Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
File: EsqtEcXYmB2YPDAehqGs8tgRqsE.mft (raw, json)
Hash identifier: etsaI6fRjq5r+kKkYOnbDjuPlUrm8cR0H91EG1zyir4=
Subject key identifier: D6:16:0E:C5:41:98:A1:5B:6C:9E:4D:DF:53:D3:57:B7:FC:BA:00:59
Authority key identifier: 12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1
Certificate issuer: /CN=12caad11c5d8981d983c301e86a1acf2d811aac1
Certificate serial: 019D9A3EE13CEEB7C99CA9DA0A4DBC27DAEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
Manifest number: 12BE
Signing time: Fri 17 Apr 2026 07:01:45 +0000
Manifest this update: Fri 17 Apr 2026 07:01:45 +0000
Manifest next update: Sat 18 Apr 2026 07:01:45 +0000
Files and hashes: 1: EsqtEcXYmB2YPDAehqGs8tgRqsE.crl (hash: 20yZZI0QggI3ZlRcGrOUSKd5cA/loOQlHnlKln+SiyQ=)
2: fWvJKSqx17IpwOZP-DnMdVD05bA.roa (hash: a2shhv3zQfZlWKQCMJwiD1YrWh6DtVIVP13FjzeqLCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e1:3c:ee:b7:c9:9c:a9:da:0a:4d:bc:27:da:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12caad11c5d8981d983c301e86a1acf2d811aac1
Validity
Not Before: Apr 17 07:01:45 2026 GMT
Not After : Apr 18 07:01:45 2026 GMT
Subject: CN=d6160ec54198a15b6c9e4ddf53d357b7fcba0059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a9:06:5b:6f:b5:49:cc:b1:83:7b:ce:12:71:
0e:17:14:1b:44:6d:1e:73:7f:85:47:e6:76:2e:27:
b9:67:39:9f:75:61:13:14:12:89:16:60:08:5b:4d:
09:29:d7:4e:23:d6:01:2f:f5:d2:11:be:c9:65:d5:
ea:2a:60:e9:c9:32:9d:a3:be:eb:13:21:4c:15:54:
b9:b5:f5:88:86:83:43:5e:79:52:47:21:3e:9a:8c:
be:e0:72:d5:6e:9b:99:3b:b7:b9:c1:3c:43:5d:4e:
eb:e7:0d:73:c7:1c:2f:87:a0:50:82:f6:da:57:3a:
68:99:32:a7:ef:fe:ed:d0:c9:b1:8c:26:70:e7:2b:
35:a9:2e:a0:00:db:4f:5e:5c:5c:f8:af:2f:ef:ca:
ed:56:01:be:8d:f4:e2:48:d3:27:c5:c5:8c:a9:00:
28:d7:a3:c5:42:18:a6:ac:12:42:6d:32:61:3d:33:
a9:39:15:19:2b:60:68:5c:b6:1d:cd:e3:00:1e:c0:
bd:86:4f:bc:37:32:c2:cb:de:e1:a7:9b:e2:ce:e0:
3f:83:a3:5b:3e:14:2d:ac:b1:2b:59:84:22:bc:ad:
c4:12:4c:02:32:da:6c:7b:95:ce:94:5e:d9:f8:cb:
00:c3:0f:91:e5:9b:59:aa:79:9a:90:6e:b4:61:9f:
3d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:16:0E:C5:41:98:A1:5B:6C:9E:4D:DF:53:D3:57:B7:FC:BA:00:59
X509v3 Authority Key Identifier:
keyid:12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:22:c3:7f:96:35:4c:8e:99:11:80:2c:94:f4:bd:65:6b:68:
05:ab:a4:4e:ff:e7:ce:02:40:5b:1e:32:cc:0c:03:a2:5e:33:
42:c0:4f:24:9c:35:e6:a2:99:5b:29:b6:0a:63:8e:53:30:c6:
1a:56:fa:66:98:89:ea:be:37:04:cf:7c:01:37:23:1a:87:ab:
0b:be:5b:93:12:82:cf:8e:fa:5b:dd:df:04:be:5f:fe:41:bc:
f5:3c:5f:bf:3f:8a:f1:4b:e9:d5:75:88:06:60:1a:6d:58:7c:
bf:7a:ec:dc:1b:f8:9d:9b:64:36:24:4a:a6:80:9c:be:88:0f:
8b:01:4c:44:df:a4:e3:4b:f8:0d:60:d9:c7:1b:76:f6:fb:77:
bc:06:a3:99:d5:41:ad:6c:36:b9:b7:59:84:98:4e:bc:28:b1:
39:c2:fc:88:5f:b3:05:27:cc:60:b9:93:c8:2d:57:2f:f8:cd:
18:c9:92:9b:d8:b2:58:38:01:33:2d:6b:1f:e8:23:23:50:db:
3e:4c:d6:55:71:fe:3d:eb:6d:85:ab:24:31:89:12:7d:23:98:
7b:8b:4f:00:e1:17:85:a9:fa:30:20:8a:cb:a2:86:6e:bb:a1:
76:5f:a6:0e:14:64:fd:27:20:fb:6e:e9:19:12:f4:43:b1:6a:
5e:d9:98:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:05:40 2026 by rpki-client