Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
File: EsRb041L3Gjj153gJE3wbS7LZgk.mft (raw, json)
Hash identifier: G+KNlwG6XhQ5T5DYlGnGxPq3LdEi3Z7IcsYGIyqzRtc=
Subject key identifier: 52:C5:22:05:D0:57:6E:05:DC:03:0A:F3:46:88:34:BC:8B:DE:26:65
Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
Certificate issuer: /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Certificate serial: 019CAE35EE7B7C7C84E48E7F0C662AC8BC38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
Manifest number: 13AE
Signing time: Mon 02 Mar 2026 11:01:35 +0000
Manifest this update: Mon 02 Mar 2026 11:01:35 +0000
Manifest next update: Tue 03 Mar 2026 11:01:35 +0000
Files and hashes: 1: EsRb041L3Gjj153gJE3wbS7LZgk.crl (hash: HSnROrHXTi7rkgZMQ42R6gqVvLj7zgMbAhBzdkfQFUc=)
2: _1gDjO3zyeb5ku_j0UHNCnoUFl4.roa (hash: rM83OC0RM5ILeCqPDY5cHlMlGdSPagD0ddTyBgkH61k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:ee:7b:7c:7c:84:e4:8e:7f:0c:66:2a:c8:bc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Validity
Not Before: Mar 2 11:01:35 2026 GMT
Not After : Mar 3 11:01:35 2026 GMT
Subject: CN=52c52205d0576e05dc030af3468834bc8bde2665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:e1:38:ad:1e:dd:55:62:45:92:ea:ef:c9:
bc:59:ce:58:88:88:bc:a6:9d:7a:36:9a:11:12:40:
49:f4:34:12:46:7c:1f:c6:e4:b3:a7:71:d1:4f:99:
86:a6:24:fc:46:65:88:9e:07:aa:24:7b:15:48:55:
eb:14:6c:64:20:7d:24:34:b3:b0:51:a9:e7:4f:b3:
19:e2:62:20:ba:6b:e6:e8:29:7f:88:ed:a5:75:40:
5f:56:69:fb:44:25:4e:9e:e3:10:a6:9f:a9:81:b6:
27:ce:75:64:8d:4b:9e:72:df:48:8b:f1:bb:61:07:
45:13:55:39:ae:1f:86:ae:37:2c:00:31:d9:69:37:
96:d7:6e:62:2e:f4:0d:9e:9a:98:b8:cc:c2:d9:7e:
48:7d:81:8c:ca:28:26:f6:43:94:de:e7:2d:31:8f:
d0:f3:16:9b:aa:8c:17:04:4f:8c:8b:fc:7d:3c:25:
c0:69:f2:f2:58:9f:bb:fc:30:3a:13:d0:f7:34:39:
46:35:7f:b6:65:20:52:f8:72:c9:9e:ea:96:a7:8e:
ec:93:ef:48:d2:b3:95:10:5f:31:ce:3f:89:cc:bc:
a0:f6:e2:4d:62:23:13:f0:62:49:05:b8:2b:eb:d0:
bf:57:70:bd:05:98:f1:b9:63:80:57:e9:e1:bd:98:
9c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C5:22:05:D0:57:6E:05:DC:03:0A:F3:46:88:34:BC:8B:DE:26:65
X509v3 Authority Key Identifier:
keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:a6:4b:9a:d0:a7:ff:d0:4b:ef:10:ef:fa:74:2a:b5:8a:bf:
09:4f:c6:5d:71:62:4e:21:25:fc:5e:53:f8:5b:46:f2:6d:06:
ea:ed:52:e4:ad:d4:b1:3b:cf:c4:36:ec:84:af:9d:78:f0:4b:
01:8c:e9:84:84:ad:78:16:35:42:e6:fe:f2:30:ae:74:19:d7:
e1:d0:4b:05:74:a7:72:f0:81:22:98:42:63:84:03:18:5b:e5:
46:29:16:c4:83:30:32:f9:19:28:46:d5:07:bc:9b:d3:76:4c:
4e:97:96:3b:5a:b4:07:d0:9f:62:de:05:44:ba:47:41:a8:31:
1d:f2:c5:0e:63:3a:15:88:37:f0:c9:3a:dc:73:8e:11:08:7c:
75:86:d8:14:6b:2a:38:12:59:9b:ed:11:c9:b0:a6:66:2a:c1:
e4:96:9d:e1:d4:bf:8e:61:8b:b6:39:c9:a0:ec:3d:7f:ba:fb:
5a:f4:61:62:81:3e:b7:11:6b:a2:d4:8e:aa:f7:aa:e9:e1:db:
1d:ca:61:7c:cf:95:0c:6c:06:8e:d9:61:7e:f1:c2:cd:3a:b4:
14:04:95:e2:42:d4:c4:a3:08:f5:92:bb:24:4c:d0:8b:8c:9f:
b8:29:46:98:b8:c7:2d:cc:ba:0d:f4:75:5a:a8:a5:f1:96:7d:
89:a6:48:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:18 2026 by rpki-client