Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
File: ES1lq7x-8AUScohER5KrhvsVwu4.mft (raw, json)
Hash identifier: iuQv7FWpqcA+mHaztjKUu1CT/ZC6YSpPdsntvUZPauw=
Subject key identifier: 60:90:5D:C2:25:23:19:53:FF:E5:9D:8D:FC:A2:C2:87:79:FE:E4:63
Authority key identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
Certificate issuer: /CN=112d65abbc7ef005127288444792ab86fb15c2ee
Certificate serial: 01A128E876C8DE8979FA70F7C3C8A874FA2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
Manifest number: 0C1C
Signing time: Sun 11 Oct 2026 03:01:25 +0000
Manifest this update: Sun 11 Oct 2026 03:01:25 +0000
Manifest next update: Mon 12 Oct 2026 03:01:25 +0000
Files and hashes: 1: ES1lq7x-8AUScohER5KrhvsVwu4.crl (hash: sQL+Z+wqEFdtNMOZEPy6yKvjOHG5D3MoeuXrNQQLfMI=)
2: NyqJ3HcC-3DqTRjPEZHaf1vVpmk.roa (hash: kzMbI7FhKbCR9OfECdQk1NAYRQo9Ic9dt4s+QetZXtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:76:c8:de:89:79:fa:70:f7:c3:c8:a8:74:fa:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d65abbc7ef005127288444792ab86fb15c2ee
Validity
Not Before: Oct 11 03:01:25 2026 GMT
Not After : Oct 12 03:01:25 2026 GMT
Subject: CN=60905dc225231953ffe59d8dfca2c28779fee463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:27:b6:9c:bc:20:7f:fa:b1:71:76:54:a4:
6f:6c:9d:35:94:6c:f3:b6:6a:19:30:30:af:51:64:
48:35:01:46:54:be:43:02:c4:00:1d:c0:78:62:79:
d8:69:c1:18:21:41:ee:6e:26:82:33:f7:d5:3e:dd:
ab:31:6b:48:e7:4f:c5:83:03:4a:f2:25:a5:ae:3e:
c0:a2:64:5d:07:90:d7:45:3a:60:8f:67:b4:db:98:
24:17:f7:0a:cd:f6:34:9a:5c:45:80:e0:78:e4:52:
bd:40:33:4b:79:fc:2d:73:1d:4c:9d:aa:73:d6:51:
b7:30:e8:9e:44:37:cc:17:b8:51:66:aa:f2:42:64:
9d:94:71:1a:fa:c3:e2:28:71:51:c3:50:52:ea:1b:
01:42:5c:79:69:ed:59:4f:ef:1b:fc:bb:c0:82:87:
b1:0e:1d:1a:5d:87:75:cb:4e:9e:c2:dd:9d:e1:85:
59:c7:7e:c2:af:57:f8:27:35:a7:e8:95:10:5f:e7:
24:31:4c:d1:2d:b1:44:97:78:93:3e:a8:4b:77:24:
26:86:8e:83:ca:fd:55:ef:90:a7:ed:d6:28:44:a1:
7d:70:f3:d7:3c:47:b4:c6:1d:0d:08:9a:8c:50:10:
be:d8:80:ab:d2:96:d9:96:aa:35:50:03:d2:33:04:
92:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:90:5D:C2:25:23:19:53:FF:E5:9D:8D:FC:A2:C2:87:79:FE:E4:63
X509v3 Authority Key Identifier:
keyid:11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:05:7f:8d:c2:6f:2f:27:9c:dc:59:63:76:3d:54:1c:1a:08:
2f:4e:c1:57:b9:ef:a9:7b:0d:1a:54:df:63:67:86:30:7c:2e:
bf:da:60:b9:ef:65:47:45:5a:c3:27:f1:80:98:b7:fd:56:f1:
c7:50:47:b5:c0:87:3f:37:56:09:f1:91:d3:7e:68:28:90:d9:
97:d5:57:73:cc:ca:ea:20:a3:09:67:cc:de:e1:e5:1e:db:d5:
d7:ce:73:76:4e:e9:c0:b2:f4:33:cf:45:ab:c4:03:32:79:69:
4d:c4:ea:b3:8e:c9:01:97:c8:c9:1e:e3:fc:cf:ea:3c:d4:8e:
d7:eb:52:01:71:5e:0e:89:b3:ed:17:9c:0d:10:a8:d2:0d:9c:
77:c5:b8:30:7c:b3:cd:21:ad:03:1c:08:0b:6d:fe:ab:91:1d:
38:14:54:5b:37:ef:35:16:5b:e8:af:dc:f5:e9:05:c0:94:5a:
95:0e:67:df:8c:5a:b4:b7:1e:43:d2:41:84:df:37:71:c3:9d:
31:59:da:29:4f:d5:34:2c:44:bc:21:7e:f0:10:13:21:c1:ba:
ba:f4:12:21:05:ae:39:e2:61:06:77:f0:87:7e:2b:c4:96:03:
56:b3:f8:fe:06:58:65:d9:79:e0:60:9f:98:56:56:74:3e:91:
bd:b1:f4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:01:42 2026 by rpki-client