Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
File: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft (raw, json)
Hash identifier: vS2XNS8ceGDmWTLdgrm0g4Z4s7cHuvWKdXiu5gJVMh8=
Subject key identifier: 09:1B:10:74:87:7A:57:C1:56:9D:63:EF:64:B3:49:B2:2F:A9:C4:D6
Authority key identifier: 7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
Certificate issuer: /CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Certificate serial: 019D296169FE49550926DAB74ECF5978174C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 09:02:23 +0000
Manifest this update: Thu 26 Mar 2026 09:02:23 +0000
Manifest next update: Fri 27 Mar 2026 09:02:23 +0000
Files and hashes: 1: 1-gB5rLPnht4_2fTXD19vo6rGOgY.roa (hash: MrHKvfkkxIsYa65L6lLIguftbi69CSEX2nGOpQCCn6M=)
2: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl (hash: FJGvJL98FwdQQ36/egG1nlVf0eHnBw8UzfgEGTrdR5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:69:fe:49:55:09:26:da:b7:4e:cf:59:78:17:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Validity
Not Before: Mar 26 09:02:23 2026 GMT
Not After : Mar 27 09:02:23 2026 GMT
Subject: CN=091b1074877a57c1569d63ef64b349b22fa9c4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:9f:02:d1:24:58:1b:16:8e:9a:36:3d:57:
9a:a6:af:f5:8f:db:09:7b:b1:46:42:87:8f:5b:03:
42:54:78:d4:4d:0c:f7:6d:45:6e:dc:70:aa:b1:1a:
33:8e:aa:ae:a0:5b:f5:a1:9c:84:29:ea:bf:ad:b9:
ba:42:eb:0b:49:a0:78:6e:7a:c8:2c:ba:50:5b:0e:
04:b1:00:06:55:eb:a9:9c:b8:32:36:d3:20:43:7c:
58:3b:c2:7e:28:31:b0:37:80:ef:00:7d:a2:b6:c2:
16:ef:45:89:a9:42:cb:34:7a:9a:f4:6c:8e:39:b6:
be:25:7a:64:66:3d:c0:81:15:c0:48:77:e9:e7:d7:
45:cd:b1:04:74:35:7c:4b:c2:a9:fe:d0:a1:83:86:
95:6e:dd:b1:f0:16:de:48:ae:6f:c5:5a:dd:02:d6:
d2:77:b9:7a:db:08:6e:6a:76:20:ea:86:fb:fc:85:
9e:cb:99:7f:ed:4c:c9:70:dd:40:99:a1:19:9d:a7:
01:5e:06:3c:d0:fd:3e:98:99:88:2f:e2:ff:1b:87:
d5:5b:8a:93:a5:e5:1f:06:96:b6:fd:cd:12:7b:be:
f6:d3:18:54:c4:12:cc:f5:8a:b0:02:47:67:bf:59:
20:19:e9:cc:2d:b9:47:bf:93:97:f4:1c:d2:01:4a:
e2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1B:10:74:87:7A:57:C1:56:9D:63:EF:64:B3:49:B2:2F:A9:C4:D6
X509v3 Authority Key Identifier:
keyid:7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:74:98:8b:1c:1f:61:cc:1d:7a:75:97:05:c7:50:43:a1:53:
ca:89:b6:e1:4a:fc:5d:d6:71:cb:57:1c:15:d8:00:e4:04:b4:
58:54:f9:07:80:8f:5f:ba:75:c6:51:29:e4:6e:c5:62:04:76:
a3:dd:95:d9:12:11:d9:74:13:9f:74:43:30:56:ae:c1:62:3b:
53:0b:0b:5e:15:5f:11:35:84:71:45:75:52:67:d7:cb:67:62:
dd:53:7d:6d:20:71:0c:a5:f4:e3:36:27:ce:db:19:16:4e:68:
75:d0:f2:f9:3f:a1:22:7a:1b:ee:86:56:a1:ca:75:6a:11:5f:
88:d9:38:16:15:23:40:5b:00:37:4b:2a:82:06:4e:b7:51:81:
08:87:a2:77:60:57:ef:16:73:ca:36:c1:1a:47:d6:9e:9a:f4:
0f:3c:90:a5:fe:cc:40:24:f7:64:61:53:de:00:54:6b:9c:2c:
9b:cd:34:20:50:ab:a0:34:12:10:f2:4e:fc:49:2f:56:b8:27:
12:b4:b9:2b:d0:61:f3:88:83:08:3e:4d:e0:59:fc:81:a8:d4:
3a:0b:71:59:9b:43:6e:6e:65:b3:98:c3:d1:66:8f:4d:35:c6:
79:ad:8d:48:b4:b1:3f:36:d9:58:c0:d7:ce:6b:8c:b5:51:53:
b4:eb:5f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:46:18 2026 by rpki-client