Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
File: ES1lq7x-8AUScohER5KrhvsVwu4.mft (raw, json)
Hash identifier: FfNlpsWpu5uIEbGkxX5Ji8uJPDDP6zRPEfETQ9s9RWo=
Subject key identifier: 11:31:B8:1A:26:90:2B:21:41:44:D5:05:A0:0D:05:06:09:16:F4:7D
Authority key identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
Certificate issuer: /CN=112d65abbc7ef005127288444792ab86fb15c2ee
Certificate serial: 019D9B511843A56CBCB2F23AB650B9DD8745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
Manifest number: 0A45
Signing time: Fri 17 Apr 2026 12:01:16 +0000
Manifest this update: Fri 17 Apr 2026 12:01:16 +0000
Manifest next update: Sat 18 Apr 2026 12:01:16 +0000
Files and hashes: 1: ES1lq7x-8AUScohER5KrhvsVwu4.crl (hash: qbEJqOJJkDsSQb2t7keU8CVH5lR9uHcK7Ftmb2t25oY=)
2: NyqJ3HcC-3DqTRjPEZHaf1vVpmk.roa (hash: kzMbI7FhKbCR9OfECdQk1NAYRQo9Ic9dt4s+QetZXtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:18:43:a5:6c:bc:b2:f2:3a:b6:50:b9:dd:87:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d65abbc7ef005127288444792ab86fb15c2ee
Validity
Not Before: Apr 17 12:01:16 2026 GMT
Not After : Apr 18 12:01:16 2026 GMT
Subject: CN=1131b81a26902b214144d505a00d05060916f47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dd:cb:41:6a:0c:c8:dc:21:bb:fb:ca:7e:70:
45:5a:77:06:7a:cc:5a:6c:e9:8c:14:a7:11:ba:f2:
c1:13:b6:10:d0:f7:b0:6f:5d:32:99:22:87:e3:af:
bd:0c:b9:fd:1d:e7:bc:ef:8f:0e:6e:04:49:7f:43:
de:06:12:e4:f6:4c:a5:b4:a9:9d:db:d8:ac:a8:cc:
f9:e0:98:4e:8c:44:d7:ce:f0:17:6d:c1:3a:12:2c:
d1:90:e9:37:f9:cb:4e:01:38:59:83:2f:e7:ce:18:
95:02:3f:50:14:4b:9e:18:35:a9:b5:3a:eb:cc:46:
63:3d:d8:fc:6d:a7:29:27:87:67:61:0e:56:ed:5a:
d2:b6:78:8c:93:1e:74:f5:6c:f6:3d:ba:6a:64:fc:
93:8a:de:a0:6a:c6:7f:9b:08:e0:dd:85:fe:0b:82:
01:7a:fa:db:c4:42:2d:74:9a:99:23:ff:67:96:40:
6a:b7:16:40:b6:2e:ed:d1:9e:c1:8f:28:06:50:32:
39:e2:ea:57:e0:06:04:75:0c:f1:37:cd:b0:0f:29:
df:dc:be:29:cf:27:84:1c:ca:32:dd:08:13:69:6e:
2f:d1:6a:4d:84:47:75:f3:4f:2d:07:77:5b:d9:83:
56:27:6c:12:e8:0b:d6:90:fb:9d:7b:ad:6c:55:a9:
84:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:31:B8:1A:26:90:2B:21:41:44:D5:05:A0:0D:05:06:09:16:F4:7D
X509v3 Authority Key Identifier:
keyid:11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:fd:5c:bc:97:a1:a6:d1:59:68:69:a6:65:b7:37:ac:ee:97:
d9:8c:bf:13:3b:4f:10:7f:ac:f0:c1:2d:93:bf:c0:8b:f4:03:
e9:21:b0:51:52:8d:7b:a1:e3:07:8d:86:47:a2:ea:66:cb:bb:
c7:0a:9e:27:08:16:bf:cd:9e:bc:c4:a2:e9:c2:8e:9d:4f:b6:
4e:5d:9b:ea:46:33:a9:b8:4e:70:d5:9d:9b:fc:75:ec:74:53:
48:a1:1e:26:34:55:49:7c:c7:1b:36:8d:9d:3e:aa:d3:bc:56:
e3:bf:ae:59:08:dc:a9:05:73:65:60:20:eb:e5:07:f3:42:29:
e8:85:b7:9c:61:be:1b:43:32:29:37:70:a2:83:73:2c:a3:12:
96:2b:e5:6a:3f:f8:31:24:0a:52:30:b7:30:68:04:4a:49:8e:
ce:57:62:1f:f1:17:2d:c1:ea:e0:e3:0f:9c:d7:50:0c:d8:c8:
5c:b2:ee:d2:b5:1e:e5:d3:91:a0:80:cc:4b:4c:6e:5a:e4:f8:
e8:81:8e:f0:6c:2d:81:e8:6f:b4:33:5e:3a:03:53:2b:60:ac:
7c:11:01:e1:d8:de:00:2b:3c:5c:57:a5:b6:77:9c:49:d6:09:
23:46:b1:f3:7f:61:73:07:32:02:38:72:15:7a:b7:c7:19:b3:
7d:92:8c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:25:13 2026 by rpki-client