Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier: qMovyidqt7P1TVb8ZR2QsrFYebNItiDufXv3x1vAZ4E=
Subject key identifier: 0E:5B:08:39:1D:C2:6D:5A:DA:71:AF:75:E0:66:F2:C6:4D:8A:AA:22
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 01A0D9BA889D1423613C9F2E5940C9E3AC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 18:01:15 +0000
Manifest this update: Fri 25 Sep 2026 18:01:15 +0000
Manifest next update: Sat 26 Sep 2026 18:01:15 +0000
Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: mGje/Me4VXXic+pfUrWGQRSg3O7706TmEydo9f8M7ks=)
2: m22Y1De-nkPO9R3DafQN5L9RCOU.roa (hash: CsiGy9UFamAf9ICsV6hbl4LryS8JIVMr9rlKyNfLKBQ=)
3: vdBF4D6B4y0Ni8JRFy3wrlKFdow.roa (hash: V5Qj+2qVfjThhkfwRXhTo9kpUUm1HojCtg/JdAzbU9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:88:9d:14:23:61:3c:9f:2e:59:40:c9:e3:ac:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Sep 25 18:01:15 2026 GMT
Not After : Sep 26 18:01:15 2026 GMT
Subject: CN=0e5b08391dc26d5ada71af75e066f2c64d8aaa22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:d5:43:09:f7:05:dd:d7:1e:64:15:22:00:
8c:d0:e3:c2:29:78:82:20:a9:8d:45:c0:dc:cf:31:
1b:34:14:00:7f:b1:7d:9a:79:d0:73:99:f8:c9:7c:
ee:3b:55:09:e6:2e:78:ba:ef:13:ff:2e:52:cf:a3:
7d:e4:c0:ae:91:87:bb:58:0d:2d:80:cc:5a:f8:62:
b5:bb:5c:83:67:d7:40:15:7d:6d:49:fd:97:f6:0d:
71:58:68:88:b8:c0:3a:63:42:49:08:ee:03:ae:0d:
0f:44:d9:f7:68:6b:41:fe:f1:b2:a5:ba:21:2c:8b:
27:3f:8c:c9:2c:26:d5:d6:e8:f6:92:02:53:e9:ec:
22:0f:bd:7f:8f:99:bd:7a:93:67:4a:cb:e1:dd:44:
5b:c8:0e:d2:19:08:cc:84:e2:58:81:81:16:59:76:
ea:86:25:30:3a:60:01:e9:7c:00:d1:79:46:a1:ac:
90:5c:c6:d8:e7:10:2d:eb:fe:bb:09:6b:9d:f5:cc:
8b:59:f0:68:6d:38:9e:e0:c1:b4:fb:db:e5:cd:91:
84:51:05:9d:7e:82:b7:f2:7b:c6:bc:dc:a6:b2:9b:
e8:a4:ac:0b:d9:00:f5:e2:72:d5:a3:d4:f6:11:da:
7c:64:f2:7a:b7:d8:fa:9e:11:df:af:2e:e5:48:0f:
d5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5B:08:39:1D:C2:6D:5A:DA:71:AF:75:E0:66:F2:C6:4D:8A:AA:22
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:50:a5:4d:d8:e6:b9:05:d7:11:38:00:cb:72:a5:f1:bf:d8:
03:f3:c5:aa:31:5f:2b:8a:06:b0:9e:8a:fa:34:fe:4f:f3:de:
a8:ab:b7:4e:c5:c5:05:48:05:2c:c5:52:b4:b9:49:9a:2b:12:
df:81:f9:f4:d5:bd:e7:3c:f3:18:b5:bc:c8:7e:1e:db:35:8b:
2f:b5:e0:a7:0c:b5:07:ce:a6:44:25:93:c6:27:23:c8:de:77:
d3:e0:11:9e:b1:75:cf:15:32:d9:51:8f:c2:41:a1:40:07:9b:
4e:26:8e:45:7a:6c:1e:66:65:26:c0:5f:d8:0d:a6:2a:76:70:
35:40:47:be:c3:16:20:27:81:68:79:eb:3b:c6:01:ea:07:92:
99:50:28:53:95:ba:2e:a4:ba:95:f3:9a:91:a0:91:aa:81:27:
ce:be:24:6f:5b:d1:20:10:8a:46:bd:5c:8c:7d:23:9b:63:3b:
09:04:8e:b4:de:15:02:36:08:68:01:7d:4d:fe:ef:bc:9d:c4:
1d:1d:09:da:02:6f:08:a4:b8:16:9e:ee:ef:65:e0:75:95:0d:
34:fe:4f:8f:da:fe:1d:a9:46:53:f4:56:12:a9:f8:eb:e5:78:
cb:0e:c0:48:76:83:96:32:1a:f0:7c:7e:1d:a6:f9:d3:48:cf:
60:8d:0c:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZuoidFCNhPJ8uWUDJ46xnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2UxNzZhNjljY2M5Yzk5NmUxNjEwOTI1YzBiNmJkZjc2
YjIwN2MwHhcNMjYwOTI1MTgwMTE1WhcNMjYwOTI2MTgwMTE1WjAzMTEwLwYDVQQD
EygwZTViMDgzOTFkYzI2ZDVhZGE3MWFmNzVlMDY2ZjJjNjRkOGFhYTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDvVQwn3Bd3XHmQVIgCM0OPCKXiC
IKmNRcDczzEbNBQAf7F9mnnQc5n4yXzuO1UJ5i54uu8T/y5Sz6N95MCukYe7WA0t
gMxa+GK1u1yDZ9dAFX1tSf2X9g1xWGiIuMA6Y0JJCO4Drg0PRNn3aGtB/vGypboh
LIsnP4zJLCbV1uj2kgJT6ewiD71/j5m9epNnSsvh3URbyA7SGQjMhOJYgYEWWXbq
hiUwOmAB6XwA0XlGoayQXMbY5xAt6/67CWud9cyLWfBobTie4MG0+9vlzZGEUQWd
foK38nvGvNymspvopKwL2QD14nLVo9T2Edp8ZPJ6t9j6nhHfry7lSA/VMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA5bCDkdwm1a2nGvdeBm8sZNiqoiMB8GA1UdIwQY
MBaAFHrOF2ppzMnJluFhCSXAtr33ayB8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXM0WGFtbk15Y21XNFdFSkpjQzJ2ZmRySUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82YWZjYmUtNmRmMC00Zjc3LWFmMzQt
YzYxODAzYzM0NjU3LzEvZXM0WGFtbk15Y21XNFdFSkpjQzJ2ZmRySUh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My82YWZjYmUtNmRmMC00Zjc3LWFmMzQtYzYxODAzYzM0NjU3
LzEvZXM0WGFtbk15Y21XNFdFSkpjQzJ2ZmRySUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVClTdjm
uQXXETgAy3Kl8b/YA/PFqjFfK4oGsJ6K+jT+T/PeqKu3TsXFBUgFLMVStLlJmisS
34H59NW95zzzGLW8yH4e2zWLL7Xgpwy1B86mRCWTxicjyN530+ARnrF1zxUy2VGP
wkGhQAebTiaORXpsHmZlJsBf2A2mKnZwNUBHvsMWICeBaHnrO8YB6geSmVAoU5W6
LqS6lfOakaCRqoEnzr4kb1vRIBCKRr1cjH0jm2M7CQSOtN4VAjYIaAF9Tf7vvJ3E
HR0J2gJvCKS4Fp7u72XgdZUNNP5Pj9r+HalGU/RWEqn46+V4yw7ASHaDljIa8Hx+
Hab500jPYI0M4g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:23:40 2026 by rpki-client