7:02:fc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Validity
Not Before: Mar 2 06:00:52 2026 GMT
Not After : Mar 3 06:00:52 2026 GMT
Subject: CN=25a483e29ba59c9c850e151085e1b77855844467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:55:57:ae:54:6d:ce:61:95:6a:dd:b8:ec:
c8:a9:70:4f:bc:28:63:24:c8:00:d8:b6:11:62:21:
ee:a4:4c:73:70:45:56:52:eb:a0:21:99:20:f8:c0:
c1:04:2b:31:cd:27:ba:a6:6b:6b:e7:24:82:ca:78:
58:ef:05:03:aa:d6:21:f4:29:b3:c1:51:55:51:92:
b8:ad:3e:4f:43:ee:da:40:a2:ae:08:34:a7:b8:e1:
b5:cb:ac:6e:2a:83:43:cd:38:e5:01:98:65:94:7a:
9c:9f:10:e9:58:33:df:05:be:1b:d5:ca:7b:f1:2d:
20:a3:b6:c6:f0:34:fd:52:05:1c:b0:8a:08:01:d8:
8f:6a:37:94:2e:cf:3d:f4:fe:97:3c:7c:74:fc:f7:
8b:03:5d:99:4d:a9:78:7b:b7:01:64:68:82:1f:c3:
e3:8a:f3:4b:e4:b4:5f:69:5a:b5:fc:9f:bc:1d:67:
c2:4b:61:d2:70:c2:ee:9d:d3:8f:07:04:22:23:1a:
c9:8a:e6:10:6e:4a:7a:04:a7:a8:76:44:d4:7c:c3:
45:88:b8:91:45:a8:ac:c0:5b:d8:01:be:ab:0a:c0:
2a:a0:8d:24:cb:d0:ac:36:db:62:c8:04:2b:93:19:
e1:c0:ee:8b:a7:44:33:b2:63:3d:b7:3d:55:7b:9c:
56:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A4:83:E2:9B:A5:9C:9C:85:0E:15:10:85:E1:B7:78:55:84:44:67
X509v3 Authority Key Identifier:
keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:93:df:a4:e9:d6:e1:22:3f:e1:fa:76:0c:b4:0d:77:e4:d7:
b6:4e:a3:31:a6:84:64:c3:8c:db:ae:0f:52:f3:8f:af:43:7c:
50:20:ce:c4:0f:eb:0a:8c:af:d4:ad:1e:0c:71:3e:66:55:3c:
fa:4d:e8:cd:3e:7c:16:1f:5c:f2:ed:f3:17:d4:45:60:93:55:
7f:93:56:15:b8:8d:3d:d1:57:6e:b9:9b:00:fe:23:4f:95:76:
c2:2b:56:18:41:74:ef:df:b9:87:0d:1e:6a:9c:ce:51:9b:1f:
51:05:c0:74:7b:01:6c:57:6f:09:97:f7:94:a3:2c:86:c2:00:
7f:a0:4b:63:c4:f8:d8:b9:ac:67:d7:d3:6d:dd:f1:72:2b:2a:
4b:63:f3:44:0c:c3:92:77:ba:58:56:e3:2c:9b:3d:24:6c:66:
25:f9:53:b8:cf:b0:fc:7e:1c:7d:5d:af:fd:0e:a4:94:7b:67:
d1:cf:e7:d7:a6:4e:6c:62:99:81:e2:0a:cb:5d:68:d4:d0:76:
c0:a2:32:fc:19:51:62:a7:09:ae:a6:1a:03:86:c0:3f:ad:f3:
ae:89:88:50:ef:72:3c:71:da:09:3a:bd:54:46:c4:f4:54:02:
f2:79:af:df:ec:95:76:6c:69:a3:71:1a:55:7d:47:29:73:7c:
ae:ab:81:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:35 2026 by rpki-client