Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
File: ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft (raw, json)
Hash identifier: Om9YH4EUJaPo7bfuTNPEpIxZOA/4E+oyAtM/W5c9oC4=
Subject key identifier: 45:95:B8:BB:C2:3D:D3:87:FB:74:1A:87:84:99:B8:CE:F6:4E:B2:5F
Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
Certificate issuer: /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Certificate serial: 019D2AA9CAE81B6F1C1B0E8ED0AA7FEF85FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
Manifest number: 0760
Signing time: Thu 26 Mar 2026 15:01:03 +0000
Manifest this update: Thu 26 Mar 2026 15:01:03 +0000
Manifest next update: Fri 27 Mar 2026 15:01:03 +0000
Files and hashes: 1: ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl (hash: lMOngNKgovslPqYAff91i5ii/ECWWbC776hR/iWmPik=)
2: stYBdowOVPO4I6l2lk6N70Rzn-E.roa (hash: YY8VJy7fjrv/nyUerV6XVPDCUnj9z+ve+4ysfFvneOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:ca:e8:1b:6f:1c:1b:0e:8e:d0:aa:7f:ef:85:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Validity
Not Before: Mar 26 15:01:03 2026 GMT
Not After : Mar 27 15:01:03 2026 GMT
Subject: CN=4595b8bbc23dd387fb741a878499b8cef64eb25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ad:05:bf:dd:74:06:83:fd:2e:f6:6f:c6:07:
f5:c3:55:58:da:c2:42:db:11:28:94:57:15:26:58:
91:8d:4f:e6:ce:3d:e4:3b:e5:6b:f7:f2:4e:d3:1d:
a7:fb:9a:99:81:fe:08:82:c7:a3:a4:a7:c1:24:1b:
da:04:68:2a:fa:8f:4e:d0:73:68:e3:d5:0c:02:61:
e0:49:dd:3e:50:b9:f8:8c:92:70:9e:7b:40:1e:e0:
76:85:47:2a:d6:8e:1c:1f:ca:5d:f9:19:b8:14:13:
4e:46:58:4a:65:01:1c:08:db:b7:62:98:55:71:cf:
76:cf:76:50:0e:ea:04:5c:6c:ba:2c:74:2f:3c:46:
0a:b6:9e:7e:8f:79:a6:4b:18:61:ec:82:b4:3d:0c:
9f:da:33:b3:eb:d3:c8:ab:01:6f:96:41:e6:81:8f:
63:41:7f:1a:db:b8:85:4b:8a:e7:19:29:05:fb:e0:
a7:89:b9:31:51:4f:49:64:99:1a:64:d2:55:7e:57:
c3:6c:aa:31:5e:fe:4b:0a:bd:ac:a8:46:4e:c0:c1:
99:b6:32:6c:60:2c:d4:d9:c3:15:33:29:a0:d7:85:
df:70:3f:40:a6:34:30:a3:db:e8:fa:2c:38:79:27:
39:15:27:64:a8:53:43:65:aa:c8:d3:04:c0:75:2d:
ba:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:95:B8:BB:C2:3D:D3:87:FB:74:1A:87:84:99:B8:CE:F6:4E:B2:5F
X509v3 Authority Key Identifier:
keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5f:00:b7:49:2f:e7:20:74:22:80:dc:6f:b3:26:0f:74:62:
5b:9e:fe:d9:a5:aa:cf:ef:c9:34:7a:6f:f0:a8:52:cb:ed:eb:
f2:ac:d5:bb:56:32:d0:cb:d9:d7:e2:db:ae:19:a7:e7:8f:99:
92:8f:13:d4:75:02:f8:27:11:5a:6d:bf:25:0d:94:fd:91:f8:
96:94:07:32:76:7b:21:83:e0:49:1a:7d:00:fd:d3:28:09:2c:
cb:16:41:49:87:3a:53:b3:38:d9:37:c6:b4:5f:3f:f3:d8:e0:
5e:57:f4:ff:bb:c1:b2:3d:1d:4d:48:9e:c3:8d:20:70:83:ef:
a2:c0:9f:f4:7b:24:3b:ac:ff:41:81:a3:82:f9:4d:ce:0b:b9:
75:ad:67:56:57:5d:11:8b:3d:09:cd:d1:04:51:70:a0:7e:0c:
88:b9:28:3b:64:df:ef:0d:d4:f8:df:d8:87:57:de:e9:ae:91:
3e:77:aa:56:73:e4:4d:1f:a9:e2:04:d5:83:8a:8c:77:e4:7c:
36:7a:40:73:7f:c0:6e:ed:13:e0:6b:c9:fa:4b:0b:1a:ee:38:
58:68:b4:ba:b4:79:21:b6:85:5e:b0:b9:7e:9b:05:17:02:d0:
50:df:2e:a7:be:4d:cf:a3:86:7d:69:5e:d6:1c:53:87:b2:03:
5f:95:a7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:39:38 2026 by rpki-client