Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
File: EsShfSBma32NKx_-GKRoevkmIY8.mft (raw, json)
Hash identifier: kZDtDxTsTiWNeyBBY1kQjbsEaWEM9GRJWSh1Eqptnbg=
Subject key identifier: 69:03:69:74:64:E4:A0:84:92:2A:EF:66:2C:F3:BD:FA:AD:64:7B:CC
Authority key identifier: 12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F
Certificate issuer: /CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f
Certificate serial: 019D9A74F8786C97DD08BE5B94FA0D8AF0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 08:00:49 +0000
Manifest this update: Fri 17 Apr 2026 08:00:49 +0000
Manifest next update: Sat 18 Apr 2026 08:00:49 +0000
Files and hashes: 1: 2SnbqmjRC1mfOLhWvcx2MqiVnBQ.roa (hash: 9wsvsp03KFtWIrs+dsNBw/+Vtj/EYC0hFE8Wh2C75jw=)
2: EsShfSBma32NKx_-GKRoevkmIY8.crl (hash: UAOp+jRgyv9GUPW0cTe65NR9tqJqCZYKe1Jew58PWFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:f8:78:6c:97:dd:08:be:5b:94:fa:0d:8a:f0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f
Validity
Not Before: Apr 17 08:00:49 2026 GMT
Not After : Apr 18 08:00:49 2026 GMT
Subject: CN=6903697464e4a084922aef662cf3bdfaad647bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:14:99:37:58:06:28:36:8d:28:c9:74:0f:
7b:b2:3e:ec:e8:92:03:63:6b:4c:6e:38:30:22:bb:
86:3d:88:ec:d1:6c:ab:7f:76:fc:a2:7b:8a:23:0e:
1e:4d:08:89:63:68:45:ac:76:c4:5a:2c:77:d4:99:
96:bb:80:da:17:be:7f:2a:13:ef:a5:75:ad:dc:5a:
8a:da:51:bc:f9:5a:93:1e:c7:a6:76:f4:0c:94:c8:
24:9c:bb:99:83:89:50:d9:58:05:85:80:9a:bc:d5:
9f:ab:05:8c:ac:29:a3:79:7b:69:f2:83:35:a2:49:
ce:74:30:5c:ad:0e:c9:ba:47:ca:87:ca:c1:7a:c8:
32:57:fa:f0:a3:82:82:46:50:fd:bd:ac:d0:60:ee:
e1:c7:bb:02:17:72:e7:0c:2e:92:88:ed:8d:88:c7:
58:16:b0:8c:fe:92:ed:e3:ca:79:7c:b3:b2:02:d9:
e1:43:5d:10:ce:f4:6c:58:f8:ce:e9:26:bf:2b:eb:
1b:25:4a:99:ab:aa:fb:a7:5d:48:e8:10:9a:a3:8e:
0d:21:1e:73:e0:75:55:5c:7e:1c:0d:2c:ab:f7:64:
f3:b9:95:d5:cc:88:df:ec:0e:53:e7:b3:51:5a:78:
20:0b:38:d5:23:78:58:46:a6:30:7d:97:c9:b1:9c:
0d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:03:69:74:64:E4:A0:84:92:2A:EF:66:2C:F3:BD:FA:AD:64:7B:CC
X509v3 Authority Key Identifier:
keyid:12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:29:ad:d8:4c:c6:7c:60:83:c7:48:33:e3:03:cb:bf:35:17:
aa:46:66:e7:0e:96:89:96:24:60:47:5e:8d:97:aa:70:c4:13:
73:81:58:6e:5a:1c:dd:08:38:8c:3b:0b:2f:51:ac:40:5a:ca:
e9:c0:1e:3f:08:02:72:bf:27:e4:c7:b5:64:37:8a:bd:b7:67:
5e:ea:07:41:4b:44:a7:0a:33:bb:db:32:67:2e:ff:5c:cf:e0:
9f:df:6d:cc:04:80:99:53:78:e9:ea:27:f3:ce:9f:cf:63:74:
11:45:d5:6f:a5:7b:43:a8:27:a7:06:c7:d5:25:05:26:62:74:
b6:16:25:d2:74:04:d5:9a:e9:f3:ae:3a:63:07:28:f7:ae:db:
0b:ec:51:db:c5:df:46:7d:4e:47:13:1d:eb:56:b7:d9:68:70:
5c:7c:f1:ef:9b:4a:5d:67:f0:03:e7:33:2d:fe:6f:c6:b1:ea:
08:f5:ae:46:87:45:3f:9d:4b:c1:ae:d0:2a:e7:61:a3:f6:56:
04:13:00:7a:4c:33:18:d0:5b:13:f8:54:c2:14:41:b2:0c:ab:
2b:f4:52:f6:3b:11:ed:db:73:32:f7:e2:39:64:3b:1f:ac:ba:
9a:7e:05:9b:34:c5:2f:09:69:5d:2a:47:a8:68:4a:67:9b:4e:
6b:10:17:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:58:57 2026 by rpki-client