Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
File: eSttblvaBSZfwM6XGaYzvgSm6Xk.mft (raw, json)
Hash identifier: mOi8c5ETSPif5IaPQnt1wjMzuNiVEE867mzHfENVJtU=
Subject key identifier: 82:09:A4:8D:65:85:EA:68:87:F0:76:9C:54:62:CD:23:EC:F7:74:CF
Authority key identifier: 79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
Certificate issuer: /CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Certificate serial: 019D28F32531EC37B2EF02EB05C49712B2FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 07:01:56 +0000
Manifest this update: Thu 26 Mar 2026 07:01:56 +0000
Manifest next update: Fri 27 Mar 2026 07:01:56 +0000
Files and hashes: 1: eSttblvaBSZfwM6XGaYzvgSm6Xk.crl (hash: eSVkfsnysPvTfoANDZkYUhZoY1GNunWy3/8QX22qjQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:25:31:ec:37:b2:ef:02:eb:05:c4:97:12:b2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Validity
Not Before: Mar 26 07:01:56 2026 GMT
Not After : Mar 27 07:01:56 2026 GMT
Subject: CN=8209a48d6585ea6887f0769c5462cd23ecf774cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:82:be:ab:47:40:86:ff:b6:51:35:33:c5:8c:
49:9f:6a:3a:77:27:7b:ce:41:ca:4b:c6:d9:4e:6f:
be:24:9f:47:46:b1:25:be:d6:68:13:59:2c:e6:99:
4c:e2:ff:97:7f:21:fe:7e:cb:f4:e5:08:83:1a:ec:
77:f0:e3:14:83:ed:e4:68:bc:51:51:89:e2:ae:fa:
ff:bf:44:8f:68:7c:85:fd:d1:20:27:c1:33:02:c0:
45:2b:bb:28:c5:38:ba:c9:03:93:e0:f6:84:ac:57:
bb:a0:e0:87:bf:ef:88:f1:c0:42:05:06:a1:01:f3:
f7:b8:0f:ce:0b:2f:8b:47:b5:b0:ae:09:48:c5:43:
4a:72:0f:ef:28:c5:34:bc:12:c7:22:02:cb:27:2c:
99:d6:57:d1:5d:01:83:b2:ef:65:fc:c6:0e:44:de:
39:57:a9:66:1e:9b:90:72:08:ef:81:26:b0:c6:a8:
57:d4:42:72:3a:4c:94:8e:ad:2a:68:da:34:84:69:
74:c7:9a:2b:22:db:6f:cb:db:db:f3:c2:3d:4c:a9:
4d:e4:b9:22:d9:9f:e2:8c:e3:45:db:a0:9f:d4:ea:
a6:1b:77:65:c7:0f:5a:42:8c:9b:f0:bc:6c:32:ee:
fd:f0:17:b2:e8:cc:83:86:2f:1a:9e:ef:a0:02:38:
ab:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:09:A4:8D:65:85:EA:68:87:F0:76:9C:54:62:CD:23:EC:F7:74:CF
X509v3 Authority Key Identifier:
keyid:79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8b:58:66:84:83:98:b5:98:63:05:20:ad:e2:b6:2e:5b:78:
b5:01:40:93:2f:f0:11:30:43:90:6d:39:b6:69:0f:7e:ac:08:
4e:21:a4:19:dc:cc:84:86:bd:0e:b5:30:a6:0f:ab:65:1b:4a:
87:86:d8:e7:45:93:b7:e3:a7:c1:9e:ef:d5:cf:3c:47:da:e5:
e1:f4:a1:2d:f6:fc:cd:62:47:1f:75:45:81:ad:b5:ce:8b:76:
d8:c3:8d:d1:64:c3:07:62:f6:3a:9b:ba:b5:b7:86:64:46:d6:
aa:e7:bd:01:ef:5c:d2:95:32:8f:1e:90:0f:51:83:03:dd:a4:
63:b5:a5:91:74:f3:19:49:db:e7:68:ff:67:7f:a3:4d:d3:80:
15:21:a8:4c:53:ab:35:b3:3d:71:30:26:6d:9e:65:00:fa:48:
74:71:a1:6e:6c:e9:5c:9b:50:eb:36:bc:69:5d:93:e5:e5:9f:
bd:35:f8:38:10:4f:f5:b1:a6:a9:48:31:d9:4e:f9:3c:ce:02:
0a:1e:64:1c:19:16:9f:e8:1f:9d:8c:e0:27:49:f8:75:c7:3b:
94:f4:99:6a:81:ee:1b:66:47:be:ad:c4:75:f7:8d:fc:29:dc:
0e:9a:a0:02:db:02:f0:4f:58:b8:1f:00:3e:ba:18:72:34:7d:
2b:16:d1:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8yUx7Dey7wLrBcSXErL9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MmI2ZDZlNWJkYTA1MjY1ZmMwY2U5NzE5YTYzM2JlMDRh
NmU5NzkwHhcNMjYwMzI2MDcwMTU2WhcNMjYwMzI3MDcwMTU2WjAzMTEwLwYDVQQD
Eyg4MjA5YTQ4ZDY1ODVlYTY4ODdmMDc2OWM1NDYyY2QyM2VjZjc3NGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIK+q0dAhv+2UTUzxYxJn2o6dyd7
zkHKS8bZTm++JJ9HRrElvtZoE1ks5plM4v+XfyH+fsv05QiDGux38OMUg+3kaLxR
UYnirvr/v0SPaHyF/dEgJ8EzAsBFK7soxTi6yQOT4PaErFe7oOCHv++I8cBCBQah
AfP3uA/OCy+LR7WwrglIxUNKcg/vKMU0vBLHIgLLJyyZ1lfRXQGDsu9l/MYORN45
V6lmHpuQcgjvgSawxqhX1EJyOkyUjq0qaNo0hGl0x5orIttvy9vb88I9TKlN5Lki
2Z/ijONF26Cf1OqmG3dlxw9aQoyb8LxsMu798Bey6MyDhi8anu+gAjirbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIJpI1lhepoh/B2nFRizSPs93TPMB8GA1UdIwQY
MBaAFHkrbW5b2gUmX8DOlxmmM74Epul5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVN0dGJsdmFCU1pmd002WEdhWXp2Z1NtNlhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9kYWMxZTUtMWZkOS00M2Q0LTg5MjYt
MjEzZGMzOTliZTZmLzEvZVN0dGJsdmFCU1pmd002WEdhWXp2Z1NtNlhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9kYWMxZTUtMWZkOS00M2Q0LTg5MjYtMjEzZGMzOTliZTZm
LzEvZVN0dGJsdmFCU1pmd002WEdhWXp2Z1NtNlhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4tYZoSD
mLWYYwUgreK2Llt4tQFAky/wETBDkG05tmkPfqwITiGkGdzMhIa9DrUwpg+rZRtK
h4bY50WTt+OnwZ7v1c88R9rl4fShLfb8zWJHH3VFga21zot22MON0WTDB2L2Opu6
tbeGZEbWque9Ae9c0pUyjx6QD1GDA92kY7WlkXTzGUnb52j/Z3+jTdOAFSGoTFOr
NbM9cTAmbZ5lAPpIdHGhbmzpXJtQ6za8aV2T5eWfvTX4OBBP9bGmqUgx2U75PM4C
Ch5kHBkWn+gfnYzgJ0n4dcc7lPSZaoHuG2ZHvq3EdfeN/CncDpqgAtsC8E9YuB8A
ProYcjR9KxbRWg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:27:41 2026 by rpki-client