
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier: mq1wStATYTX01BXj+w/0JXzkPAMg7lpAlrOjPZtR78s=
Subject key identifier: AA:75:81:DC:59:2A:DC:E7:C7:DF:9E:D2:4E:A2:1C:58:EE:5A:E8:06
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 019F954A7833E04161DEFF0B5FCE5F7B0D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 18:01:53 +0000
Manifest this update: Fri 24 Jul 2026 18:01:53 +0000
Manifest next update: Sat 25 Jul 2026 18:01:53 +0000
Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: DiX1YDqMZqqA9KrPnRAt9tFHiTE/k6pILgayfl7/l3U=)
2: m22Y1De-nkPO9R3DafQN5L9RCOU.roa (hash: CsiGy9UFamAf9ICsV6hbl4LryS8JIVMr9rlKyNfLKBQ=)
3: vdBF4D6B4y0Ni8JRFy3wrlKFdow.roa (hash: V5Qj+2qVfjThhkfwRXhTo9kpUUm1HojCtg/JdAzbU9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:78:33:e0:41:61:de:ff:0b:5f:ce:5f:7b:0d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Jul 24 18:01:53 2026 GMT
Not After : Jul 25 18:01:53 2026 GMT
Subject: CN=aa7581dc592adce7c7df9ed24ea21c58ee5ae806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:fe:41:2d:b5:3a:d2:80:45:e8:a2:a8:08:
1e:34:f5:fe:11:8f:b9:34:e7:9d:1b:76:28:6b:d3:
25:a4:57:e4:27:73:f9:fc:2c:fe:f2:32:61:01:39:
c6:2c:18:28:c4:eb:50:c4:f0:9f:34:34:63:76:1d:
c1:01:8a:a5:e4:44:28:1a:9e:22:3d:37:bd:70:94:
ec:4a:73:f8:4d:43:cf:9f:ca:5f:a6:9c:f7:b2:a7:
d1:22:e5:3d:d1:1e:c0:18:a9:14:3f:14:b2:8b:cf:
1c:72:b2:1e:9d:dc:30:e4:49:8e:f6:7b:b2:6d:ce:
46:a6:a3:93:e0:7a:db:22:0b:3f:51:c0:22:71:d9:
7c:97:02:47:9e:40:be:a8:bc:1c:18:44:0a:12:1f:
0d:b2:af:e3:87:51:fa:31:5b:c2:a5:72:56:4f:99:
0a:2a:18:b3:63:80:63:ec:02:42:f0:15:e1:b4:67:
75:83:d2:f6:57:b1:91:6c:5d:48:39:33:a9:e0:2a:
fb:e7:d7:5d:ee:9b:cc:b8:67:e1:35:ef:6c:35:4a:
f6:49:a6:2d:c9:94:c3:3d:11:96:d7:af:38:26:84:
d7:6a:f2:32:92:80:7c:c6:93:26:de:32:a8:54:1a:
46:88:e5:1a:ab:1f:e6:d3:92:89:43:8f:d1:72:94:
17:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:75:81:DC:59:2A:DC:E7:C7:DF:9E:D2:4E:A2:1C:58:EE:5A:E8:06
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:71:df:00:b7:98:79:1d:a9:31:ff:6d:20:49:f7:e9:d4:27:
ab:04:97:c3:2b:20:72:04:6d:c7:d6:21:a1:cf:ef:e1:05:25:
d9:d0:2c:65:32:da:69:68:f8:9d:37:81:78:97:c9:3c:66:b1:
af:8d:05:4d:6a:06:31:d5:52:07:2f:c4:7a:0d:25:b2:83:e0:
0b:a0:3e:1d:ae:a8:e9:d1:bd:07:44:7b:db:21:a3:18:94:52:
bf:54:c6:f8:8d:38:42:13:03:e8:aa:ae:b3:15:fa:89:71:85:
9d:07:73:19:eb:c9:ae:a1:fb:90:3f:a6:43:a2:e4:9b:a4:99:
3e:38:7d:50:31:35:a7:10:64:a7:15:c6:28:0a:d4:4e:0e:70:
b0:fe:5e:46:4a:2d:5f:ac:34:8a:96:0a:4a:ee:ed:9e:9f:d1:
07:9e:7a:24:c5:74:d0:65:b9:7c:dd:fe:52:19:35:34:d3:cb:
87:92:54:ff:27:0b:2b:32:db:85:7a:6e:9e:f9:0c:74:23:46:
8e:65:e1:34:58:32:48:2c:40:44:30:70:d1:4b:d3:f2:bb:79:
8c:33:8e:0a:2c:46:4d:4b:d4:e9:b7:73:7d:c0:6a:ea:74:13:
76:ca:71:6f:e1:5e:73:b8:82:f9:f9:f2:52:8f:53:b9:82:52:
8b:a3:5b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:15:55 2026 by rpki-client