
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
File: eSttblvaBSZfwM6XGaYzvgSm6Xk.mft (raw, json)
Hash identifier: /hoOzt0kxFawSGJ45c9EDalxU+fmfkKRRTvXQgDNJVw=
Subject key identifier: 73:51:B7:17:5B:75:63:6C:CD:1E:C4:65:23:6D:FF:85:AF:FE:41:DE
Authority key identifier: 79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
Certificate issuer: /CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Certificate serial: 019CAB6AF778B5EC002DD6F168988793F9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:00:39 +0000
Manifest this update: Sun 01 Mar 2026 22:00:39 +0000
Manifest next update: Mon 02 Mar 2026 22:00:39 +0000
Files and hashes: 1: eSttblvaBSZfwM6XGaYzvgSm6Xk.crl (hash: oqUSH/UBtE4GHg/7gaJxzkqc2xUGEWs0atUwkRhu6os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:f7:78:b5:ec:00:2d:d6:f1:68:98:87:93:f9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Validity
Not Before: Mar 1 22:00:39 2026 GMT
Not After : Mar 2 22:00:39 2026 GMT
Subject: CN=7351b7175b75636ccd1ec465236dff85affe41de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:63:83:c9:82:62:0c:f0:f9:08:6b:88:f7:
34:61:a2:ac:1b:60:98:b9:c6:6c:c5:9e:dd:d0:79:
1f:eb:a2:07:ca:87:83:64:c4:fd:24:94:fa:d2:0c:
23:c6:02:27:cc:aa:51:06:58:1f:ab:6f:44:18:a4:
5f:7e:1f:63:5b:09:06:9a:4a:7b:ce:a8:43:4a:27:
66:18:40:e6:a6:af:fa:a6:fb:3f:0b:9b:ea:64:b1:
57:06:76:8d:b4:4f:7b:96:ec:b1:95:0e:b7:36:8a:
4d:77:61:c8:6c:86:22:84:10:21:ed:b9:a8:72:57:
d4:9a:c9:fc:65:33:6c:0d:3c:70:0b:71:3b:56:b5:
f5:50:81:19:3f:8f:cf:a0:fa:6b:6a:09:1c:3e:f3:
39:77:2a:54:4b:b3:c4:b6:8b:57:39:97:93:de:cb:
35:23:9f:eb:97:ec:8b:e4:07:57:fa:eb:1d:fb:f0:
64:7c:70:ab:47:45:83:12:db:51:eb:1c:51:06:59:
25:d9:61:76:42:06:53:3a:3f:c5:7c:be:23:d0:16:
9b:0c:ef:f1:66:42:72:79:29:6c:1d:b1:b4:8a:23:
05:59:91:75:d7:8b:3a:1b:e9:4d:85:ab:44:4b:fb:
7d:1c:dc:9c:c6:b0:67:2d:3b:a7:73:ea:8c:f6:89:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:51:B7:17:5B:75:63:6C:CD:1E:C4:65:23:6D:FF:85:AF:FE:41:DE
X509v3 Authority Key Identifier:
keyid:79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b2:f4:05:a8:f1:48:c8:ce:bd:c4:d6:e3:e4:16:e3:55:3d:
87:0e:89:7d:c3:3b:7c:17:c6:d2:f8:de:57:f2:d8:dc:eb:38:
2a:ec:45:01:7b:7e:e5:00:0d:4f:99:4f:09:ff:a4:a8:f6:d3:
58:31:56:7a:81:29:0a:12:33:e3:04:9e:28:81:27:58:d2:95:
d1:54:6f:22:e0:8b:83:a9:6f:15:14:0d:70:64:ef:6b:ca:10:
d7:6b:67:84:cb:5b:f0:ef:1a:a3:ec:f4:06:39:7c:70:17:64:
ea:93:8d:89:11:2e:bb:96:39:70:64:f2:1a:e4:2f:ff:a2:5c:
62:21:09:01:4f:df:c2:3a:a4:98:98:c3:08:05:dc:ce:99:2b:
32:c2:d2:9c:25:8d:1f:25:8c:2f:b0:35:76:f3:bb:3b:23:d9:
4f:b3:7d:39:87:44:88:3c:66:58:73:df:5e:b9:77:a5:65:18:
a0:58:99:95:1e:25:53:31:2f:5f:7f:6c:cb:9f:7b:ca:9b:72:
da:41:c9:ae:f8:4d:29:a2:8e:72:3c:06:db:60:a2:ad:7b:3b:
08:d0:fd:dd:4f:f2:f6:02:45:b3:6d:7f:78:12:19:78:d9:65:
fd:19:eb:99:b2:61:78:89:43:f6:78:98:50:ff:9d:35:83:58:
38:d5:f3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:37 2026 by rpki-client