Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier: RXo1p4D0EP7t3dJx/8XBa4qajU+ZrZoYn0fiNqPxu/o=
Subject key identifier: 13:16:80:C3:D5:B5:6F:5B:99:D0:D2:E8:4F:15:96:51:A3:7E:57:9F
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 01A0CC354144E815DC6EAF27250EE245E5B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 03:00:37 +0000
Manifest this update: Wed 23 Sep 2026 03:00:37 +0000
Manifest next update: Thu 24 Sep 2026 03:00:37 +0000
Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: gr+FF6FjGwZbF3eZiLL2fzWl6QpUkRtgAz3LSruR3ps=)
2: m22Y1De-nkPO9R3DafQN5L9RCOU.roa (hash: CsiGy9UFamAf9ICsV6hbl4LryS8JIVMr9rlKyNfLKBQ=)
3: vdBF4D6B4y0Ni8JRFy3wrlKFdow.roa (hash: V5Qj+2qVfjThhkfwRXhTo9kpUUm1HojCtg/JdAzbU9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:41:44:e8:15:dc:6e:af:27:25:0e:e2:45:e5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Sep 23 03:00:37 2026 GMT
Not After : Sep 24 03:00:37 2026 GMT
Subject: CN=131680c3d5b56f5b99d0d2e84f159651a37e579f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:35:fd:90:56:a8:43:93:b6:1a:79:8b:ba:0e:
7a:ce:cc:93:8d:82:79:5a:11:97:06:fa:d6:af:47:
a9:aa:98:1f:e1:44:5c:45:22:20:31:79:25:11:66:
3c:f1:21:49:b1:71:c5:3a:6e:e8:8d:a9:24:d9:61:
66:38:35:95:bd:76:74:b4:2f:ab:06:cd:f4:5a:8b:
ba:53:25:01:9e:35:c6:aa:f2:3c:6b:89:40:4a:1e:
06:a1:9f:f4:94:36:3c:88:f2:10:bd:ab:c0:f8:9b:
36:4e:e2:1b:8e:2b:bd:2d:f1:21:c4:e3:0a:a7:6d:
32:93:21:7e:72:d1:e1:72:f5:41:22:76:cb:d5:3e:
9a:4d:1b:94:1f:38:2b:1b:73:ba:8e:8c:c4:9f:b2:
71:10:ac:b3:4c:1a:41:d6:a5:5e:f8:85:8a:c5:43:
2c:5b:3f:44:2a:a4:05:12:46:b3:e7:f8:0a:14:ff:
4c:b2:e8:e6:c1:01:8a:6f:7c:fb:95:95:63:ca:cc:
58:be:a9:ef:df:0c:89:6f:ad:1c:42:1a:89:44:1e:
48:74:fa:a1:94:33:87:f0:ce:a3:27:1b:3e:53:d7:
02:d0:d1:5e:45:fc:f5:8c:39:db:81:f3:32:86:af:
09:8c:da:c8:a6:ac:3d:20:90:9c:11:5c:09:02:9f:
61:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:16:80:C3:D5:B5:6F:5B:99:D0:D2:E8:4F:15:96:51:A3:7E:57:9F
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4e:3f:40:c7:bb:1f:85:dc:fa:21:f2:c8:84:e5:65:61:11:
09:b1:5a:75:28:3f:1f:5a:bd:14:96:cb:76:45:40:fb:42:f1:
6d:c9:d2:e4:ef:ba:5f:b6:a5:23:d8:72:0f:10:6c:4b:83:23:
47:ad:08:45:d6:ad:17:6c:74:a1:83:d2:6d:c6:33:14:1e:88:
49:74:2e:28:a9:ef:ad:cd:b1:7c:4e:f5:a5:4c:a2:ad:59:cb:
6b:12:c8:c2:a7:ab:59:0c:55:83:65:16:03:41:e7:a5:92:75:
b6:ff:6d:ce:a4:e3:9b:2c:5c:40:eb:de:62:9e:c9:f9:1d:fc:
d9:43:1d:a8:17:53:7e:0c:32:e8:3a:14:22:7a:81:7b:e1:ca:
64:7c:3b:8f:e0:e7:61:00:1f:4e:b2:d4:63:63:3d:45:85:0f:
a2:b2:74:a1:1e:78:7a:c0:15:a4:4b:3a:99:74:28:cc:72:65:
f4:1b:fe:4b:8d:a4:47:f6:c9:3e:3f:5f:ce:41:67:82:94:87:
9f:4f:a1:59:00:bb:d3:a3:f1:96:87:08:eb:1d:46:6f:e8:86:
53:2d:04:58:2d:6c:5b:ed:1c:97:eb:79:e2:12:6c:b0:60:9b:
cb:9f:b4:36:bb:b7:84:3d:ea:37:79:89:08:1c:fd:72:1d:ca:
06:73:c1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:34:23 2026 by rpki-client