Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier: DmEXv+e6ZLrBpPtX4PozOW0J6BSkOGSpwrsTR/zdyJ0=
Subject key identifier: C6:49:9D:66:D7:6D:56:E8:08:BB:05:DB:C2:E3:14:38:AA:2C:4C:3A
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 019D9961DD11786F57E2B180F3217D807AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:00:20 +0000
Manifest this update: Fri 17 Apr 2026 03:00:20 +0000
Manifest next update: Sat 18 Apr 2026 03:00:20 +0000
Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: uVZWkN9Io+kVlGXYJ70eYDZVlytX0wdtxqcP79XDGA0=)
2: m22Y1De-nkPO9R3DafQN5L9RCOU.roa (hash: CsiGy9UFamAf9ICsV6hbl4LryS8JIVMr9rlKyNfLKBQ=)
3: vdBF4D6B4y0Ni8JRFy3wrlKFdow.roa (hash: V5Qj+2qVfjThhkfwRXhTo9kpUUm1HojCtg/JdAzbU9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:dd:11:78:6f:57:e2:b1:80:f3:21:7d:80:7a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Apr 17 03:00:20 2026 GMT
Not After : Apr 18 03:00:20 2026 GMT
Subject: CN=c6499d66d76d56e808bb05dbc2e31438aa2c4c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b8:1e:4e:20:26:fb:1b:9f:6b:41:92:74:1c:
e3:35:8c:33:fc:ee:16:c7:78:2c:2d:b5:47:59:49:
09:50:d6:77:36:09:0f:86:8d:a7:0a:39:6a:04:f6:
2c:04:f4:d1:fd:aa:3d:cd:05:db:4f:31:eb:9f:d1:
6c:e0:1b:3b:df:a9:07:02:28:4f:9a:e7:28:65:a2:
f1:eb:55:c8:b8:08:2b:f5:3f:67:90:28:89:b9:32:
c0:36:05:1d:19:f9:a2:59:46:03:bb:57:c3:99:5c:
43:55:dc:44:b5:81:39:b9:42:f9:e5:d5:15:5a:25:
f7:f8:cc:f9:c4:70:13:a5:a9:5b:31:b0:da:16:d1:
50:3f:af:e2:3a:a7:8f:1d:6e:79:46:a6:bb:30:53:
7d:c2:03:6b:0c:15:9e:7c:73:57:ef:01:ff:ee:1b:
f9:27:40:b3:98:52:3d:fd:8c:87:8b:dc:47:10:93:
4f:2b:e1:5c:87:5a:d1:50:92:c6:e7:cb:c0:55:4a:
75:0c:ac:7b:9a:0a:ca:14:0a:8b:4b:02:f1:b9:ea:
64:16:f2:5b:bf:fa:d0:67:ad:50:b3:59:c5:bc:23:
04:31:22:64:22:2c:88:ed:6a:6b:22:48:3d:e4:a1:
2e:3e:0d:6e:46:d9:0b:6d:50:3d:de:72:1b:70:f2:
d2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:49:9D:66:D7:6D:56:E8:08:BB:05:DB:C2:E3:14:38:AA:2C:4C:3A
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a2:08:39:22:e6:ae:e7:9d:10:5f:79:45:4f:d8:3f:5b:6f:
98:3a:95:75:03:ef:88:04:0f:39:49:d2:e0:0d:e1:dc:2f:fa:
9d:28:5c:1e:14:2d:c6:f0:b8:cc:7c:78:56:d9:f7:be:81:97:
cf:31:e7:3f:39:ba:56:e6:c3:a8:a2:b9:b8:24:03:99:2b:9d:
d0:c7:a0:05:f1:78:00:4a:27:6f:bf:3c:32:7c:cc:ea:e8:89:
eb:8f:ab:2e:a4:d7:10:30:b6:57:7d:5c:bd:41:9e:ec:5f:21:
74:f9:51:ad:ea:06:da:7d:a4:1a:6f:f1:2a:6d:7c:8f:28:6e:
b6:08:9d:40:9b:49:28:c1:b8:d2:9a:b4:7b:68:87:7d:e0:5f:
05:39:07:fa:58:72:3a:ff:84:a4:23:72:93:d1:3d:9e:a9:95:
70:b0:29:bb:52:d2:c5:e3:70:6d:db:16:a9:d4:de:c4:7f:e7:
73:ee:b3:18:33:84:d3:ec:15:e6:9c:09:84:9a:75:73:70:d6:
8c:70:6b:a5:73:c6:a9:99:9b:a8:7b:7c:86:48:b5:02:f1:1a:
e6:19:2c:33:3d:8f:c5:02:36:32:72:14:7f:2e:9f:17:b2:ef:
4b:49:77:c6:cf:9f:8b:f5:01:7b:55:ca:38:7f:23:47:49:5d:
8c:b3:89:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:10 2026 by rpki-client