Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
File: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft (raw, json)
Hash identifier: LPR8UyLPFlc7QR73YgDj4wEjotsGHyrRKYlVA6i7WsI=
Subject key identifier: EA:3E:3D:7D:46:EC:77:F1:7E:CE:9F:E2:2A:48:50:04:49:DB:0D:B8
Authority key identifier: 12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
Certificate issuer: /CN=12c603666719e979bef0921451a2ec264ed01209
Certificate serial: 019CABDA01E5112B1E73A7AF2EB318B815EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:57 +0000
Manifest this update: Mon 02 Mar 2026 00:01:57 +0000
Manifest next update: Tue 03 Mar 2026 00:01:57 +0000
Files and hashes: 1: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl (hash: Y7irdk6nAsUEe0E8hyt474aHBl/+AlkjGgIHTSqXuis=)
2: IXzvb0oMAUQE_F6M51MZp-vD2zA.roa (hash: yPGLWb8LE+8WjEXthn7v5ZfntWLr2abqa8ktyJTdaHI=)
3: qJG0Hd7c9EV41M-mzPnawa776Ng.roa (hash: 38xg5etHC6ngVwSZkinLtA2QpEFQUOmcoXPkIJ0ae5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:01:e5:11:2b:1e:73:a7:af:2e:b3:18:b8:15:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c603666719e979bef0921451a2ec264ed01209
Validity
Not Before: Mar 2 00:01:57 2026 GMT
Not After : Mar 3 00:01:57 2026 GMT
Subject: CN=ea3e3d7d46ec77f17ece9fe22a48500449db0db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:58:0d:39:77:be:31:b1:3d:f2:ec:03:99:8d:
a0:ec:64:31:d9:8f:ec:f1:5f:5b:f4:4d:ec:d2:0a:
64:a1:cb:6c:dc:f4:40:83:8e:52:bd:a5:d8:68:b7:
3d:69:4a:72:f4:2c:4a:2a:72:4d:48:2a:83:38:3f:
e1:21:69:5a:09:a9:45:0b:3f:66:be:18:6a:d2:ae:
ec:4c:79:69:02:1e:f4:8a:1a:9c:b1:e7:23:2a:5d:
5b:7f:f6:af:2b:a4:c1:df:50:c6:bc:14:83:25:49:
55:26:ac:9d:4a:37:d5:2a:8a:3a:26:c4:3d:03:74:
b2:8b:d7:21:44:37:77:4d:bc:55:43:87:a7:21:2f:
fe:1f:d4:6e:a7:6f:68:a9:39:d3:aa:31:b1:04:ec:
7d:d1:17:6f:ae:e6:15:1b:72:4d:6b:a7:26:2b:72:
99:e6:73:b9:c3:d1:5b:c3:b7:47:74:1f:0d:ab:71:
dd:2a:de:b4:92:99:bc:b9:73:8d:ef:50:8a:39:19:
5e:a3:4b:2f:40:7f:7f:11:ee:ed:a4:58:61:75:6a:
07:0a:2c:bc:01:2f:d4:d4:d5:e8:6b:ce:4a:09:8e:
b5:ab:e0:67:e5:9e:12:de:79:24:b5:8e:13:c8:49:
38:10:13:ea:99:5f:fd:d6:9a:67:d5:86:37:cd:ef:
55:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3E:3D:7D:46:EC:77:F1:7E:CE:9F:E2:2A:48:50:04:49:DB:0D:B8
X509v3 Authority Key Identifier:
keyid:12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3e:1b:3f:e3:4a:95:2c:c4:04:2a:64:12:28:37:a0:c6:b5:
1c:31:c2:26:b9:36:2f:ab:a0:90:3a:68:91:a4:77:d8:f2:a6:
30:99:1d:00:c2:17:56:d4:cd:e0:f1:dc:12:53:15:e1:cf:4e:
7c:24:eb:fb:2a:da:9c:62:f1:b8:77:bd:01:2a:62:3e:8f:74:
dd:c9:b5:44:5a:fb:12:2e:2a:16:71:4f:86:5d:03:c6:4b:8c:
0a:a0:b8:6e:62:ba:12:48:4f:92:5d:66:e6:5c:c5:77:45:17:
0b:99:22:51:63:ea:ed:b1:c2:56:2b:9a:17:6d:45:b9:72:df:
04:5c:06:68:31:3c:cf:c7:07:bc:90:10:7d:01:98:3f:b2:1c:
de:7e:4f:9d:8e:e8:af:ea:c7:91:4a:7d:cb:18:5e:f2:d7:9a:
50:10:7c:cb:ca:ec:b3:7d:44:46:64:2e:16:7d:1a:8f:33:82:
ff:74:0e:1a:37:94:6e:44:fd:79:51:d9:4a:73:cd:03:40:51:
70:fe:f2:6a:68:92:12:8a:62:5d:b8:fb:99:8a:3a:de:0d:ed:
26:e5:b5:98:bf:ee:5b:ef:07:cc:cc:b0:e0:7f:e4:c9:bb:df:
48:cb:35:03:52:c2:b5:1e:45:65:91:74:b6:79:f4:c0:85:25:
e1:23:49:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:02 2026 by rpki-client