Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
File: ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft (raw, json)
Hash identifier: NHSsCdg/juKCaKYlNLAV/WJCntpoIqW0j/ya1VWj9tM=
Subject key identifier: B5:80:C9:FB:E5:8C:1B:5B:45:15:25:78:57:35:7D:D5:89:2A:9C:BC
Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
Certificate issuer: /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Certificate serial: 019E1FECB4AEA6BB02818A8CEC4946E62DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
Manifest number: 07DF
Signing time: Wed 13 May 2026 06:01:06 +0000
Manifest this update: Wed 13 May 2026 06:01:06 +0000
Manifest next update: Thu 14 May 2026 06:01:06 +0000
Files and hashes: 1: ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl (hash: /HiomPCfCJ8Ut/Xo8VTwMqRlS9IIh90sYAEDGbjQYnU=)
2: stYBdowOVPO4I6l2lk6N70Rzn-E.roa (hash: YY8VJy7fjrv/nyUerV6XVPDCUnj9z+ve+4ysfFvneOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:b4:ae:a6:bb:02:81:8a:8c:ec:49:46:e6:2d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Validity
Not Before: May 13 06:01:06 2026 GMT
Not After : May 14 06:01:06 2026 GMT
Subject: CN=b580c9fbe58c1b5b4515257857357dd5892a9cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:45:8a:4b:fa:92:51:a5:75:57:82:44:02:59:
22:46:4e:cb:eb:62:c6:f6:a1:5c:a8:16:0c:04:2f:
09:a0:b2:87:f8:b1:ef:91:54:f0:dd:cb:e2:aa:04:
9a:a5:0a:38:4c:64:51:24:82:07:cd:8e:89:b9:77:
fe:77:3e:35:59:38:72:b9:da:0c:56:c9:1b:b7:7b:
d4:ea:92:65:c5:3c:6f:26:29:c2:a3:e8:34:a6:2f:
66:3d:45:c5:35:8c:98:62:c0:87:80:66:64:e7:06:
1d:bb:5f:b6:3c:cf:d6:56:d7:0f:f8:97:86:7c:d2:
e0:e2:23:9b:f6:41:8b:f2:22:1f:5e:84:44:e0:a5:
5c:06:71:42:d9:a7:84:b6:b8:ef:7d:0a:13:c9:cc:
f0:d7:86:f2:61:0e:03:f1:b7:98:9d:be:08:5e:49:
4d:f6:aa:12:8a:6a:3a:ca:ab:62:a6:8a:72:86:f4:
77:46:f5:0f:2c:aa:6c:4d:47:62:0d:1b:d3:19:86:
5e:3a:a9:3a:1e:8f:3b:95:4c:6c:cd:79:b9:f9:db:
21:a2:3d:4b:84:4d:9e:40:29:5a:f6:41:80:29:6f:
d4:ab:01:5c:6a:a5:f0:56:30:5b:76:14:f6:df:52:
a0:9f:38:9d:ed:81:cd:48:73:6c:9a:b6:25:ef:ba:
e5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:80:C9:FB:E5:8C:1B:5B:45:15:25:78:57:35:7D:D5:89:2A:9C:BC
X509v3 Authority Key Identifier:
keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:39:2f:b6:28:35:82:29:b3:78:a5:0d:0c:b8:b8:c4:8d:fb:
73:6d:8c:93:b3:2c:a5:f2:f7:5b:6c:cc:38:da:29:ec:08:87:
33:ba:da:f8:c0:af:62:cd:51:24:cb:70:ff:98:8d:f0:ea:e5:
bb:0a:39:f2:a8:54:92:3d:f6:71:07:58:82:7e:60:46:30:24:
63:1b:3c:04:23:e7:58:79:03:ac:28:9a:b1:29:36:82:f8:ff:
11:f3:61:3a:72:f1:2f:6c:00:9f:97:25:64:b5:68:2b:0f:94:
40:cd:45:5a:b3:6c:83:94:e5:c3:67:0d:57:56:40:d3:47:01:
66:59:f2:e7:f4:fc:53:ca:ce:da:45:1b:57:ac:be:26:ab:d8:
51:f4:0a:2a:10:98:3d:94:8a:5a:08:d8:0a:1f:aa:ea:b7:f0:
09:1d:dc:8c:be:6b:b8:c2:2f:cd:bc:22:d0:31:02:11:e6:59:
b5:25:6f:db:95:19:12:44:0b:4e:c1:48:9d:7f:09:2d:5e:4c:
09:fd:f8:4d:dd:07:e2:fb:30:c3:a7:9c:f1:f3:cd:1e:da:d3:
80:41:9d:32:72:02:82:5e:19:65:30:b5:72:bf:94:0e:56:f1:
50:de:5a:53:3b:59:98:8d:60:6b:f2:b6:51:a7:40:3f:86:ed:
2a:14:90:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:47:45 2026 by rpki-client