Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
File: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft (raw, json)
Hash identifier: lbRsQezED4JCaN/teTC5etdCXMkgssWYSTHmm+RkNsk=
Subject key identifier: D5:EB:DB:03:8B:09:69:0E:CB:53:73:76:6D:55:1A:AC:66:EF:9C:76
Authority key identifier: 7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
Certificate issuer: /CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Certificate serial: 019D99621E72074B196AA9257B950AF79D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:00:37 +0000
Manifest this update: Fri 17 Apr 2026 03:00:37 +0000
Manifest next update: Sat 18 Apr 2026 03:00:37 +0000
Files and hashes: 1: 1-gB5rLPnht4_2fTXD19vo6rGOgY.roa (hash: MrHKvfkkxIsYa65L6lLIguftbi69CSEX2nGOpQCCn6M=)
2: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl (hash: Dhlqc7Pr4F25HyWKngjtUOQLhF/LXF7+960iR7s4n9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:1e:72:07:4b:19:6a:a9:25:7b:95:0a:f7:9d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Validity
Not Before: Apr 17 03:00:37 2026 GMT
Not After : Apr 18 03:00:37 2026 GMT
Subject: CN=d5ebdb038b09690ecb5373766d551aac66ef9c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9d:ef:84:99:43:ec:30:86:a9:e7:97:b5:50:
7c:26:b8:e4:0d:17:c7:71:36:47:5e:e8:d7:ff:c5:
6e:8d:ba:65:5b:b9:d8:04:72:bb:38:69:be:fe:60:
cb:c7:51:6d:51:22:0e:2e:fd:3e:4b:77:69:c8:84:
ce:2e:3c:65:64:0f:f7:40:1b:8b:60:0d:56:4a:85:
aa:58:a7:30:a6:c0:d0:74:1c:af:64:2f:37:78:03:
6e:7d:38:b0:ca:79:0d:89:8f:6c:42:f0:d4:74:01:
74:9f:cb:f8:0c:a7:32:5b:9b:2e:a8:55:aa:10:b9:
9a:c3:7f:6b:01:33:25:29:f1:d4:88:c3:b2:4e:52:
e4:97:6c:e7:3e:ed:5b:1c:11:21:e8:38:3c:d0:c6:
3d:ec:cd:09:0e:d9:63:ed:3d:65:26:1b:d1:2f:0a:
7f:27:46:e6:87:36:94:ba:e1:f6:05:17:4d:77:8e:
17:9f:b1:94:c5:40:6c:0d:b8:3e:3c:0f:39:bd:40:
28:a5:b9:17:67:21:73:64:4d:3d:18:c9:8a:c2:c2:
6b:44:4b:ec:ae:f7:34:c0:03:9c:db:34:45:a6:c4:
43:5c:b7:db:4c:de:41:84:a0:13:1e:67:cf:2c:e2:
97:a2:1f:03:d8:96:8c:96:74:8b:b1:3e:85:45:12:
01:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EB:DB:03:8B:09:69:0E:CB:53:73:76:6D:55:1A:AC:66:EF:9C:76
X509v3 Authority Key Identifier:
keyid:7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:53:f2:67:08:f2:a0:22:d3:e1:ce:1e:a7:62:d8:a4:0d:2a:
af:85:34:1f:4c:e3:ad:7c:66:7f:f1:dd:4f:77:e3:12:b0:5e:
16:8d:55:bf:b5:33:ea:d0:93:39:6d:5c:cd:02:30:22:5b:f2:
e7:61:f6:62:0e:9f:f9:f6:20:6d:01:60:72:a9:e0:c7:bd:6e:
c5:f9:a7:ca:f4:cd:33:93:10:1e:16:3c:dc:56:a2:3c:19:ae:
67:66:26:56:b3:ba:e7:c3:7b:06:fb:68:f8:a3:28:36:a6:79:
b0:4b:6a:39:82:8c:d3:9f:8f:e1:b9:c7:c3:6a:79:4c:3e:05:
84:10:a1:12:cc:e2:bc:d5:d9:3a:a7:b7:46:54:55:b9:8c:46:
b2:ab:a6:ba:a5:91:48:4c:03:a4:f8:b4:74:39:e8:de:ec:c4:
68:76:69:0f:64:42:1c:c0:5b:4e:26:f0:e2:8e:47:52:53:72:
70:e1:3f:03:f6:77:71:06:bb:b0:2e:69:53:46:6c:3e:4f:d5:
1c:20:90:1c:70:55:6c:de:4d:dc:d5:b0:b9:a2:23:99:a9:41:
53:79:8e:1b:8a:5e:d7:32:cd:b0:21:11:35:4c:7c:07:53:15:
19:b5:17:51:c2:55:6f:0c:f4:61:f1:96:43:e5:79:6a:19:9e:
9a:b6:7d:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYh5yB0sZaqkle5UK952GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2NmMTM3MjQ1YWVjNjZiMmY2NzRhODU4MWE3NDQ5YWUy
Y2ZjZTQwHhcNMjYwNDE3MDMwMDM3WhcNMjYwNDE4MDMwMDM3WjAzMTEwLwYDVQQD
EyhkNWViZGIwMzhiMDk2OTBlY2I1MzczNzY2ZDU1MWFhYzY2ZWY5Yzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ3vhJlD7DCGqeeXtVB8JrjkDRfH
cTZHXujX/8VujbplW7nYBHK7OGm+/mDLx1FtUSIOLv0+S3dpyITOLjxlZA/3QBuL
YA1WSoWqWKcwpsDQdByvZC83eANufTiwynkNiY9sQvDUdAF0n8v4DKcyW5suqFWq
ELmaw39rATMlKfHUiMOyTlLkl2znPu1bHBEh6Dg80MY97M0JDtlj7T1lJhvRLwp/
J0bmhzaUuuH2BRdNd44Xn7GUxUBsDbg+PA85vUAopbkXZyFzZE09GMmKwsJrREvs
rvc0wAOc2zRFpsRDXLfbTN5BhKATHmfPLOKXoh8D2JaMlnSLsT6FRRIBOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXr2wOLCWkOy1Nzdm1VGqxm75x2MB8GA1UdIwQY
MBaAFHrM8TckWuxmsvZ0qFgadEmuLPzkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXN6eE55UmE3R2F5OW5Tb1dCcDBTYTRzX09RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zOGYyNGItYjY4ZS00MTQzLWJiNTIt
N2ZjM2ZlMDVmMzEwLzEvZXN6eE55UmE3R2F5OW5Tb1dCcDBTYTRzX09RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8zOGYyNGItYjY4ZS00MTQzLWJiNTItN2ZjM2ZlMDVmMzEw
LzEvZXN6eE55UmE3R2F5OW5Tb1dCcDBTYTRzX09RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFPyZwjy
oCLT4c4ep2LYpA0qr4U0H0zjrXxmf/HdT3fjErBeFo1Vv7Uz6tCTOW1czQIwIlvy
52H2Yg6f+fYgbQFgcqngx71uxfmnyvTNM5MQHhY83FaiPBmuZ2YmVrO658N7Bvto
+KMoNqZ5sEtqOYKM05+P4bnHw2p5TD4FhBChEszivNXZOqe3RlRVuYxGsqumuqWR
SEwDpPi0dDno3uzEaHZpD2RCHMBbTibw4o5HUlNycOE/A/Z3cQa7sC5pU0ZsPk/V
HCCQHHBVbN5N3NWwuaIjmalBU3mOG4pe1zLNsCERNUx8B1MVGbUXUcJVbwz0YfGW
Q+V5ahmemrZ9yw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:49 2026 by rpki-client