Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
File: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft (raw, json)
Hash identifier: AeZKChPbtczMGk9ItEDI1xHPabg/p+JzvYSnDjmWeV0=
Subject key identifier: 47:E1:2B:1D:46:FD:86:19:8B:CC:A5:ED:57:A9:6F:AC:FE:77:1A:D6
Authority key identifier: 12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
Certificate issuer: /CN=12c603666719e979bef0921451a2ec264ed01209
Certificate serial: 019D9962666E6DF274E1D21E477351B6BFCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:00:55 +0000
Manifest this update: Fri 17 Apr 2026 03:00:55 +0000
Manifest next update: Sat 18 Apr 2026 03:00:55 +0000
Files and hashes: 1: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl (hash: 3+I2xTrr0G9J4quQX4HzXfKwaap01Rnt+JEDjvaDs+s=)
2: IXzvb0oMAUQE_F6M51MZp-vD2zA.roa (hash: yPGLWb8LE+8WjEXthn7v5ZfntWLr2abqa8ktyJTdaHI=)
3: qJG0Hd7c9EV41M-mzPnawa776Ng.roa (hash: 38xg5etHC6ngVwSZkinLtA2QpEFQUOmcoXPkIJ0ae5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:66:6e:6d:f2:74:e1:d2:1e:47:73:51:b6:bf:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c603666719e979bef0921451a2ec264ed01209
Validity
Not Before: Apr 17 03:00:55 2026 GMT
Not After : Apr 18 03:00:55 2026 GMT
Subject: CN=47e12b1d46fd86198bcca5ed57a96facfe771ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cf:83:e3:a1:f3:02:0a:9e:c1:f1:99:c9:42:
81:2c:bd:1a:47:60:b7:2f:62:68:64:69:ba:08:72:
30:c8:1b:da:1d:90:6e:d1:dd:ac:95:29:ab:5e:96:
0d:45:ec:75:f8:7d:67:aa:91:ab:53:09:ae:d5:1e:
0a:a4:cd:23:b2:d6:53:77:4a:55:d9:27:01:2c:2d:
e1:e3:92:15:dd:7c:d7:47:d3:6c:8b:a3:89:62:e4:
f0:96:af:70:02:cd:30:a1:61:c3:6c:03:7f:09:02:
c8:be:ae:ec:20:4b:db:6a:95:11:3a:0f:96:46:e3:
95:74:51:94:a4:5e:44:2e:4b:ea:2f:bc:01:e7:ea:
42:08:bf:30:7d:26:b5:e3:bb:b4:3d:2f:74:9e:ef:
23:b3:5a:bb:41:95:2a:23:9c:b5:19:66:18:38:e4:
bb:7d:bc:da:58:92:2b:1f:29:15:55:ba:21:28:21:
a5:bd:75:2e:ca:76:47:fd:d3:0f:3c:bf:5d:2a:bd:
b6:72:7c:1d:1a:7a:b3:69:2e:08:a5:e9:4f:c7:d8:
37:98:28:f7:20:9f:4d:ba:b8:6a:2c:16:ed:15:a5:
06:c7:ce:75:a7:80:9e:2e:d1:a5:36:29:b8:21:7e:
b9:27:97:f9:62:cb:16:93:6b:53:77:bf:96:bb:0c:
c7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E1:2B:1D:46:FD:86:19:8B:CC:A5:ED:57:A9:6F:AC:FE:77:1A:D6
X509v3 Authority Key Identifier:
keyid:12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:79:a7:7a:6e:bb:ed:95:cb:5f:93:e6:df:fe:dd:1d:4b:5a:
e3:d2:b3:72:09:8f:0a:99:96:a4:f4:de:de:b5:ac:aa:86:4c:
ae:7c:ec:cf:75:ec:77:7f:df:df:dd:81:20:d9:fa:9c:3c:65:
57:b3:81:73:83:d8:d2:6d:99:c1:d9:ca:63:42:f0:b8:ca:b1:
89:91:79:17:18:d2:99:ee:09:a4:b2:ca:28:31:00:c9:73:8b:
3c:2e:25:d2:65:ab:40:48:8f:2a:8e:8f:d4:c9:a2:29:ed:ea:
59:1c:bd:6e:a0:77:38:2f:bb:dd:7f:0f:e2:3b:d0:fb:bd:2a:
6f:52:a3:2a:34:1c:eb:4a:99:ed:2b:33:94:ac:94:46:65:b7:
15:57:45:75:09:b1:60:57:c7:81:4f:c4:51:71:59:de:a9:fc:
f5:45:42:ed:6e:3b:4b:03:b0:65:46:3d:b1:85:8e:25:d5:c1:
85:db:d8:a7:d0:d5:7f:df:78:3c:0f:81:f2:e9:11:82:fd:35:
04:ac:92:3d:25:28:8b:a6:1d:86:ff:cc:ad:0b:bd:df:8a:fe:
98:df:dd:19:4b:3c:34:9e:af:cc:f9:88:05:ed:dc:41:56:c1:
a7:dc:12:a3:a5:ba:a9:b8:58:30:9b:72:1f:d0:39:43:1f:20:
50:e7:40:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:07 2026 by rpki-client