Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.mft
File: EsEUQhohU4u2vwJkmH56REyA6j4.mft (raw, json)
Hash identifier: GkqbuX9sUDhmY31c8pUM4NkVXIqQDmAIF4cUS+UB7IE=
Subject key identifier: 12:64:33:79:5D:BB:4D:4E:D4:76:D8:04:AA:2A:50:A6:7C:A1:3D:66
Authority key identifier: 12:C1:14:42:1A:21:53:8B:B6:BF:02:64:98:7E:7A:44:4C:80:EA:3E
Certificate issuer: /CN=12c114421a21538bb6bf0264987e7a444c80ea3e
Certificate serial: 019EC2C9A41D9B2E4B1ED4EF03689F0F6BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsEUQhohU4u2vwJkmH56REyA6j4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.mft
Manifest number: 2B
Signing time: Sat 13 Jun 2026 21:00:55 +0000
Manifest this update: Sat 13 Jun 2026 21:00:55 +0000
Manifest next update: Sun 14 Jun 2026 21:00:55 +0000
Files and hashes: 1: EsEUQhohU4u2vwJkmH56REyA6j4.crl (hash: cSuRxhSHSIwmPCkSWYUCiUgdVxnSIc/Ojtjsvg/cn4I=)
2: OR-UUzM73lSUM_hbKHEM8OHJZXo.roa (hash: kUN7qIoBO4FukILSXeAZWF7RJ65CvgOOJNH7ORJAX/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsEUQhohU4u2vwJkmH56REyA6j4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:a4:1d:9b:2e:4b:1e:d4:ef:03:68:9f:0f:6b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c114421a21538bb6bf0264987e7a444c80ea3e
Validity
Not Before: Jun 13 21:00:55 2026 GMT
Not After : Jun 14 21:00:55 2026 GMT
Subject: CN=126433795dbb4d4ed476d804aa2a50a67ca13d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:24:f1:f5:4f:58:e6:c8:99:c5:c3:c7:ad:92:
58:fc:7a:89:e6:9e:bf:24:7f:64:6b:b1:c9:85:e5:
fb:28:6b:b0:e3:f6:44:5b:f6:73:f9:1d:98:f5:6b:
9d:a1:5d:84:39:17:c5:39:df:a0:d0:21:ba:3b:aa:
f2:da:0f:13:ac:86:38:4f:60:51:e1:78:8b:db:5f:
ea:ca:76:d2:5b:3a:9f:cc:79:a8:57:80:41:d3:c1:
30:5e:3c:dc:c2:bb:b6:81:c8:ba:cb:1d:ce:ea:95:
0a:49:8c:3f:75:51:96:91:3f:28:4f:a5:6d:df:9b:
54:35:33:46:eb:42:75:c4:3f:cb:69:ec:94:a4:e8:
93:bd:30:2d:14:81:bd:ae:11:8c:bf:03:e5:27:7f:
64:37:b9:ee:22:c5:9f:09:5c:f7:34:be:53:ca:a9:
16:5e:73:09:e9:7c:46:b9:fb:01:c1:fb:c9:34:a4:
7b:11:8d:ab:2b:1e:11:d8:67:38:a9:89:43:8a:c4:
5d:3d:10:18:aa:c9:85:c1:b7:72:49:f7:54:7d:3e:
95:ec:db:3b:e6:77:80:a1:c6:40:4b:c9:71:90:ea:
b2:b8:ba:c9:35:80:39:b9:51:76:0b:14:f6:43:7e:
5e:79:6c:db:0b:ad:6c:b6:77:1d:15:22:6f:ab:ca:
e0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:64:33:79:5D:BB:4D:4E:D4:76:D8:04:AA:2A:50:A6:7C:A1:3D:66
X509v3 Authority Key Identifier:
keyid:12:C1:14:42:1A:21:53:8B:B6:BF:02:64:98:7E:7A:44:4C:80:EA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsEUQhohU4u2vwJkmH56REyA6j4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8e:42:c9:b7:9f:ce:55:b6:d5:83:12:0f:56:94:4f:eb:88:
31:7e:4a:48:c6:98:9a:a5:47:b9:15:72:b2:4b:bd:39:61:fe:
64:86:e9:5f:62:bd:9a:d9:b5:a3:f4:fa:0f:83:cd:89:5d:a5:
58:78:70:09:e5:35:75:b2:d0:e3:d5:5c:91:2a:25:4d:b2:06:
54:7c:66:c1:f9:60:ef:35:ff:df:a9:34:1e:29:25:ea:09:e8:
f6:df:6d:78:87:00:89:f6:d4:04:08:bf:b8:0a:93:fa:7d:3e:
b6:92:01:03:19:ea:8a:12:e3:2a:09:60:14:a4:7a:90:b4:42:
57:e5:13:7c:8c:54:2e:67:ed:11:03:69:a5:4a:22:0a:5a:3e:
6e:0c:69:05:bd:ef:cb:da:5b:75:20:5b:89:73:ad:06:43:63:
90:09:10:4c:fe:fd:0b:04:56:8a:49:48:68:d7:53:30:20:c8:
b0:a5:d9:51:7a:5b:68:77:c2:4a:90:88:4b:fb:91:51:d8:f7:
04:92:b3:9c:39:5e:86:7d:d1:1f:50:42:c2:3d:a2:54:b2:aa:
b2:90:f0:2b:f8:c0:83:23:6c:77:8a:f8:de:41:ea:7f:d2:1f:
ec:54:a9:73:df:cb:b2:fe:6d:e8:2b:06:be:83:fa:5c:e4:a1:
17:d1:b3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:52:07 2026 by rpki-client