Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier: sKXqHZmob6gju87pZrl0GVta4V/QkputnnMV09w2O7w=
Subject key identifier: 15:D7:CF:70:BF:9E:A3:63:EB:96:3F:4A:B2:CB:DC:92:0D:73:80:55
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 019CABD99B551EBEB38E368F7ECBDCA0A9C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:30 +0000
Manifest this update: Mon 02 Mar 2026 00:01:30 +0000
Manifest next update: Tue 03 Mar 2026 00:01:30 +0000
Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: GOM/U5Uh2cbPL+Vef9dMT+OFUI8CWQawQb+uzxzHXig=)
2: m22Y1De-nkPO9R3DafQN5L9RCOU.roa (hash: CsiGy9UFamAf9ICsV6hbl4LryS8JIVMr9rlKyNfLKBQ=)
3: vdBF4D6B4y0Ni8JRFy3wrlKFdow.roa (hash: V5Qj+2qVfjThhkfwRXhTo9kpUUm1HojCtg/JdAzbU9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:9b:55:1e:be:b3:8e:36:8f:7e:cb:dc:a0:a9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Mar 2 00:01:30 2026 GMT
Not After : Mar 3 00:01:30 2026 GMT
Subject: CN=15d7cf70bf9ea363eb963f4ab2cbdc920d738055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:9e:39:d3:30:01:77:fb:5b:69:79:f1:e4:
5c:3d:fe:ae:d1:95:31:93:5a:9b:e5:f4:ed:f4:31:
78:a7:2d:a0:5b:2a:f3:72:ee:dc:3b:d7:53:8c:12:
a9:70:fa:04:f9:c0:4a:4b:8e:df:f8:8f:ce:58:c2:
85:c5:1f:20:92:16:7e:63:cc:40:f2:92:f9:06:fd:
c1:06:3f:75:b7:03:1a:7e:f0:4b:de:36:ff:50:94:
0c:82:a3:a9:58:ed:ba:00:b0:70:84:bc:27:ca:33:
4d:94:b0:10:0a:28:c1:89:79:b2:5b:a1:50:7a:91:
ee:d1:93:a2:2e:cc:b4:20:e6:0f:40:6b:68:ef:26:
eb:a2:c6:70:48:39:14:9b:b9:28:7d:d0:82:92:6a:
73:65:28:e4:20:53:e8:f6:9b:a2:99:c5:4b:39:ab:
90:12:7e:89:4e:d2:fb:8f:a1:07:36:ee:6c:39:54:
4f:f7:f9:e3:1a:20:06:b5:a3:2d:d4:fb:6e:8a:d4:
20:7b:9b:a3:03:fe:1e:a1:5e:42:0d:80:27:63:08:
48:b3:4c:99:83:36:0f:ef:db:7f:81:a6:fb:6e:4f:
07:be:0b:d4:4e:23:1b:f8:c2:78:ff:51:fa:87:62:
50:cc:d4:11:8d:4f:ea:26:b3:b5:39:7d:5b:f9:fa:
ac:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D7:CF:70:BF:9E:A3:63:EB:96:3F:4A:B2:CB:DC:92:0D:73:80:55
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:0b:d5:5a:67:95:ab:7a:de:48:5a:cf:a3:80:9f:ae:70:81:
0b:85:bc:08:64:6d:0c:4b:43:e7:d2:20:05:22:18:85:2f:ac:
fb:56:43:60:90:7a:c4:ed:99:9a:3b:cb:f3:9e:ee:dd:71:cf:
e9:ea:f3:6f:48:93:e0:ad:f2:38:fc:a5:93:c7:4e:26:b6:a2:
84:b8:b0:b1:98:76:ca:f6:88:ec:cd:bc:84:16:ce:b2:8b:fa:
81:d9:7d:77:70:d9:20:44:92:09:26:0b:89:d4:4f:b0:80:56:
59:23:f6:09:a9:0e:5f:84:55:a4:64:02:31:ce:15:44:6c:d3:
6a:fa:42:b7:b4:54:9c:43:44:ce:8c:c2:94:2f:4b:9a:09:ad:
81:fb:33:3e:09:c2:dd:20:56:54:89:24:ac:69:a7:7d:91:fa:
2c:4d:5a:1e:aa:6f:74:b0:ea:52:12:9f:5f:f1:32:f6:30:75:
87:2e:f7:e0:bd:90:5d:f4:10:69:46:2a:6d:9d:a2:f0:d5:43:
97:ff:81:6e:ec:9a:4d:9d:b4:8d:e7:2d:ba:4b:aa:a7:28:07:
11:b8:89:af:30:06:65:23:db:75:22:a4:0a:65:70:c0:65:35:
87:a7:71:35:7e:6c:d4:27:0b:e1:7b:86:7a:20:d8:2f:e2:33:
49:6b:47:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2ZtVHr6zjjaPfsvcoKnGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2UxNzZhNjljY2M5Yzk5NmUxNjEwOTI1YzBiNmJkZjc2
YjIwN2MwHhcNMjYwMzAyMDAwMTMwWhcNMjYwMzAzMDAwMTMwWjAzMTEwLwYDVQQD
EygxNWQ3Y2Y3MGJmOWVhMzYzZWI5NjNmNGFiMmNiZGM5MjBkNzM4MDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4yeOdMwAXf7W2l58eRcPf6u0ZUx
k1qb5fTt9DF4py2gWyrzcu7cO9dTjBKpcPoE+cBKS47f+I/OWMKFxR8gkhZ+Y8xA
8pL5Bv3BBj91twMafvBL3jb/UJQMgqOpWO26ALBwhLwnyjNNlLAQCijBiXmyW6FQ
epHu0ZOiLsy0IOYPQGto7ybrosZwSDkUm7kofdCCkmpzZSjkIFPo9puimcVLOauQ
En6JTtL7j6EHNu5sOVRP9/njGiAGtaMt1PtuitQge5ujA/4eoV5CDYAnYwhIs0yZ
gzYP79t/gab7bk8HvgvUTiMb+MJ4/1H6h2JQzNQRjU/qJrO1OX1b+fqsbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXXz3C/nqNj65Y/SrLL3JINc4BVMB8GA1UdIwQY
MBaAFHrOF2ppzMnJluFhCSXAtr33ayB8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXM0WGFtbk15Y21XNFdFSkpjQzJ2ZmRySUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82YWZjYmUtNmRmMC00Zjc3LWFmMzQt
YzYxODAzYzM0NjU3LzEvZXM0WGFtbk15Y21XNFdFSkpjQzJ2ZmRySUh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My82YWZjYmUtNmRmMC00Zjc3LWFmMzQtYzYxODAzYzM0NjU3
LzEvZXM0WGFtbk15Y21XNFdFSkpjQzJ2ZmRySUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQvVWmeV
q3reSFrPo4CfrnCBC4W8CGRtDEtD59IgBSIYhS+s+1ZDYJB6xO2ZmjvL857u3XHP
6erzb0iT4K3yOPylk8dOJraihLiwsZh2yvaI7M28hBbOsov6gdl9d3DZIESSCSYL
idRPsIBWWSP2CakOX4RVpGQCMc4VRGzTavpCt7RUnENEzozClC9LmgmtgfszPgnC
3SBWVIkkrGmnfZH6LE1aHqpvdLDqUhKfX/Ey9jB1hy734L2QXfQQaUYqbZ2i8NVD
l/+BbuyaTZ20jectukuqpygHEbiJrzAGZSPbdSKkCmVwwGU1h6dxNX5s1CcL4XuG
eiDYL+IzSWtHRg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:22 2026 by rpki-client