Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
File: eSttblvaBSZfwM6XGaYzvgSm6Xk.mft (raw, json)
Hash identifier: OYQbLWLwvNZiUNRZ/Vd9RMr+9uhAjO0wDniiK+QGvNE=
Subject key identifier: 79:F2:1C:CA:34:40:47:62:6D:06:C6:DA:04:AB:34:45:E3:28:B8:CD
Authority key identifier: 79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
Certificate issuer: /CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Certificate serial: 019D9AE34ED5063CFD17A68DF0C1779F02A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 10:01:21 +0000
Manifest this update: Fri 17 Apr 2026 10:01:21 +0000
Manifest next update: Sat 18 Apr 2026 10:01:21 +0000
Files and hashes: 1: eSttblvaBSZfwM6XGaYzvgSm6Xk.crl (hash: FHZy7S2BxZjBFtZkoxVD8V69dsWP2lnIVCEMd9UNFWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:4e:d5:06:3c:fd:17:a6:8d:f0:c1:77:9f:02:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Validity
Not Before: Apr 17 10:01:21 2026 GMT
Not After : Apr 18 10:01:21 2026 GMT
Subject: CN=79f21cca344047626d06c6da04ab3445e328b8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:df:bb:38:13:25:1f:60:b3:fa:e8:d9:9e:
66:54:61:b8:f7:dd:4e:0c:c6:98:4d:6d:f3:34:fa:
65:a2:fc:d5:05:2f:4f:78:a7:65:cd:1b:0d:60:17:
80:f3:0a:d2:6b:a3:88:ce:1e:dd:06:49:85:fd:bb:
ab:f3:8a:bc:67:22:6d:89:40:58:15:60:1f:6e:60:
59:63:64:53:0a:e7:9a:a1:e7:61:29:77:1c:47:c0:
6e:10:a8:07:8a:ea:c5:a9:53:02:3f:ca:9f:fc:15:
3d:32:12:b4:da:49:e2:97:7f:2a:e7:7b:c1:70:bb:
2f:35:74:ea:85:43:5f:74:94:a3:98:64:af:c1:e9:
71:f1:43:14:7a:97:15:a1:69:de:f1:3b:b3:fe:de:
af:92:5b:9a:01:50:ec:7a:0a:a4:e8:83:6c:b7:cb:
b4:dc:4a:29:66:dd:71:f7:ca:ba:b9:e3:dc:ad:9b:
40:5e:48:88:04:65:37:f1:8a:c7:75:0c:1d:fa:5b:
05:8c:ce:69:9e:fb:7f:dd:98:e5:68:b3:1b:f2:ad:
37:6e:06:fd:36:50:5c:00:ef:b8:c5:a0:e1:99:32:
47:6d:75:53:db:77:38:7b:78:37:1f:51:be:f0:eb:
22:c4:54:62:23:ba:45:0b:50:8f:39:4d:be:8b:7e:
36:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F2:1C:CA:34:40:47:62:6D:06:C6:DA:04:AB:34:45:E3:28:B8:CD
X509v3 Authority Key Identifier:
keyid:79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5a:ea:e5:23:a7:f2:74:39:92:ef:3f:f0:4b:7f:0e:82:2f:
60:df:3b:f5:83:87:69:8c:b2:59:95:be:88:95:4a:9d:57:23:
88:91:03:08:c3:15:98:fe:55:e4:db:36:02:55:15:2a:a5:3f:
21:ef:7a:4a:b8:a6:65:52:05:eb:a9:04:54:d0:a6:0c:e0:9e:
d2:59:a4:02:43:51:46:ce:e1:d3:06:eb:8e:3c:47:85:4e:10:
f7:5e:5f:42:ec:3f:7b:b0:7e:c9:74:73:1f:3b:72:97:da:9d:
e2:e7:80:b1:14:91:e4:fc:14:44:8f:61:94:3c:37:70:9a:ea:
76:c0:81:5e:ab:7f:e1:5c:e6:2e:cb:f7:64:9a:09:aa:8d:9f:
30:ee:e4:e1:c2:c4:36:3b:4f:93:aa:83:d0:cb:7c:1f:5f:77:
02:64:a1:61:eb:21:f2:60:56:bf:7c:79:8d:bb:f8:c5:32:27:
96:1c:a5:68:d0:fe:85:65:75:4c:8c:2f:1b:83:f0:16:01:59:
f4:f7:8d:7e:12:7e:cc:b7:e1:50:93:d9:84:c5:c7:52:44:7d:
75:e8:f9:01:69:e0:e9:86:27:0c:1a:80:c0:fb:76:8c:a6:e8:
2e:28:0e:b6:10:ff:79:45:11:44:84:c7:ad:54:e5:51:57:c1:
ef:0f:73:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a407VBjz9F6aN8MF3nwKjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MmI2ZDZlNWJkYTA1MjY1ZmMwY2U5NzE5YTYzM2JlMDRh
NmU5NzkwHhcNMjYwNDE3MTAwMTIxWhcNMjYwNDE4MTAwMTIxWjAzMTEwLwYDVQQD
Eyg3OWYyMWNjYTM0NDA0NzYyNmQwNmM2ZGEwNGFiMzQ0NWUzMjhiOGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjTfuzgTJR9gs/ro2Z5mVGG4991O
DMaYTW3zNPplovzVBS9PeKdlzRsNYBeA8wrSa6OIzh7dBkmF/bur84q8ZyJtiUBY
FWAfbmBZY2RTCueaoedhKXccR8BuEKgHiurFqVMCP8qf/BU9MhK02knil38q53vB
cLsvNXTqhUNfdJSjmGSvwelx8UMUepcVoWne8Tuz/t6vkluaAVDsegqk6INst8u0
3EopZt1x98q6uePcrZtAXkiIBGU38YrHdQwd+lsFjM5pnvt/3ZjlaLMb8q03bgb9
NlBcAO+4xaDhmTJHbXVT23c4e3g3H1G+8OsixFRiI7pFC1CPOU2+i3427wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnyHMo0QEdibQbG2gSrNEXjKLjNMB8GA1UdIwQY
MBaAFHkrbW5b2gUmX8DOlxmmM74Epul5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVN0dGJsdmFCU1pmd002WEdhWXp2Z1NtNlhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9kYWMxZTUtMWZkOS00M2Q0LTg5MjYt
MjEzZGMzOTliZTZmLzEvZVN0dGJsdmFCU1pmd002WEdhWXp2Z1NtNlhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9kYWMxZTUtMWZkOS00M2Q0LTg5MjYtMjEzZGMzOTliZTZm
LzEvZVN0dGJsdmFCU1pmd002WEdhWXp2Z1NtNlhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVrq5SOn
8nQ5ku8/8Et/DoIvYN879YOHaYyyWZW+iJVKnVcjiJEDCMMVmP5V5Ns2AlUVKqU/
Ie96SrimZVIF66kEVNCmDOCe0lmkAkNRRs7h0wbrjjxHhU4Q915fQuw/e7B+yXRz
Hztyl9qd4ueAsRSR5PwURI9hlDw3cJrqdsCBXqt/4VzmLsv3ZJoJqo2fMO7k4cLE
NjtPk6qD0Mt8H193AmShYesh8mBWv3x5jbv4xTInlhylaND+hWV1TIwvG4PwFgFZ
9PeNfhJ+zLfhUJPZhMXHUkR9dej5AWng6YYnDBqAwPt2jKboLigOthD/eUURRITH
rVTlUVfB7w9zaw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:52:37 2026 by rpki-client