Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
File: EsCzmbynzX_KI2gTkGefXMqVueE.mft (raw, json)
Hash identifier: HZ/LWy4nRGA4FRQbTXeC04432dfyZ1Flrb7hF78Il8Y=
Subject key identifier: 05:69:E8:8D:23:A1:C3:F6:3E:1D:A8:A8:6E:06:61:20:90:1D:A6:0F
Authority key identifier: 12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
Certificate issuer: /CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Certificate serial: 019D25BAD89796FA30240C28C80BFBEDFD2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
Manifest number: 15F3
Signing time: Wed 25 Mar 2026 16:01:35 +0000
Manifest this update: Wed 25 Mar 2026 16:01:35 +0000
Manifest next update: Thu 26 Mar 2026 16:01:35 +0000
Files and hashes: 1: EsCzmbynzX_KI2gTkGefXMqVueE.crl (hash: UrInnfh6jHU5rhJmRWISVYaOBgWQ19fcVAGIbY5TRCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:d8:97:96:fa:30:24:0c:28:c8:0b:fb:ed:fd:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Validity
Not Before: Mar 25 16:01:35 2026 GMT
Not After : Mar 26 16:01:35 2026 GMT
Subject: CN=0569e88d23a1c3f63e1da8a86e066120901da60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5a:dc:30:ce:a0:22:54:b9:9f:0a:54:17:74:
92:1d:55:ff:3a:be:1a:28:0a:78:31:fb:9b:fb:db:
0e:2c:c2:29:6c:d2:b3:ba:8f:0e:44:5f:73:73:15:
04:ff:1a:2d:e9:62:25:c6:f4:4c:83:ff:82:1e:1e:
5b:4d:4e:1f:bc:8c:aa:55:8d:d0:c1:af:19:0a:45:
eb:06:6d:19:e8:bc:e1:58:4b:ca:fb:b8:97:34:2f:
cb:49:d2:05:7d:87:8d:d0:87:11:a4:af:df:55:c8:
3b:bd:73:62:e6:98:8f:45:fa:ba:b4:34:70:c4:7a:
03:e1:12:5d:1a:69:57:6a:49:52:c6:02:5d:d3:cc:
e3:de:e5:cf:37:0d:3c:17:2b:bb:f1:c4:5d:b1:c6:
da:a5:f8:1c:aa:c6:73:b1:92:16:aa:6a:e0:a3:b2:
04:f7:87:60:45:cc:98:b9:15:4c:5b:e1:3a:26:79:
86:76:31:e7:f0:59:a1:c5:2a:47:30:6c:db:a6:ec:
50:8a:74:d7:10:ea:36:a0:a9:00:1d:24:bc:56:79:
08:bb:41:39:64:b5:f3:1d:1b:4f:79:1f:9c:5e:f0:
0d:d6:97:64:c0:49:cc:44:9f:aa:f0:d6:6d:44:e1:
9e:bf:3c:d3:b4:5b:d0:06:de:cf:2e:23:84:7e:c2:
d9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:69:E8:8D:23:A1:C3:F6:3E:1D:A8:A8:6E:06:61:20:90:1D:A6:0F
X509v3 Authority Key Identifier:
keyid:12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d4:08:d7:54:66:10:11:da:72:5f:55:60:0b:a6:8b:8d:9b:
45:00:b6:6c:43:4b:ca:bd:dc:08:3e:53:2b:20:60:e6:ca:e5:
28:9a:ee:ad:9c:5f:7d:68:15:20:77:e9:c9:65:24:69:11:51:
61:22:cb:01:c1:a2:de:28:2e:90:e4:d2:56:3a:a0:a3:df:67:
74:2c:8d:37:83:8a:f8:67:dd:0a:03:3f:d0:2c:3c:4d:71:4a:
c7:aa:41:57:3f:1a:ea:cf:67:9f:a3:8c:4f:83:8b:93:32:89:
52:d2:d4:4d:b9:57:48:52:46:97:62:a6:5b:fa:db:0c:39:3f:
78:d6:fc:fe:38:68:d4:5b:ba:ea:de:88:0f:46:73:94:5a:34:
c4:c0:72:11:f6:53:6a:7f:5d:a3:2c:b5:6e:3e:99:5d:62:db:
7c:66:7c:0b:a0:df:dd:f4:bd:99:75:2a:f7:12:4c:f4:4f:f0:
45:07:97:66:53:12:c5:c3:1f:9f:19:15:ff:78:65:b3:fc:f6:
2e:01:a2:47:39:ef:52:41:d5:09:10:5d:6b:fe:9a:87:81:30:
96:5b:f9:68:0b:6a:97:21:de:da:d6:c8:85:97:88:92:80:8e:
df:6f:71:ed:93:95:6b:bd:a6:9a:48:c1:87:64:18:36:e9:ea:
4d:16:31:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:18:00 2026 by rpki-client