Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
File: eSf20AYql2a9WPDQdcTw0QJX5gY.mft (raw, json)
Hash identifier: ssNuW6Vk85dFyeYd1tk1z+YZThkoUfxBzcA98KAi/gY=
Subject key identifier: 25:83:03:AB:1D:8F:D2:07:16:39:AF:F9:B9:8D:09:B2:27:90:A3:5A
Authority key identifier: 79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06
Certificate issuer: /CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
Certificate serial: 019D28163FE0C01576DB0167CF31E76293E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
Manifest number: 0473
Signing time: Thu 26 Mar 2026 03:00:39 +0000
Manifest this update: Thu 26 Mar 2026 03:00:39 +0000
Manifest next update: Fri 27 Mar 2026 03:00:39 +0000
Files and hashes: 1: dwwuDg-_Lj4wB527-ou6-S3pBWg.asa (hash: rYIJNLZplB93Gf88vCn/UEDs9B2NpoWxqEIzhJdh1xw=)
2: eSf20AYql2a9WPDQdcTw0QJX5gY.crl (hash: 3dUoiYZmQ/mWcVSK1VtxbfmwqFAnu7S6RgOgLre8WDs=)
3: nGbIVWhps3UHxhstB6YJ_xOK-Bc.roa (hash: UAJt17CKwokf5TiXBHPy3xcrVlpfB1owep0x5mOCX4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:3f:e0:c0:15:76:db:01:67:cf:31:e7:62:93:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
Validity
Not Before: Mar 26 03:00:39 2026 GMT
Not After : Mar 27 03:00:39 2026 GMT
Subject: CN=258303ab1d8fd2071639aff9b98d09b22790a35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:69:8d:fa:39:85:ac:06:8f:12:97:e2:ff:
1e:90:94:2a:4d:42:da:c9:a7:da:3d:d5:21:9e:ae:
cc:a6:83:c4:9b:26:df:17:78:c0:ec:08:92:18:c9:
a5:92:7c:f9:d8:6f:a0:68:5b:94:fc:b8:93:db:af:
19:29:ca:cb:ed:2d:9e:6e:84:58:c5:aa:39:a9:77:
61:e9:65:2b:03:9d:0c:5e:67:d0:bd:5c:de:ad:6a:
18:38:a6:e4:72:0f:8e:c1:28:ec:32:e2:79:c8:e8:
e7:83:c3:a2:9f:cf:80:1a:6d:96:95:57:13:99:df:
80:06:a6:4c:7b:0c:aa:b4:68:1c:ff:5b:85:69:df:
5f:9e:22:01:7b:3c:67:b4:ff:a2:c9:a8:ee:b2:77:
54:33:8a:11:e3:6e:29:27:42:0c:ab:48:2c:e1:93:
c6:ca:51:aa:3b:12:c5:5c:f7:b7:42:a5:ac:a3:9c:
74:0b:1e:0f:3a:48:66:d7:e7:6a:d6:50:06:ce:e9:
41:7b:25:a4:43:44:b2:fc:00:bf:bf:33:6a:e3:02:
56:27:e1:cd:bd:dc:e8:12:67:c4:7e:05:e7:e3:d9:
29:2d:07:e7:2e:cb:3f:44:53:6f:e1:83:ab:89:1c:
26:e5:dd:67:17:d9:f7:db:fd:6c:f1:af:61:4c:ca:
c3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:83:03:AB:1D:8F:D2:07:16:39:AF:F9:B9:8D:09:B2:27:90:A3:5A
X509v3 Authority Key Identifier:
keyid:79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:34:28:69:4a:bf:16:cb:43:39:18:c4:70:02:ae:c4:54:b6:
7d:c1:58:40:47:87:13:7a:7b:fd:45:fb:92:6a:64:cc:8d:28:
b3:b0:3c:9e:a4:85:6e:b6:ac:dc:e0:f4:0a:4b:1c:95:21:04:
3c:81:00:d5:c6:8a:ac:f8:e2:ed:f7:1c:f3:f5:fd:19:db:3d:
03:53:9c:a6:85:8a:c9:ae:d3:d7:31:cc:8a:de:c1:52:24:23:
12:3e:ef:0b:e8:f1:e2:32:5c:39:dd:06:e4:28:ee:30:d5:f6:
77:1d:c7:f5:31:7a:6a:b5:08:79:ad:f1:65:cb:be:c0:55:31:
28:fb:19:fa:3d:f8:17:22:70:78:f6:4d:9b:7b:bd:e5:1c:c9:
fe:cb:ca:4f:94:cd:16:4b:50:ab:a1:db:65:e3:42:ee:b9:d7:
95:f1:f7:4e:18:b2:e9:63:ad:f6:31:d3:3d:ac:3d:58:29:1f:
b7:7c:3d:b1:46:40:bd:f6:02:b9:ac:a7:ca:e8:ec:5c:1a:27:
35:08:ea:fd:87:fa:e8:d4:82:a9:49:37:d8:08:b2:3e:23:d6:
1f:82:8d:93:40:d3:85:74:90:db:89:e4:2d:4c:45:70:ef:3f:
ab:0c:db:ea:23:63:5d:ae:92:ed:eb:06:bc:0b:bf:6f:e0:48:
f5:cd:cc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:35:55 2026 by rpki-client