Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
File: EsRb041L3Gjj153gJE3wbS7LZgk.mft (raw, json)
Hash identifier: XPZRD5Xql7YrgA91jmJNsS0aHjF5l+47EDe5lcCSrl0=
Subject key identifier: 69:1F:8A:16:4F:05:DB:71:C3:E4:43:92:63:4C:D8:03:BD:E1:2C:5F
Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
Certificate issuer: /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Certificate serial: 019D9BBF001F07DE4F271BC1067118762AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
Manifest number: 1429
Signing time: Fri 17 Apr 2026 14:01:19 +0000
Manifest this update: Fri 17 Apr 2026 14:01:19 +0000
Manifest next update: Sat 18 Apr 2026 14:01:19 +0000
Files and hashes: 1: EsRb041L3Gjj153gJE3wbS7LZgk.crl (hash: hZd1EtaxLQS2XJp2bcqJELG4As9W6rhwqsLRfPFKoy0=)
2: _1gDjO3zyeb5ku_j0UHNCnoUFl4.roa (hash: rM83OC0RM5ILeCqPDY5cHlMlGdSPagD0ddTyBgkH61k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:00:1f:07:de:4f:27:1b:c1:06:71:18:76:2a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Validity
Not Before: Apr 17 14:01:19 2026 GMT
Not After : Apr 18 14:01:19 2026 GMT
Subject: CN=691f8a164f05db71c3e44392634cd803bde12c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7e:69:4e:c7:f4:56:84:87:8f:cd:b5:a9:b3:
12:69:5d:f9:6f:47:86:19:90:ec:a6:da:33:cc:ea:
21:7e:71:fa:bd:cd:ed:57:f5:8b:97:94:d7:48:03:
91:4b:b6:00:c4:55:38:21:2b:ce:26:fd:af:de:7b:
cd:3a:81:c6:aa:79:4a:35:89:65:0e:cd:0d:dd:f8:
79:a6:50:d7:da:94:90:5e:e0:fb:c8:ee:a8:e5:35:
e1:75:77:a4:b7:b3:55:c6:1c:d5:1b:06:4b:df:90:
6f:39:e4:f2:f6:dd:0d:a0:bf:ee:39:5f:d5:77:c4:
8a:cc:48:69:fd:17:60:2c:d6:8b:d6:a5:f4:60:8b:
eb:54:45:d2:de:53:69:53:b0:89:f8:fd:19:27:c7:
4e:6f:60:f8:54:04:40:6c:97:04:a5:7b:76:69:d4:
82:bc:1f:65:5a:d1:e6:74:ac:f6:f4:89:8e:c3:49:
c9:64:8b:26:18:ca:d6:eb:32:5c:0a:50:52:9f:f0:
da:ab:4f:f2:3f:74:34:f4:43:cb:fe:df:cc:be:d5:
65:2c:83:49:0c:2b:95:2d:bd:bb:4d:6f:e2:97:8d:
0b:ce:8a:1d:66:8c:f7:9a:3e:b6:a1:de:5b:b4:24:
38:fa:d0:c2:8c:7c:78:be:b0:cc:ff:d2:d1:1e:4f:
1b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1F:8A:16:4F:05:DB:71:C3:E4:43:92:63:4C:D8:03:BD:E1:2C:5F
X509v3 Authority Key Identifier:
keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b3:dd:b2:26:6d:aa:6e:39:31:13:eb:3c:77:82:df:f1:1f:
05:b3:40:e6:72:6c:3b:7a:59:6d:36:bf:90:89:a0:31:f9:8a:
f6:d0:a5:88:c4:ee:36:1a:fa:c3:55:83:ac:de:62:c6:af:83:
99:64:5f:d2:cc:21:9a:b4:16:71:6b:78:90:8f:e2:c8:4d:79:
88:c8:62:d1:f7:63:88:1d:7e:1b:54:84:cc:2f:9d:bc:62:27:
64:40:59:9c:84:af:a3:40:dc:a3:68:55:b6:81:f6:69:38:a5:
c5:2b:78:e5:39:3a:2d:73:dc:05:6b:dc:d8:3b:71:30:77:21:
94:61:92:96:cc:ff:b8:ab:df:d1:ca:af:c9:50:ca:d0:13:5e:
ab:c3:9e:81:98:f7:3e:c8:53:de:53:92:62:b0:8a:94:78:2c:
03:d2:48:08:eb:4f:b5:75:82:9c:9d:2e:27:10:22:a8:9a:69:
0a:d8:f6:47:43:ce:ab:cb:1b:f3:4f:13:6c:ba:3b:1b:ce:33:
31:cb:aa:63:28:bb:ee:0d:f3:d7:c6:df:ac:8b:33:3b:28:a9:
19:cf:35:d0:34:85:f2:2c:3b:ee:58:5d:d0:6d:3e:30:44:c7:
89:ad:55:e0:28:3d:59:97:49:a4:77:7c:23:a5:4e:f4:99:89:
09:bc:bf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:44:32 2026 by rpki-client