Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
File: esYj77_BJHEhYiQMugKk2h1NzqM.mft (raw, json)
Hash identifier: bWDVpyuOnaoyHx/D7iOvIiSQw0xZCVwRcsPr25klslM=
Subject key identifier: E0:7E:0B:8A:66:1D:7F:B8:0D:8D:4E:02:94:0E:B9:2D:89:94:7B:BF
Authority key identifier: 7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
Certificate issuer: /CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Certificate serial: 019CAD5948D0D3537AD6306BD38B0DA3BEF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
Manifest number: 1044
Signing time: Mon 02 Mar 2026 07:00:35 +0000
Manifest this update: Mon 02 Mar 2026 07:00:35 +0000
Manifest next update: Tue 03 Mar 2026 07:00:35 +0000
Files and hashes: 1: esYj77_BJHEhYiQMugKk2h1NzqM.crl (hash: gu5fkfcE6E5u0Z2DDqAmQsiIeDnV81b/pLZqsEhQTv4=)
2: oxAaTJm6w19ZYAezwM2Bse1zk-k.roa (hash: UmiPLqYirI4eFKMHzTXAkfjhckK4NXBAKqDlpgaTmlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:48:d0:d3:53:7a:d6:30:6b:d3:8b:0d:a3:be:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Validity
Not Before: Mar 2 07:00:35 2026 GMT
Not After : Mar 3 07:00:35 2026 GMT
Subject: CN=e07e0b8a661d7fb80d8d4e02940eb92d89947bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a1:98:66:fb:19:d0:69:c6:bf:3d:4e:82:cb:
ef:6d:69:8c:2e:66:29:e6:3c:2c:27:09:9b:16:68:
de:f9:e6:27:48:7c:6f:27:80:13:f3:70:87:d2:c2:
e7:99:6a:13:b5:ed:8d:57:48:d8:af:b7:35:27:6d:
6c:c4:3a:8e:df:41:ce:0a:fe:b7:28:d4:a0:c0:14:
09:c1:d6:0f:7d:3c:eb:21:23:48:26:4e:ae:06:f7:
06:27:03:1c:02:2e:52:3e:44:9a:65:5d:81:f7:c7:
bd:4e:f9:0c:e5:a7:97:c9:4b:d6:34:75:b8:08:42:
8d:16:46:fd:17:37:83:8e:f4:05:92:f2:01:36:3a:
69:a0:c3:ad:88:e9:ae:4b:a1:8b:41:d3:6d:b1:dc:
08:bb:80:a3:6b:cf:20:e0:92:11:d7:8f:a2:f6:41:
d6:33:e1:bf:79:be:33:5d:ab:02:5a:ab:d8:1c:bc:
df:4c:50:7b:5f:23:f4:4a:3b:04:58:12:6a:ba:46:
a7:3c:de:ac:5a:be:24:7e:50:ec:12:78:5a:d8:c7:
d1:50:8d:eb:68:ce:77:38:a6:1d:67:6c:3e:be:3f:
10:81:96:30:f7:39:c9:80:26:93:57:41:63:34:d7:
0d:0f:90:b9:b1:19:f1:10:e7:34:30:8e:2b:81:f5:
f9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7E:0B:8A:66:1D:7F:B8:0D:8D:4E:02:94:0E:B9:2D:89:94:7B:BF
X509v3 Authority Key Identifier:
keyid:7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:35:07:eb:9d:f3:67:d0:80:16:c1:57:55:0c:87:93:a9:05:
e1:7e:24:d5:e1:80:2f:77:ef:01:12:c0:99:29:4a:ec:ad:f6:
f3:af:6c:62:ac:b7:97:39:de:9c:85:44:cb:ba:3b:13:87:5e:
41:79:67:63:91:75:8f:99:f5:d3:19:96:4d:54:7c:9e:14:dc:
00:80:5a:30:60:59:4f:c3:6a:9f:3e:06:42:b9:79:d1:e9:76:
8b:f0:44:19:6a:da:38:8d:58:84:84:5b:ed:e0:f0:7b:2a:b1:
6e:ce:b4:98:e7:d7:6a:b2:ca:34:41:4a:62:f7:cd:be:07:fc:
2b:d4:c2:29:e9:a9:f9:87:19:bd:38:ff:5a:09:a5:f4:9e:32:
27:e6:d4:cd:59:ff:a9:cb:33:79:c1:b9:8c:ac:c0:d7:0e:84:
e7:12:20:28:78:7e:59:64:cf:f3:a6:e4:f3:93:4e:4e:b9:88:
f7:f5:bf:50:60:80:e9:21:7f:30:9f:27:31:d9:09:f8:1a:6d:
68:5e:35:90:4e:32:14:fe:77:bf:7f:08:d2:86:fd:42:27:04:
7d:ce:92:20:a8:03:65:41:62:a4:70:56:32:a2:83:7f:a1:3b:
68:3a:a6:98:e2:42:df:07:43:68:86:7c:7d:e9:f4:7b:90:77:
70:af:73:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:57:47 2026 by rpki-client