Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.mft
File: EsEUQhohU4u2vwJkmH56REyA6j4.mft (raw, json)
Hash identifier: Mj4kUn/Rl07CwR6GQdnfFUSO+pKAv3/BnSBxJmn3Jj8=
Subject key identifier: 72:FE:19:C1:24:32:BC:D7:DE:4C:0D:6A:39:00:29:DF:CE:1E:B3:22
Authority key identifier: 12:C1:14:42:1A:21:53:8B:B6:BF:02:64:98:7E:7A:44:4C:80:EA:3E
Certificate issuer: /CN=12c114421a21538bb6bf0264987e7a444c80ea3e
Certificate serial: 01A1250C6DAE10A1C559EC4271B5FA55E5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsEUQhohU4u2vwJkmH56REyA6j4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.mft
Manifest number: 0167
Signing time: Sat 10 Oct 2026 09:02:13 +0000
Manifest this update: Sat 10 Oct 2026 09:02:13 +0000
Manifest next update: Sun 11 Oct 2026 09:02:13 +0000
Files and hashes: 1: EsEUQhohU4u2vwJkmH56REyA6j4.crl (hash: 8p6WR3c7E522pq7CcmLZNwSNI76Qp+BgtyAnm/xR0Eo=)
2: OR-UUzM73lSUM_hbKHEM8OHJZXo.roa (hash: kUN7qIoBO4FukILSXeAZWF7RJ65CvgOOJNH7ORJAX/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsEUQhohU4u2vwJkmH56REyA6j4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0c:6d:ae:10:a1:c5:59:ec:42:71:b5:fa:55:e5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c114421a21538bb6bf0264987e7a444c80ea3e
Validity
Not Before: Oct 10 09:02:13 2026 GMT
Not After : Oct 11 09:02:13 2026 GMT
Subject: CN=72fe19c12432bcd7de4c0d6a390029dfce1eb322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:50:c6:63:b4:e0:0c:cb:bb:7a:6f:1a:d9:c1:
3b:4c:92:1e:56:a8:9a:01:29:d3:90:d9:56:fe:89:
2f:3b:93:36:4a:b2:7b:a3:ab:ca:4a:9c:04:dd:f9:
b4:b7:c3:3e:a1:52:d8:b9:e9:78:77:f7:e8:d3:25:
6c:0b:d0:4d:e7:81:5d:e2:87:5a:1c:5d:ea:ab:a4:
96:85:23:dc:7a:a9:7a:eb:2c:05:aa:cc:d3:fc:2f:
82:94:89:e8:b4:02:ed:29:4f:a5:44:f3:73:f8:6c:
23:fc:fd:aa:ec:20:45:87:d2:cc:0b:9b:8e:a6:b7:
f0:e7:29:a2:c7:80:aa:0c:cc:31:64:0f:a8:6d:84:
22:dd:dc:a1:59:ca:d8:ed:44:3f:29:2f:7d:6b:48:
69:b0:43:c7:67:fb:16:4b:e8:3a:24:e2:b5:3c:3d:
98:31:11:da:9e:34:c1:c0:b9:12:83:64:c8:39:f1:
30:23:63:1e:0a:bd:5d:25:69:2e:01:7d:8d:27:17:
f5:26:26:7c:48:ef:0d:9d:c7:ae:50:74:ce:ee:8c:
bb:0e:bc:d8:b8:7c:ff:2f:c6:86:5e:7c:02:f7:21:
fc:d2:a2:ce:f1:55:87:ce:56:b2:4c:db:1e:32:40:
78:d7:15:f1:a2:64:2a:b4:59:89:02:3d:79:59:e3:
fe:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FE:19:C1:24:32:BC:D7:DE:4C:0D:6A:39:00:29:DF:CE:1E:B3:22
X509v3 Authority Key Identifier:
keyid:12:C1:14:42:1A:21:53:8B:B6:BF:02:64:98:7E:7A:44:4C:80:EA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsEUQhohU4u2vwJkmH56REyA6j4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:23:3e:c1:b0:92:61:76:fb:ab:d7:fe:19:5e:3c:f9:28:df:
2b:a4:f2:af:52:a6:10:99:ad:f0:44:4d:fa:bc:0b:e4:e8:66:
4b:3e:42:d3:f3:38:fd:99:4d:f4:bb:0e:90:36:02:fb:d8:db:
d4:de:35:fb:e9:53:01:1c:93:98:c8:94:0c:9d:61:30:2f:77:
2f:a6:a7:18:d6:14:80:f8:e1:74:34:02:39:7c:ce:3d:ef:09:
23:d8:5a:7d:07:45:e9:94:96:e5:34:80:93:df:3a:96:2b:ed:
6c:1b:e1:79:27:0b:ef:95:60:71:1f:27:2a:88:eb:7a:0d:c1:
b4:12:8a:02:35:de:7c:67:f8:b1:af:a5:17:1a:52:d1:7b:76:
cf:9a:26:32:31:8f:44:9e:f6:f4:2b:96:6d:74:88:bf:7f:2a:
35:a5:5a:8c:a9:80:96:dd:74:c5:07:42:12:1f:24:55:e7:af:
a2:8e:04:21:2d:02:43:ed:20:a6:27:82:21:c5:e8:cc:60:84:
95:54:f3:07:e6:24:33:83:00:37:9d:58:b1:a7:92:02:60:9d:
c8:43:04:80:ce:0d:87:77:f7:0b:2c:93:61:a9:7a:5e:d9:6d:
35:d7:a3:d7:bd:cf:a4:29:94:b6:7a:6f:f9:5f:ca:ae:ad:1b:
ce:bf:d2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:15:12 2026 by rpki-client