Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier: ftBuUVT+w80Nnj0zZNhlOTwUGgbgrQk+O8SdsU7baVQ=
Subject key identifier: F5:F9:FB:47:9F:D1:72:47:9E:67:25:49:B4:42:96:D6:54:AE:07:41
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 019E1EA35FD4E4F8CDA91D808855B4F817D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 00:01:23 +0000
Manifest this update: Wed 13 May 2026 00:01:23 +0000
Manifest next update: Thu 14 May 2026 00:01:23 +0000
Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: NIZDC7ab7w+ic1IQrPR5ayZMnTMlNLKZKac9MCKpnDE=)
2: m22Y1De-nkPO9R3DafQN5L9RCOU.roa (hash: CsiGy9UFamAf9ICsV6hbl4LryS8JIVMr9rlKyNfLKBQ=)
3: vdBF4D6B4y0Ni8JRFy3wrlKFdow.roa (hash: V5Qj+2qVfjThhkfwRXhTo9kpUUm1HojCtg/JdAzbU9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:5f:d4:e4:f8:cd:a9:1d:80:88:55:b4:f8:17:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: May 13 00:01:23 2026 GMT
Not After : May 14 00:01:23 2026 GMT
Subject: CN=f5f9fb479fd172479e672549b44296d654ae0741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a2:67:b0:12:cc:34:87:b5:de:84:4d:ab:bb:
37:8b:e0:3d:6a:28:8e:d3:2a:5e:78:74:bd:e1:a9:
c0:76:56:79:ca:04:7e:e1:d0:f9:9e:a7:4f:17:3d:
9b:45:2d:4b:d1:ca:2b:99:cd:56:43:34:a6:71:a3:
d5:5c:af:1e:46:05:49:42:f1:94:2c:5e:85:c1:f8:
ea:1e:13:e6:42:e6:6e:6f:25:92:15:7f:a0:59:56:
74:a6:82:ba:51:4e:de:fd:a5:4c:6f:6c:97:bd:3f:
f7:bd:7d:35:00:1d:f6:d4:79:2d:d8:1d:6b:87:41:
cc:0e:44:60:c5:91:5f:72:bc:dd:3f:1e:0f:ac:66:
18:ad:93:08:df:3f:aa:b8:13:23:f9:88:30:06:86:
ac:3b:ab:a2:a2:23:5b:72:2a:9a:02:90:85:7e:04:
97:92:93:bf:85:15:79:60:5c:b6:20:aa:34:4d:61:
2f:74:da:a4:e4:63:1d:18:78:ff:2c:da:62:95:d2:
a6:eb:6f:ff:de:e1:93:e3:5e:09:b0:b8:37:de:7f:
62:d6:34:d0:b2:6e:65:0d:fc:b8:f1:eb:a3:d6:6d:
5e:8f:27:e3:92:74:70:2b:2a:0f:9c:a4:75:8a:a1:
96:8e:f6:8d:47:49:19:23:6c:bd:87:d6:a7:36:a9:
a8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F9:FB:47:9F:D1:72:47:9E:67:25:49:B4:42:96:D6:54:AE:07:41
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:9c:3c:4f:b8:a2:18:3d:a6:09:e2:95:38:e9:94:f3:16:76:
80:a9:b4:e8:6d:f7:9e:ac:76:7e:f4:08:72:5f:74:fc:77:47:
80:66:fa:49:ca:a2:bb:d9:b2:8b:b6:0d:22:1a:59:ee:ef:0f:
36:95:75:f7:1e:c3:d3:cd:af:9c:c4:fd:1a:b1:20:0c:94:93:
42:f8:ee:e6:9c:9d:82:e7:7e:2e:ec:28:cc:4d:3e:ee:4b:58:
fc:42:bd:d0:a5:09:47:07:10:b1:aa:b6:f1:6e:a8:d9:b6:3d:
44:5b:87:cf:0c:8f:06:70:2a:f5:1b:2e:14:ba:2d:dd:4a:99:
cb:2d:05:d0:13:b6:c4:63:ab:f3:4d:30:8a:d0:70:1e:30:4f:
e7:28:4d:8f:07:56:b9:29:d6:f4:6e:f7:e8:0d:c6:a1:88:e6:
36:7a:46:1d:6d:18:5c:1a:47:ed:c6:36:a8:d4:7c:a1:5d:ab:
cd:7a:ae:d3:d1:03:6e:46:f9:a8:55:35:80:7b:01:3d:10:9a:
be:00:37:ee:48:cf:08:80:dd:1c:00:6c:7a:48:f3:72:59:0e:
7a:b8:f8:e0:4a:cd:92:e3:71:cb:61:a5:7b:a5:5c:5e:47:61:
86:bb:42:fb:a2:34:9a:02:30:f5:7c:bf:e9:79:2b:f8:73:75:
2e:b5:e9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:25:57 2026 by rpki-client