Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
File: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft (raw, json)
Hash identifier: notyi6uIXf/MJ3mC/7qsPEGM3crv3nvRwVUaG3pf/pA=
Subject key identifier: D8:76:D4:8C:E5:45:43:37:1C:3F:83:AF:7C:01:63:39:82:B2:50:6C
Authority key identifier: 12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
Certificate issuer: /CN=12c603666719e979bef0921451a2ec264ed01209
Certificate serial: 019D2771E916F75A8F2627D2AADD272A4907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:01:09 +0000
Manifest this update: Thu 26 Mar 2026 00:01:09 +0000
Manifest next update: Fri 27 Mar 2026 00:01:09 +0000
Files and hashes: 1: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl (hash: lEhByD0GKhCYCy0sztyuLIEokMgJeOU7jvFZUbZhD7w=)
2: IXzvb0oMAUQE_F6M51MZp-vD2zA.roa (hash: yPGLWb8LE+8WjEXthn7v5ZfntWLr2abqa8ktyJTdaHI=)
3: qJG0Hd7c9EV41M-mzPnawa776Ng.roa (hash: 38xg5etHC6ngVwSZkinLtA2QpEFQUOmcoXPkIJ0ae5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:e9:16:f7:5a:8f:26:27:d2:aa:dd:27:2a:49:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c603666719e979bef0921451a2ec264ed01209
Validity
Not Before: Mar 26 00:01:09 2026 GMT
Not After : Mar 27 00:01:09 2026 GMT
Subject: CN=d876d48ce54543371c3f83af7c01633982b2506c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b8:f8:1b:25:b0:9e:bf:64:59:c0:3d:dc:f3:
f5:46:94:9f:a7:6c:2a:e3:4f:2f:81:d5:38:27:40:
d1:9d:5d:25:2d:d7:d6:4a:aa:ea:57:0a:0f:88:14:
8c:1b:79:84:a6:cf:47:ea:cc:20:1c:09:55:59:f3:
a4:a5:43:bf:27:96:f8:f0:64:80:a6:a2:98:76:15:
5e:e1:d9:54:81:3a:08:9e:5f:5d:8a:98:c9:86:8d:
a9:d0:6a:07:c0:9e:6d:14:95:0e:3d:9d:c3:01:2b:
b5:ac:93:98:5f:bd:e3:00:87:7e:92:59:3d:dd:fb:
12:19:ef:5b:27:16:cf:54:ce:1e:0f:5a:e5:fd:7e:
2b:69:a4:20:2d:8c:96:fe:22:44:3e:bc:01:62:12:
42:25:75:91:dc:aa:54:42:26:40:ce:ba:9c:66:2c:
ec:a9:76:ec:1d:a0:30:96:70:27:06:da:f9:b5:73:
12:cc:10:21:d6:49:7a:11:db:f8:c9:87:90:7f:5b:
83:0e:ce:17:04:3d:73:5e:9d:32:25:18:df:92:99:
2a:7b:0c:06:c4:61:8c:25:7b:97:dd:88:4d:b3:02:
e3:1b:d7:c6:28:16:28:91:d9:a8:9d:fc:b9:d4:ae:
3d:fc:98:91:07:c1:95:06:66:20:d4:51:ff:8b:a5:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:76:D4:8C:E5:45:43:37:1C:3F:83:AF:7C:01:63:39:82:B2:50:6C
X509v3 Authority Key Identifier:
keyid:12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:49:08:06:6f:2e:e6:6e:89:79:3e:e7:93:95:44:74:89:49:
c5:dd:ac:04:fd:d7:f4:17:c0:85:df:db:15:93:8d:99:74:d4:
88:81:d7:5a:03:ef:27:24:c9:99:f6:85:28:75:43:68:b3:85:
13:f8:ec:28:0f:4d:24:cf:62:d6:71:fe:b9:16:49:2f:cf:ea:
69:15:d8:66:c7:01:c5:c4:6a:1d:ca:8d:16:db:d8:84:90:8d:
3e:e3:70:d4:e2:fc:b8:18:bb:a1:7b:c9:dc:09:05:3b:9a:97:
13:b4:29:07:78:74:25:df:75:d8:63:57:df:4e:2d:67:e6:3f:
69:d1:26:be:f2:cd:31:96:36:3f:b9:d6:44:bc:22:84:23:84:
14:f6:22:49:f0:3f:41:37:b3:20:7b:74:28:60:6d:07:da:02:
ce:d1:ea:6c:d2:2e:d7:e3:47:7d:16:bb:f8:47:a9:9d:2f:e7:
ab:77:de:6c:90:09:45:58:cc:9d:75:a9:4b:79:df:fb:71:65:
fd:97:b8:54:5b:a9:b7:09:5a:53:27:6b:d5:19:72:2c:3c:0a:
2e:cd:02:8b:ee:fa:cf:c8:93:3e:68:22:31:6b:c6:d0:72:b3:
88:f4:e9:81:ac:ec:73:17:bf:0b:83:13:bc:ae:f0:6b:bd:a1:
7d:eb:9e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:08:36 2026 by rpki-client