Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
File: ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft (raw, json)
Hash identifier: +5HiW8YhJluuOnsOvLlB2Vga9MSENtj+CzAhQM0hQt0=
Subject key identifier: 63:0F:06:E4:B9:2D:91:2E:60:2B:E1:9F:44:96:33:88:2B:44:A3:4A
Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
Certificate issuer: /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Certificate serial: 01A11116F8A2426561967CC33BAC8155597C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
Manifest number: 0965
Signing time: Tue 06 Oct 2026 12:01:20 +0000
Manifest this update: Tue 06 Oct 2026 12:01:20 +0000
Manifest next update: Wed 07 Oct 2026 12:01:20 +0000
Files and hashes: 1: ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl (hash: A/laL3i+0eU7E9RB5BXjPmePXmAXRLbPI+lhbjJpv6Y=)
2: stYBdowOVPO4I6l2lk6N70Rzn-E.roa (hash: YY8VJy7fjrv/nyUerV6XVPDCUnj9z+ve+4ysfFvneOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:16:f8:a2:42:65:61:96:7c:c3:3b:ac:81:55:59:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Validity
Not Before: Oct 6 12:01:20 2026 GMT
Not After : Oct 7 12:01:20 2026 GMT
Subject: CN=630f06e4b92d912e602be19f449633882b44a34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:be:06:9b:1e:de:10:95:06:5f:9c:0c:9e:a8:
f0:d0:fb:e3:1b:ea:35:15:e2:1d:ea:0d:2c:d6:c1:
6e:57:83:99:a9:9c:d6:eb:7e:57:a7:c1:23:8c:0a:
4f:f6:fa:1a:a2:1c:f7:09:59:42:c0:4b:5e:4d:24:
65:9f:e1:94:01:b3:63:13:63:79:76:a5:54:fe:73:
a0:11:73:25:73:48:3f:26:44:4b:e5:0a:60:90:cc:
4d:09:4a:87:14:18:86:81:46:1d:d4:4a:72:f9:d1:
d8:f3:a7:8c:8d:ee:7c:10:92:bf:70:5d:2f:95:be:
95:67:75:9b:e5:d3:60:6a:2e:cb:eb:00:9a:79:e5:
a9:ed:d8:ff:41:a5:62:d2:38:89:89:4e:93:99:27:
cb:3a:76:80:f0:e6:e1:37:99:d1:6a:cd:5e:dc:c0:
c0:ef:32:2c:9d:34:e0:95:8e:72:08:35:ef:98:ae:
e7:a3:d6:17:a0:5e:8a:2a:a1:ba:1d:3e:56:77:a4:
d1:d8:ef:22:18:fc:80:99:18:5c:30:83:5e:e5:b4:
81:c7:42:d2:2e:80:9d:be:c9:30:da:b8:3d:a4:96:
8e:be:4c:00:4d:a5:68:97:30:a4:44:8c:f3:fe:55:
15:70:6a:6e:3e:14:1c:63:c1:3f:5b:3d:79:28:25:
e2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0F:06:E4:B9:2D:91:2E:60:2B:E1:9F:44:96:33:88:2B:44:A3:4A
X509v3 Authority Key Identifier:
keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:23:3a:43:6b:ca:55:97:74:f4:2a:4d:d8:99:8f:d9:79:b8:
76:8a:9b:12:41:a6:59:e9:76:16:83:2d:95:2a:45:60:15:eb:
c2:da:fe:d9:a3:96:2c:d6:c1:0d:97:bc:c0:56:4c:c0:a9:46:
20:03:f7:9b:4f:32:95:c9:0d:11:17:5b:ea:7c:b0:3c:cf:31:
4e:e9:20:b6:71:9a:5c:cf:9e:e9:e7:8d:6e:5f:bb:f8:23:36:
59:67:d8:ee:93:3e:69:ba:14:f2:df:f7:10:cd:a5:b6:42:69:
5c:c1:b2:dd:d3:29:30:fd:ee:85:f7:f5:b9:c3:18:e9:c1:e6:
b7:cd:23:bb:08:84:37:1e:b1:68:6f:11:1d:c1:2d:3f:1d:ee:
ba:4d:05:e2:fe:7f:96:b0:4b:d2:8e:ca:26:40:f7:21:c2:ef:
d6:31:a1:99:11:92:e3:4e:72:3c:57:98:58:d7:0f:66:15:b3:
22:82:a0:80:b8:bb:7b:d8:86:11:1d:a7:69:8c:bb:04:13:dc:
b6:15:5c:66:3c:e6:e4:3a:73:28:f1:d8:3d:59:67:f6:d9:06:
da:26:b3:80:c6:ff:10:fc:da:be:68:95:7c:08:22:0e:8f:f0:
1a:d3:bc:4c:09:4a:a0:56:be:9e:d9:bf:47:a4:13:2d:54:e2:
e6:55:69:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:00:17 2026 by rpki-client