Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
File: Es84yOexki9uvz_TQHNc2wQjFBg.mft (raw, json)
Hash identifier: G1WiTArvqxmM2rXHXfAuIqvpfDdoCwdGYwWUU7XUklU=
Subject key identifier: 4B:5F:7E:3E:A4:0C:C1:91:D0:67:28:DF:1D:40:85:CA:A3:B8:03:9D
Authority key identifier: 12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
Certificate issuer: /CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Certificate serial: 019CAAC6B583231774E7403E0BD551948B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 19:01:15 +0000
Manifest this update: Sun 01 Mar 2026 19:01:15 +0000
Manifest next update: Mon 02 Mar 2026 19:01:15 +0000
Files and hashes: 1: Es84yOexki9uvz_TQHNc2wQjFBg.crl (hash: VcCdrGfs0Mmx3EYdbnuEcREbL67c9252fwh57FgRcGc=)
2: d77IWbkczkICwfpVT1sRhf7rXjA.roa (hash: zbuTl//ldlxEHT4wWa1vNyL5/cZHH2/ZJ1uuYflyQnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:b5:83:23:17:74:e7:40:3e:0b:d5:51:94:8b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Validity
Not Before: Mar 1 19:01:15 2026 GMT
Not After : Mar 2 19:01:15 2026 GMT
Subject: CN=4b5f7e3ea40cc191d06728df1d4085caa3b8039d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:af:7a:6e:d5:60:d8:6d:c7:81:25:78:a3:
e8:f9:df:e6:42:b3:07:9d:29:49:a3:30:99:aa:64:
3a:2c:36:17:f0:83:b2:c0:76:80:76:86:2b:9d:fd:
49:c6:ac:95:06:c3:29:8f:4f:78:22:30:4c:c2:e5:
be:1f:ff:66:81:24:0e:cd:0f:25:22:4c:37:b2:44:
7e:6c:15:a3:0a:2b:e6:2a:c1:15:e1:c5:95:e4:a1:
94:3a:c1:fa:a0:49:a4:dd:6a:ed:44:e8:52:3b:0c:
16:8b:ef:31:56:c4:28:f4:bc:62:28:f4:d4:33:c7:
be:83:4e:dd:a6:31:05:cd:71:9e:1f:c9:90:53:1e:
81:cd:f8:40:a2:73:3c:f9:f7:90:12:7d:af:ca:cf:
44:b7:94:64:0a:8d:6d:0f:e0:2f:89:64:1d:f9:e6:
21:65:42:e9:43:2e:12:1c:b8:1c:7b:e5:07:36:c4:
62:c0:db:ca:54:e1:eb:46:3e:d5:aa:48:b5:3c:98:
b0:db:f8:65:bf:80:f0:cc:c4:68:9f:7c:0f:74:f9:
54:92:98:56:a5:2f:4e:6f:49:25:02:ef:1e:62:cf:
31:bd:01:39:9b:51:d0:d2:09:11:00:22:74:1f:a4:
81:a6:84:44:5d:6f:81:80:fb:11:a7:14:6e:7d:ec:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5F:7E:3E:A4:0C:C1:91:D0:67:28:DF:1D:40:85:CA:A3:B8:03:9D
X509v3 Authority Key Identifier:
keyid:12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ea:27:ab:73:cd:ca:e4:88:55:d8:20:ca:aa:45:33:7e:cc:
d1:aa:a2:0b:4e:b6:94:39:17:fb:be:83:2c:f1:a1:7d:49:a8:
18:84:5d:36:c2:c9:b6:8a:03:77:e3:ff:ce:74:72:00:ca:8a:
66:86:9a:d5:9d:1a:de:f7:3f:39:89:71:85:8a:a4:28:b7:88:
27:8c:3a:fa:ed:98:1d:d5:39:d5:27:fe:eb:b6:d8:4f:19:71:
19:56:c4:3d:1b:1b:3b:37:89:08:48:91:05:74:0b:cd:28:36:
bf:f0:82:26:6a:e5:0b:a2:19:7b:dc:21:ba:55:d1:7d:b0:7e:
bd:b3:1f:36:56:59:a4:60:d7:80:87:63:d4:1d:d7:6a:59:70:
74:16:f0:d6:39:4a:a2:27:f9:0f:35:cb:e5:52:b8:24:2b:b9:
3d:e5:a9:f5:61:16:26:e4:0e:ad:28:67:8b:86:e9:81:2f:48:
b6:eb:20:ce:14:48:43:05:06:9e:01:34:e8:ef:00:19:f8:85:
15:eb:67:9f:cd:57:73:72:38:94:64:e0:07:d9:64:31:22:21:
2f:cb:16:bc:2b:da:4c:8d:62:c5:1d:40:91:25:37:f7:03:29:
2b:d3:53:af:b0:b8:90:6c:05:fa:82:d2:63:90:7e:f9:61:db:
8b:50:c7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:19 2026 by rpki-client