Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
File: ESmtAUBy3mYXQ4-xr75BotvcgRw.mft (raw, json)
Hash identifier: KTgSjqNVJRBUnjJbcX5EXVl1ZNNgX6aF2RghMruUlTU=
Subject key identifier: EA:20:31:4D:36:20:2F:55:11:6A:6E:31:DA:68:2F:CA:AF:8B:8B:35
Authority key identifier: 11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
Certificate issuer: /CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Certificate serial: 019D9962A57839536D10B28713A4812D4BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
Manifest number: 106F
Signing time: Fri 17 Apr 2026 03:01:11 +0000
Manifest this update: Fri 17 Apr 2026 03:01:11 +0000
Manifest next update: Sat 18 Apr 2026 03:01:11 +0000
Files and hashes: 1: ESmtAUBy3mYXQ4-xr75BotvcgRw.crl (hash: 5ppnyWHDoDIE7bkEg6ChqK7qU4VkzWmlF4ceQvmpYyE=)
2: yOU3uduoN5dP8e-jmAjD8aQwrlU.roa (hash: O6bQWgeJySRYDkrf9DCbKR1ZNlkw4pe8n+wuoJJY0+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:a5:78:39:53:6d:10:b2:87:13:a4:81:2d:4b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Validity
Not Before: Apr 17 03:01:11 2026 GMT
Not After : Apr 18 03:01:11 2026 GMT
Subject: CN=ea20314d36202f55116a6e31da682fcaaf8b8b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:88:66:24:3d:5c:b5:ff:ca:4b:7e:7f:54:
d6:b9:2e:d4:a7:56:ed:d0:c8:e8:cb:bc:45:3e:f1:
04:68:29:95:92:a3:7e:8e:2d:6d:57:17:4f:6b:9d:
f4:ed:4b:b5:85:ca:78:b3:76:db:30:a9:b8:24:da:
4a:f9:0d:bb:93:63:d6:b1:0b:32:c3:b0:af:02:b0:
00:06:dd:d1:60:20:76:aa:2a:f7:c4:c6:8f:34:59:
b2:c5:56:91:50:f5:45:32:3c:19:f0:64:cf:87:89:
5a:01:be:29:8e:05:df:42:c8:de:a7:4c:55:22:4e:
fe:b5:6c:dd:08:af:40:60:ff:62:ad:60:e0:3d:a3:
b4:49:02:50:83:99:06:79:2d:c3:52:e3:c4:ec:cc:
4b:58:67:8c:f5:61:56:9d:ed:9b:fd:1a:a4:5e:9b:
b7:53:59:60:2c:c1:dd:a6:c3:d3:5d:6b:2c:e1:63:
69:1d:12:3b:96:76:b7:d0:df:62:b5:c6:69:0e:bf:
0f:2b:7b:bb:4b:36:3c:ec:51:6a:ec:27:4a:a9:c5:
01:52:6f:53:fb:f1:09:0b:3c:3a:8e:5b:8e:0f:fc:
17:f0:75:55:71:fa:47:24:24:33:c9:92:1a:a1:5a:
90:ef:17:64:ca:88:a3:53:62:09:81:37:d7:7b:75:
5d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:20:31:4D:36:20:2F:55:11:6A:6E:31:DA:68:2F:CA:AF:8B:8B:35
X509v3 Authority Key Identifier:
keyid:11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a9:a7:91:d6:49:94:f8:6f:64:03:2a:99:16:f3:d6:6e:0f:
24:b4:f3:cb:7f:af:df:1f:67:56:46:3a:d6:ed:9c:0b:4a:f7:
72:75:ac:e7:e7:72:2d:92:01:ba:d7:e1:71:c9:99:8b:3b:42:
73:31:a6:9b:8a:fb:81:5e:b4:ce:97:fd:36:0b:df:d8:0b:69:
be:be:f8:c6:ba:f3:e9:7c:b6:17:08:9f:63:ca:29:83:cc:9e:
d7:38:99:1d:f1:b2:1f:a5:0e:2f:c4:0c:48:83:d7:5a:35:8a:
52:ba:56:a8:4f:09:27:5a:82:7f:b8:78:ae:5c:a6:f1:c9:42:
f3:87:f3:22:5d:a7:23:3b:b0:76:1b:75:c6:eb:32:e2:51:71:
b4:28:6d:67:f3:27:8b:6d:6d:ed:d4:3d:a3:3e:48:c4:84:da:
2e:c6:48:91:c2:5b:e5:80:2d:98:06:62:2e:ee:fa:a9:ca:b6:
3c:d0:7e:6e:a5:ab:a0:4f:a0:fa:f2:59:d8:0e:2e:a4:26:f3:
13:40:ec:d8:02:c3:ed:e8:e2:3a:f1:fd:6b:c3:ee:68:5a:72:
7d:9a:21:19:1c:3d:67:47:ce:53:9f:b1:be:e7:66:36:bb:90:
ef:b7:e5:15:72:1f:05:64:4e:f6:68:ec:0a:20:df:c8:a7:5a:
73:30:b9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:06 2026 by rpki-client