Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
File: ES1lq7x-8AUScohER5KrhvsVwu4.mft (raw, json)
Hash identifier: quh+S1GsW1NMHhzP29MaCrt8ISh7IbCdYknQKL+H2OE=
Subject key identifier: 01:65:54:C3:45:E7:BD:F6:6A:E1:4B:47:4E:43:F8:FA:08:12:EF:FC
Authority key identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
Certificate issuer: /CN=112d65abbc7ef005127288444792ab86fb15c2ee
Certificate serial: 019EC2CA081F1E57E0634F9B09B75D930E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
Manifest number: 0ADE
Signing time: Sat 13 Jun 2026 21:01:20 +0000
Manifest this update: Sat 13 Jun 2026 21:01:20 +0000
Manifest next update: Sun 14 Jun 2026 21:01:20 +0000
Files and hashes: 1: ES1lq7x-8AUScohER5KrhvsVwu4.crl (hash: O6hDFYZopi0Nnk83x/vou7TKmPKIT3h4k3PpJuJ/HmY=)
2: NyqJ3HcC-3DqTRjPEZHaf1vVpmk.roa (hash: kzMbI7FhKbCR9OfECdQk1NAYRQo9Ic9dt4s+QetZXtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:ca:08:1f:1e:57:e0:63:4f:9b:09:b7:5d:93:0e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d65abbc7ef005127288444792ab86fb15c2ee
Validity
Not Before: Jun 13 21:01:20 2026 GMT
Not After : Jun 14 21:01:20 2026 GMT
Subject: CN=016554c345e7bdf66ae14b474e43f8fa0812effc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:82:8f:79:b7:6f:7b:f4:90:58:c8:b7:5d:
5c:05:c4:ec:91:da:48:92:c6:fb:c4:f1:73:ac:34:
c7:f4:a0:ef:ab:1c:10:72:a9:8d:eb:81:7d:39:d9:
82:65:56:08:b5:9e:6c:fd:bc:a0:0f:c7:f9:9f:0d:
d8:75:53:12:4b:c1:fb:0f:5d:98:9f:dd:05:91:75:
10:ba:51:5b:c2:df:f4:95:ca:35:61:e3:cc:c0:11:
42:52:74:40:a2:96:2f:24:87:45:13:c4:9f:d2:aa:
fd:c5:b4:d8:c2:82:c9:3f:24:37:29:10:e6:2f:59:
31:39:9b:14:e1:57:90:a0:10:fe:c2:9d:f7:dd:a9:
92:75:4d:4d:68:a8:a2:d7:86:dd:b9:bd:4d:4c:b8:
6a:84:4a:5d:cb:b1:f5:ef:5d:f8:48:62:97:44:73:
eb:81:07:bf:a7:8d:9e:d7:c8:76:12:c4:dc:96:01:
3b:4c:0f:89:3d:1d:1e:8a:bd:64:41:02:bc:97:63:
35:fa:86:49:6c:34:02:3c:a9:27:12:e8:b0:16:d8:
c8:ca:f0:6f:d4:42:6b:7f:b1:3e:7e:26:9d:bb:80:
ee:35:b0:87:51:88:be:04:22:92:e0:05:70:11:27:
73:65:b5:bc:e2:31:ce:ac:34:6b:53:24:29:aa:0e:
de:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:65:54:C3:45:E7:BD:F6:6A:E1:4B:47:4E:43:F8:FA:08:12:EF:FC
X509v3 Authority Key Identifier:
keyid:11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:5a:74:05:0e:6c:11:7a:23:48:34:89:ee:27:55:36:4e:58:
f9:0b:0a:61:19:9c:6b:51:84:86:82:c5:6e:69:19:3e:e1:6e:
c5:f7:b7:39:39:32:f7:fe:b5:66:4f:79:04:88:8f:c6:cb:69:
c1:c0:ac:41:5f:82:35:c0:7c:d0:fb:fc:25:ab:57:3d:18:5b:
b7:b3:b5:34:0a:2c:5a:a6:13:a7:00:12:62:1e:3f:b4:b1:1d:
a7:31:18:9a:10:ab:f0:7f:89:33:2a:b0:aa:17:cb:b1:f8:e0:
fc:c8:96:86:19:dd:eb:42:e6:06:0d:64:c0:1a:7e:05:6b:29:
49:f9:5a:29:61:96:62:dc:fa:7b:87:f3:49:1c:57:33:12:e0:
5d:3f:f3:60:c3:1a:30:4e:ab:03:bd:1f:66:59:cc:04:11:05:
4c:dc:73:d7:98:6f:17:3f:ef:dc:6e:90:9a:c4:c0:e5:6f:a9:
aa:a3:0f:d5:75:89:22:21:91:5a:d9:43:01:af:df:6a:0f:c2:
f3:8b:b2:66:84:4c:3c:53:70:48:ed:4b:c8:e8:f3:f3:f2:7b:
2f:8c:1c:73:f0:d7:79:bd:c5:94:f6:32:fc:34:ba:58:c3:a7:
b2:d0:65:c4:b7:c0:a8:09:d2:88:06:9f:61:df:7f:cb:e7:79:
69:68:c6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:39:18 2026 by rpki-client