Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier: b6+KnsWXzCv/rr7BwtNpbXejbhlDY/8xcWH/176MwbM=
Subject key identifier: A2:98:DE:D3:53:16:B5:78:18:C1:BF:9D:FA:47:97:77:82:9E:83:35
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 019FA8990CEACE7792FC1C867CDF34B603FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 12:00:30 +0000
Manifest this update: Tue 28 Jul 2026 12:00:30 +0000
Manifest next update: Wed 29 Jul 2026 12:00:30 +0000
Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: uvwJrOux/rbP1hKhF5e38A8/1jSubrV92bw99e/JSyk=)
2: m22Y1De-nkPO9R3DafQN5L9RCOU.roa (hash: CsiGy9UFamAf9ICsV6hbl4LryS8JIVMr9rlKyNfLKBQ=)
3: vdBF4D6B4y0Ni8JRFy3wrlKFdow.roa (hash: V5Qj+2qVfjThhkfwRXhTo9kpUUm1HojCtg/JdAzbU9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:0c:ea:ce:77:92:fc:1c:86:7c:df:34:b6:03:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Jul 28 12:00:30 2026 GMT
Not After : Jul 29 12:00:30 2026 GMT
Subject: CN=a298ded35316b57818c1bf9dfa479777829e8335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:83:4e:0f:71:08:f7:90:bf:45:6f:2b:16:05:
52:62:a2:b0:9f:36:70:18:e2:56:9e:af:56:d3:46:
5d:ac:80:61:85:b8:81:09:1d:fc:e9:d5:02:75:4f:
9b:df:b2:d6:e9:aa:8b:b6:44:a4:1e:af:91:2b:24:
d5:e1:c9:d8:97:55:4d:ba:d8:ed:25:ab:98:13:28:
fe:51:04:03:8b:d5:41:65:0a:94:c9:65:a9:4e:34:
99:e2:4b:94:ff:79:08:42:28:40:0f:d3:de:fe:4c:
fa:02:08:36:26:ca:3e:60:31:f9:61:2c:31:07:56:
08:bc:ca:df:63:f1:7a:8a:ab:74:72:df:fa:b4:30:
1c:06:09:54:99:fa:34:8b:fc:52:ce:e5:6f:7b:b1:
0a:4c:bd:bb:07:9d:d3:53:88:57:69:6d:85:b7:6d:
05:d6:62:18:6f:6e:13:8b:da:c6:75:b3:a7:43:f1:
1b:91:ea:04:ec:4e:d5:f6:21:32:91:29:21:b7:26:
16:b8:3f:ee:3f:a3:72:8d:07:96:39:7e:a1:3d:5f:
b9:ce:54:e3:38:1c:fd:67:4c:47:34:8f:a0:00:f8:
9b:83:3f:00:02:b1:be:40:50:16:5f:5d:af:b0:ad:
8d:fc:68:9f:29:7f:26:4e:cd:ae:bd:13:3a:00:47:
34:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:98:DE:D3:53:16:B5:78:18:C1:BF:9D:FA:47:97:77:82:9E:83:35
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2e:63:56:1f:32:7e:eb:ef:f4:24:28:bc:78:f6:2d:0a:90:
76:c9:97:80:36:e7:c1:43:63:cd:5c:3c:87:be:5f:ac:89:e9:
b9:8a:18:7b:ed:66:08:84:f8:03:31:13:8d:0f:49:96:bc:51:
5d:0d:ec:0e:3f:83:29:b1:4e:18:d9:78:b1:c8:1d:f4:67:99:
57:98:cd:50:7b:1f:3d:5c:84:a7:71:22:a4:d8:70:db:98:af:
d0:19:ea:84:5d:d8:06:5c:34:8c:c6:38:43:43:fc:a9:1b:de:
45:9c:fe:de:83:74:d8:c1:aa:fb:a7:19:78:0f:28:98:bc:10:
c6:3a:9c:27:cb:c4:fa:dc:ae:64:3d:54:1f:0d:8f:70:4e:a0:
ab:4d:54:f7:38:a5:bf:4d:8c:98:41:92:14:90:1f:42:eb:7b:
a5:16:a8:b6:08:38:00:04:f9:fc:07:15:4e:5b:4d:b3:7c:fa:
34:4d:ad:ba:74:27:82:3b:24:3a:d8:ed:b9:44:ae:c4:bc:7f:
fe:f3:8d:6c:9a:17:61:93:7d:67:22:62:7a:11:b8:02:22:09:
53:91:b9:fa:f3:84:8c:44:94:e0:06:8d:04:86:e4:1e:38:09:
5d:bd:e0:b1:73:81:2b:cc:9d:f8:a5:8f:d9:6b:89:94:6b:80:
ed:ff:55:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:03:24 2026 by rpki-client