Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier: HmKzXdn9J4CQu7z7SyNHiMbDRMwOqGXy6S4QkvxNK+Q=
Subject key identifier: 85:79:BA:3D:EA:0F:CC:1D:F3:0A:E4:A9:70:D5:7B:DE:16:A1:D9:04
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 019EBEED6EE4D941E4E5765F2AB4BD2DD0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 03:01:31 +0000
Manifest this update: Sat 13 Jun 2026 03:01:31 +0000
Manifest next update: Sun 14 Jun 2026 03:01:31 +0000
Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: FH+cLRyZ1GCl94GAt1ogZhDRDQSjGUPHZJuqKfavZng=)
2: m22Y1De-nkPO9R3DafQN5L9RCOU.roa (hash: CsiGy9UFamAf9ICsV6hbl4LryS8JIVMr9rlKyNfLKBQ=)
3: vdBF4D6B4y0Ni8JRFy3wrlKFdow.roa (hash: V5Qj+2qVfjThhkfwRXhTo9kpUUm1HojCtg/JdAzbU9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:6e:e4:d9:41:e4:e5:76:5f:2a:b4:bd:2d:d0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Jun 13 03:01:31 2026 GMT
Not After : Jun 14 03:01:31 2026 GMT
Subject: CN=8579ba3dea0fcc1df30ae4a970d57bde16a1d904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d1:53:45:62:b9:58:5c:07:cd:78:e6:ac:16:
58:42:15:63:41:61:06:40:2b:82:10:af:cc:1b:9e:
95:06:93:eb:41:11:57:b9:71:be:9a:21:08:6d:72:
8b:fb:da:10:c7:9f:0c:70:3c:cd:3b:d3:91:d0:71:
e9:b5:28:cb:f8:9a:03:3b:7b:63:42:45:4a:5b:15:
6b:41:0e:09:fe:73:7f:0d:f8:fb:b1:17:82:d1:09:
b6:ee:c0:0d:34:a8:65:1b:c4:38:0e:05:14:ee:f8:
c9:9e:d6:47:85:d9:2a:93:f8:cc:f2:d4:02:58:7b:
e5:d7:cd:21:31:af:55:b8:01:48:1d:9b:19:e3:3f:
12:23:d8:13:5f:3d:02:13:f4:91:0e:fe:76:3a:c4:
61:43:9e:c4:56:ff:cb:95:b6:5b:cb:df:fe:be:45:
f2:9a:00:5a:e7:d9:c4:c8:4a:7a:80:30:04:54:ea:
3c:23:05:96:79:1a:7e:37:74:13:0b:b0:de:e4:c4:
9c:23:13:21:b5:9c:38:24:44:0b:d4:2c:f5:7d:9b:
a8:a5:e9:6a:42:8d:18:21:a5:a9:80:04:33:aa:d1:
8c:a5:91:d4:06:32:66:50:ee:d8:96:c2:20:e1:85:
88:d7:0b:2e:58:10:7f:14:66:c8:20:ac:8c:8a:5b:
79:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:79:BA:3D:EA:0F:CC:1D:F3:0A:E4:A9:70:D5:7B:DE:16:A1:D9:04
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e2:f4:49:65:db:78:30:56:08:1c:41:a3:02:97:ab:03:6a:
bd:95:5c:c2:61:80:6f:66:f9:40:96:f8:62:55:9c:ba:c4:0c:
91:bb:aa:50:e1:56:90:e5:6e:8e:60:69:5d:0b:75:28:d8:81:
0d:fe:fb:51:a2:fd:11:cc:39:28:34:93:b4:95:fd:a7:2a:d7:
3e:83:e2:82:a1:e7:01:4b:0f:18:9a:13:4d:fc:25:84:90:68:
ef:3a:f8:b0:f7:d4:4a:2f:37:ff:e4:4b:92:35:d0:28:e8:e2:
b9:c4:ba:76:14:0f:1d:40:26:27:0e:ea:35:70:89:72:09:ee:
11:6c:3e:8f:91:0f:c4:dd:62:87:9a:5a:4e:d5:73:b2:d3:32:
f0:f1:f6:da:32:c6:99:5a:db:2d:e5:3c:25:55:4b:ff:d9:2a:
53:00:6f:5a:48:b9:c3:57:76:4d:7f:f8:ac:cc:a8:5b:b0:21:
43:73:29:d6:dd:8c:65:3f:1c:45:15:38:08:87:e7:82:4c:ba:
03:eb:d2:21:2b:47:70:04:6e:c2:2e:9c:11:46:83:dc:0c:c2:
56:f4:70:27:92:0d:ae:76:6b:ff:38:0c:ee:ac:bc:7c:dc:2a:
5d:a7:4f:cc:fd:7f:a6:9d:5e:8c:9e:a2:bd:56:9d:56:23:11:
00:8c:bd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:21:20 2026 by rpki-client