Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
File: ES1lq7x-8AUScohER5KrhvsVwu4.mft (raw, json)
Hash identifier: 2uE7qzuAxB5Tod3Oett04QhYXveohdLxgBV5maNE5mM=
Subject key identifier: 44:A3:72:61:0E:9F:4D:BF:AA:10:A5:1D:E8:DD:2E:20:A2:81:88:D3
Authority key identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
Certificate issuer: /CN=112d65abbc7ef005127288444792ab86fb15c2ee
Certificate serial: 019CABD8F2FB28FE9482F430393538A70A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
Manifest number: 09C9
Signing time: Mon 02 Mar 2026 00:00:47 +0000
Manifest this update: Mon 02 Mar 2026 00:00:47 +0000
Manifest next update: Tue 03 Mar 2026 00:00:47 +0000
Files and hashes: 1: ES1lq7x-8AUScohER5KrhvsVwu4.crl (hash: 5/Oi1m2HUHJ+74+MZQZ2wXLeLrM/spYAYgq9UeOsjz8=)
2: NyqJ3HcC-3DqTRjPEZHaf1vVpmk.roa (hash: kzMbI7FhKbCR9OfECdQk1NAYRQo9Ic9dt4s+QetZXtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:f2:fb:28:fe:94:82:f4:30:39:35:38:a7:0a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d65abbc7ef005127288444792ab86fb15c2ee
Validity
Not Before: Mar 2 00:00:47 2026 GMT
Not After : Mar 3 00:00:47 2026 GMT
Subject: CN=44a372610e9f4dbfaa10a51de8dd2e20a28188d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f0:49:13:f3:0a:cc:c6:da:d4:f5:b3:29:18:
f2:c6:64:16:bf:09:5b:8a:23:7c:1f:ae:43:1a:2d:
aa:a9:ad:1d:fc:5f:35:67:ef:38:5d:41:d7:12:d0:
3f:44:b1:2a:7d:5d:22:e8:72:32:f6:db:9b:64:d9:
98:06:ee:0f:d2:02:a8:ad:e7:25:52:a9:23:82:79:
3a:59:7f:98:3e:55:bb:2b:c4:71:7d:22:2d:f7:64:
de:cf:ee:2d:fe:59:19:d6:ad:7b:7f:8b:3f:7c:82:
57:e0:bc:62:8d:7a:4a:d6:18:bd:d2:7c:f0:dc:74:
46:0c:08:ef:aa:06:aa:fe:38:18:0b:35:72:59:a1:
43:9d:c2:30:4d:42:55:2d:59:92:f8:48:51:25:0a:
91:63:d8:6a:12:cb:69:32:2e:6b:b7:d0:ad:7d:fa:
db:cc:88:be:4d:dd:ac:6c:df:41:ab:c5:40:9d:8d:
2a:e1:51:6d:51:8f:ad:b0:10:63:67:02:09:9b:61:
c9:dd:a4:23:d3:74:0a:67:f8:40:7f:a3:e1:5b:53:
a1:90:8f:66:b0:52:53:74:59:ff:de:b9:c6:37:3a:
1b:53:99:99:69:2e:8d:87:e2:cb:dd:3f:b6:1c:e6:
49:56:1b:14:da:6c:47:c5:a7:89:4c:a1:86:7a:75:
29:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A3:72:61:0E:9F:4D:BF:AA:10:A5:1D:E8:DD:2E:20:A2:81:88:D3
X509v3 Authority Key Identifier:
keyid:11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ed:17:ef:6b:b2:af:3e:39:be:4e:f3:ac:03:8a:2f:ff:f8:
e9:e8:8e:2f:a7:af:fa:28:fd:19:96:31:4f:ba:ea:e2:87:b7:
de:72:d4:b1:1e:f7:25:16:ca:b2:5e:9b:d8:16:d7:b6:b9:23:
38:d6:7e:64:e4:8d:5d:f2:df:d6:7d:d4:08:63:10:f1:5b:e8:
42:be:66:1d:63:28:bb:23:c9:46:f3:df:74:d7:42:ab:a9:b2:
8a:2a:d7:aa:8c:8d:76:4d:93:13:dc:6d:e7:7b:03:13:5c:68:
78:23:19:98:57:67:30:23:00:de:b7:b1:c2:f1:01:b5:73:47:
cc:f9:22:0b:f1:16:ff:19:d5:7c:18:0b:2f:3d:9c:39:f2:ce:
a0:db:55:94:6d:8a:80:cd:e5:bd:f3:48:74:c9:3f:73:6a:08:
84:c1:3d:a4:52:5c:e9:61:21:aa:c7:39:fb:01:11:a2:10:ef:
df:d9:02:d8:37:fa:ed:28:21:13:75:e1:0a:91:92:e3:3c:1e:
80:0a:c5:d9:41:3a:36:1c:a8:07:4a:69:b8:a3:6b:6b:0c:78:
f9:7f:ea:0f:7c:81:0a:3c:0d:a6:55:7e:10:13:53:95:51:e1:
fa:d6:6d:b9:83:00:de:3f:6e:11:42:60:3b:62:ec:dc:15:3a:
b5:20:63:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2PL7KP6UgvQwOTU4pwpxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMmQ2NWFiYmM3ZWYwMDUxMjcyODg0NDQ3OTJhYjg2ZmIx
NWMyZWUwHhcNMjYwMzAyMDAwMDQ3WhcNMjYwMzAzMDAwMDQ3WjAzMTEwLwYDVQQD
Eyg0NGEzNzI2MTBlOWY0ZGJmYWExMGE1MWRlOGRkMmUyMGEyODE4OGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/BJE/MKzMba1PWzKRjyxmQWvwlb
iiN8H65DGi2qqa0d/F81Z+84XUHXEtA/RLEqfV0i6HIy9tubZNmYBu4P0gKorecl
Uqkjgnk6WX+YPlW7K8RxfSIt92Tez+4t/lkZ1q17f4s/fIJX4LxijXpK1hi90nzw
3HRGDAjvqgaq/jgYCzVyWaFDncIwTUJVLVmS+EhRJQqRY9hqEstpMi5rt9Ctffrb
zIi+Td2sbN9Bq8VAnY0q4VFtUY+tsBBjZwIJm2HJ3aQj03QKZ/hAf6PhW1OhkI9m
sFJTdFn/3rnGNzobU5mZaS6Nh+LL3T+2HOZJVhsU2mxHxaeJTKGGenUpxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESjcmEOn02/qhClHejdLiCigYjTMB8GA1UdIwQY
MBaAFBEtZau8fvAFEnKIREeSq4b7FcLuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVMxbHE3eC04QVVTY29oRVI1S3JodnNWd3U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hMDM3YjEtMTMzYS00NjM5LThjN2Yt
NjM2ODU3ZWUxNzkyLzEvRVMxbHE3eC04QVVTY29oRVI1S3JodnNWd3U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9hMDM3YjEtMTMzYS00NjM5LThjN2YtNjM2ODU3ZWUxNzky
LzEvRVMxbHE3eC04QVVTY29oRVI1S3JodnNWd3U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOO0X72uy
rz45vk7zrAOKL//46eiOL6ev+ij9GZYxT7rq4oe33nLUsR73JRbKsl6b2BbXtrkj
ONZ+ZOSNXfLf1n3UCGMQ8VvoQr5mHWMouyPJRvPfdNdCq6myiirXqoyNdk2TE9xt
53sDE1xoeCMZmFdnMCMA3rexwvEBtXNHzPkiC/EW/xnVfBgLLz2cOfLOoNtVlG2K
gM3lvfNIdMk/c2oIhME9pFJc6WEhqsc5+wERohDv39kC2Df67SghE3XhCpGS4zwe
gArF2UE6NhyoB0ppuKNrawx4+X/qD3yBCjwNplV+EBNTlVHh+tZtuYMA3j9uEUJg
O2Ls3BU6tSBjCQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:24:00 2026 by rpki-client