Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
File: ESe41aUEAgm4mTvyAxeJw7K6t8c.mft (raw, json)
Hash identifier: VIQL521+zE7BPB9RcUlEwkzq7vKkOTWy5cu1dIE9ph8=
Subject key identifier: EF:24:6E:28:53:28:F3:9C:C7:8D:39:F8:CE:9B:BC:53:D9:55:2F:A9
Authority key identifier: 11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
Certificate issuer: /CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Certificate serial: 01A0C3A02536B6EF632EF0F624B8A229CDFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 11:00:47 +0000
Manifest this update: Mon 21 Sep 2026 11:00:47 +0000
Manifest next update: Tue 22 Sep 2026 11:00:47 +0000
Files and hashes: 1: ESe41aUEAgm4mTvyAxeJw7K6t8c.crl (hash: U1YF9xofboF+99wHTvBwBZ95OHA3BJOBLbZAtHfVAiA=)
2: Vj-jl645n2kvkyifqeqjUT8mbTk.roa (hash: sy/gtDfl2XECiDgxiAjMKqlkJRB/dQlkZ9hhKjq79wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:25:36:b6:ef:63:2e:f0:f6:24:b8:a2:29:cd:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Validity
Not Before: Sep 21 11:00:47 2026 GMT
Not After : Sep 22 11:00:47 2026 GMT
Subject: CN=ef246e285328f39cc78d39f8ce9bbc53d9552fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:38:dd:64:09:4f:32:f7:8f:07:f9:2e:5b:47:
b8:12:d1:38:90:e6:48:2b:5f:53:32:f5:e0:d8:a6:
de:35:1b:5e:9f:0c:95:5d:40:79:29:cc:9a:e1:97:
56:42:e9:ba:ab:61:96:e6:30:fe:4c:15:2b:ec:f5:
78:98:e1:eb:03:4f:4c:e9:dc:f1:f8:0d:02:bf:7a:
8f:35:09:48:69:69:3a:fd:b3:be:d5:48:19:1c:13:
e3:c4:2c:b5:d6:1a:96:02:a3:b7:3e:c5:31:16:4b:
af:e4:1f:d3:d6:97:75:dc:e1:39:16:a1:ac:37:16:
f6:ad:3c:8f:91:e6:7d:bb:61:b0:a4:ba:f7:15:ce:
92:93:d0:6c:2b:06:2b:87:a5:0f:81:0a:4a:1d:a0:
82:6d:16:d5:a4:d7:38:f3:1e:d2:8e:44:3b:0b:7c:
d0:24:1d:0c:2f:be:01:75:f3:7b:f3:38:7a:29:7d:
f4:bf:f3:52:ae:1b:35:11:9a:ae:b6:72:d7:41:a8:
fd:bd:f1:1d:47:78:9b:2b:b3:40:6e:e0:b3:b6:49:
6f:d3:22:88:7b:62:1a:c4:05:19:7d:76:05:a1:51:
14:d7:93:fe:26:42:4d:61:54:b9:ef:3a:9b:99:40:
d3:94:fa:0a:d6:b6:b0:0a:a5:f6:ab:ea:af:19:9a:
40:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:24:6E:28:53:28:F3:9C:C7:8D:39:F8:CE:9B:BC:53:D9:55:2F:A9
X509v3 Authority Key Identifier:
keyid:11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:df:fd:ea:31:24:c1:4f:d2:16:6e:bb:b9:bd:27:6d:e6:5a:
60:bb:3f:f3:34:6d:28:b3:aa:39:1a:20:8b:d6:8f:46:d6:00:
ff:9e:34:87:b5:a2:66:d2:fb:1b:05:1e:66:d6:7c:2d:1c:e7:
05:1e:4c:f4:1a:90:1b:5a:d9:4b:e5:2d:f5:c5:dd:41:9d:4d:
c9:a3:6e:41:f4:13:93:8a:b7:c9:c6:4b:81:85:e0:cc:20:a1:
cf:ca:ac:65:4c:f9:f3:86:0d:c5:81:42:ca:fb:6c:f7:b1:8f:
76:03:a8:4a:11:e9:19:aa:11:32:c1:34:cf:a8:6d:5f:52:3b:
c3:0f:1f:04:70:c4:42:84:d8:97:50:ad:62:93:88:bd:d7:bc:
a5:78:e3:b2:92:6c:18:03:58:e5:42:a3:e4:bc:75:92:01:30:
26:d5:0b:5a:eb:4b:69:d9:30:ea:a4:04:33:63:d5:88:bc:f7:
16:d8:94:d4:b0:90:9c:3b:41:a6:ca:45:d0:a6:bb:c5:4f:91:
47:22:07:4a:7b:e7:25:54:ac:57:15:ab:28:25:e4:fa:97:22:
47:4c:f1:47:69:8b:46:c4:ef:44:5f:d0:45:e9:1a:48:38:5e:
8c:d5:88:8c:af:c1:fb:25:5c:5b:f8:8e:3b:9e:9f:7e:25:cb:
6e:65:e6:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDoCU2tu9jLvD2JLiiKc3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMjdiOGQ1YTUwNDAyMDliODk5M2JmMjAzMTc4OWMzYjJi
YWI3YzcwHhcNMjYwOTIxMTEwMDQ3WhcNMjYwOTIyMTEwMDQ3WjAzMTEwLwYDVQQD
EyhlZjI0NmUyODUzMjhmMzljYzc4ZDM5ZjhjZTliYmM1M2Q5NTUyZmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDjdZAlPMvePB/kuW0e4EtE4kOZI
K19TMvXg2KbeNRtenwyVXUB5Kcya4ZdWQum6q2GW5jD+TBUr7PV4mOHrA09M6dzx
+A0Cv3qPNQlIaWk6/bO+1UgZHBPjxCy11hqWAqO3PsUxFkuv5B/T1pd13OE5FqGs
Nxb2rTyPkeZ9u2GwpLr3Fc6Sk9BsKwYrh6UPgQpKHaCCbRbVpNc48x7SjkQ7C3zQ
JB0ML74BdfN78zh6KX30v/NSrhs1EZqutnLXQaj9vfEdR3ibK7NAbuCztklv0yKI
e2IaxAUZfXYFoVEU15P+JkJNYVS57zqbmUDTlPoK1rawCqX2q+qvGZpA8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8kbihTKPOcx405+M6bvFPZVS+pMB8GA1UdIwQY
MBaAFBEnuNWlBAIJuJk78gMXicOyurfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVNlNDFhVUVBZ200bVR2eUF4ZUp3N0s2dDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yYjVmZWEtOGY1MS00YmExLWJkY2Mt
M2ViY2FkYWJmMGQ4LzEvRVNlNDFhVUVBZ200bVR2eUF4ZUp3N0s2dDhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yYjVmZWEtOGY1MS00YmExLWJkY2MtM2ViY2FkYWJmMGQ4
LzEvRVNlNDFhVUVBZ200bVR2eUF4ZUp3N0s2dDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFN/96jEk
wU/SFm67ub0nbeZaYLs/8zRtKLOqORogi9aPRtYA/540h7WiZtL7GwUeZtZ8LRzn
BR5M9BqQG1rZS+Ut9cXdQZ1NyaNuQfQTk4q3ycZLgYXgzCChz8qsZUz584YNxYFC
yvts97GPdgOoShHpGaoRMsE0z6htX1I7ww8fBHDEQoTYl1CtYpOIvde8pXjjspJs
GANY5UKj5Lx1kgEwJtULWutLadkw6qQEM2PViLz3FtiU1LCQnDtBpspF0Ka7xU+R
RyIHSnvnJVSsVxWrKCXk+pciR0zxR2mLRsTvRF/QRekaSDhejNWIjK/B+yVcW/iO
O56ffiXLbmXmzA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:51:49 2026 by rpki-client