Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
File: Es2a3RYTfourmNeOKjNgvIvW8PE.mft (raw, json)
Hash identifier: 4A+GOBJvsn5R8EVHatm6P4v2SIoTWUsTI9B2UbO7SnY=
Subject key identifier: 35:1C:66:3F:D0:0F:0A:AA:05:52:45:25:3F:EE:4F:93:A0:7B:8E:26
Authority key identifier: 12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
Certificate issuer: /CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Certificate serial: 019D28169F8702528E6AB5DA892AC3BCC4DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 03:01:04 +0000
Manifest this update: Thu 26 Mar 2026 03:01:04 +0000
Manifest next update: Fri 27 Mar 2026 03:01:04 +0000
Files and hashes: 1: 5PuKtCw0QFU1GY0J5UpP_xHtRIk.roa (hash: j1mFIiv449G4hXYGvmw9c0Kk7V0VX9Tiu6ckBGnez8Y=)
2: Es2a3RYTfourmNeOKjNgvIvW8PE.crl (hash: BrYqXaSvn7f0DSNR95veOz1XYkLdqQasFzeiH7Uu69Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:9f:87:02:52:8e:6a:b5:da:89:2a:c3:bc:c4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Validity
Not Before: Mar 26 03:01:04 2026 GMT
Not After : Mar 27 03:01:04 2026 GMT
Subject: CN=351c663fd00f0aaa055245253fee4f93a07b8e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7e:d4:c1:df:5a:85:2a:0d:28:c5:d9:81:7b:
2a:a0:ec:51:7f:a3:8e:51:f0:50:29:e9:a3:34:b8:
b1:43:83:90:cc:00:2a:12:0a:8d:90:ee:53:48:3e:
1d:5b:cd:a3:01:2c:f3:08:80:c2:e9:56:a4:b8:3c:
09:b9:f7:0a:2d:4b:0d:12:da:a0:cd:a6:af:62:d2:
54:0a:24:ae:5d:cd:dc:d6:0d:da:da:96:f9:36:42:
47:82:8e:3c:66:af:18:d8:a4:8e:7f:86:91:04:8e:
99:3f:f0:d9:c9:39:ab:df:ff:e3:22:7a:b5:28:57:
57:b5:6f:35:54:3e:91:31:7b:18:f0:10:0e:4d:96:
2c:11:6c:8c:8c:e7:af:a0:e6:43:69:f5:5d:a3:b1:
e4:76:7d:f5:eb:42:cd:2d:fe:c4:a8:80:2f:47:d6:
89:d6:8c:65:43:b0:a7:49:07:6e:9a:59:39:a8:c6:
a9:65:42:a0:1b:4d:02:5c:b5:f0:5d:45:2a:84:80:
16:b9:4c:cc:a7:e7:4f:25:13:cf:6c:22:75:85:e0:
c6:7a:cb:8b:6e:bb:3d:a3:5f:1a:e4:4b:e2:09:84:
b8:23:4b:81:4c:1a:ff:74:86:e1:b6:5f:6a:73:7f:
a1:77:4f:d8:33:8d:d1:7c:b8:e2:1c:de:9c:24:07:
7b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1C:66:3F:D0:0F:0A:AA:05:52:45:25:3F:EE:4F:93:A0:7B:8E:26
X509v3 Authority Key Identifier:
keyid:12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:81:13:c1:d3:c9:eb:48:b5:c0:d2:8f:d6:6a:de:08:08:a1:
03:28:1e:22:4d:6a:19:b5:67:e0:bb:0b:81:7b:3f:69:9d:32:
ad:5d:a2:97:c2:d3:21:7c:93:02:99:49:fd:5f:55:d5:31:6f:
2b:51:5d:57:77:bd:f5:da:5a:5a:3f:72:30:68:39:ea:e2:95:
34:49:4e:13:df:39:b7:53:c8:2c:b6:59:c4:e4:db:a0:7f:34:
91:90:1d:32:65:d9:94:4e:50:32:22:f2:ad:11:c2:b3:79:1f:
6f:6e:e4:e2:ac:fa:36:36:f6:b0:8c:bf:42:a3:14:28:d9:b2:
6b:6a:db:da:c4:e8:69:fa:81:b7:12:a2:00:28:af:7c:dc:4b:
e2:66:a2:29:4c:3f:82:e5:e2:e4:63:f5:d0:eb:ca:48:ea:e5:
66:dd:9d:22:18:df:03:a1:21:ec:c4:7e:e0:f0:f6:42:20:9b:
5f:6f:a5:57:2b:c7:38:f2:c5:40:81:1b:d1:d6:5d:2a:23:e7:
06:65:8e:e6:1c:2f:ae:e8:e0:69:df:d1:60:7e:b3:4f:78:61:
12:50:79:46:07:85:d5:cc:bc:72:27:8d:e3:40:5d:cc:e3:58:
dd:85:08:d3:cd:a6:97:04:54:e0:be:68:d7:be:16:6b:41:61:
7f:49:43:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFp+HAlKOarXaiSrDvMTeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyY2Q5YWRkMTYxMzdlOGJhYjk4ZDc4ZTJhMzM2MGJjOGJk
NmYwZjEwHhcNMjYwMzI2MDMwMTA0WhcNMjYwMzI3MDMwMTA0WjAzMTEwLwYDVQQD
EygzNTFjNjYzZmQwMGYwYWFhMDU1MjQ1MjUzZmVlNGY5M2EwN2I4ZTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH7Uwd9ahSoNKMXZgXsqoOxRf6OO
UfBQKemjNLixQ4OQzAAqEgqNkO5TSD4dW82jASzzCIDC6VakuDwJufcKLUsNEtqg
zaavYtJUCiSuXc3c1g3a2pb5NkJHgo48Zq8Y2KSOf4aRBI6ZP/DZyTmr3//jInq1
KFdXtW81VD6RMXsY8BAOTZYsEWyMjOevoOZDafVdo7Hkdn3160LNLf7EqIAvR9aJ
1oxlQ7CnSQdumlk5qMapZUKgG00CXLXwXUUqhIAWuUzMp+dPJRPPbCJ1heDGesuL
brs9o18a5EviCYS4I0uBTBr/dIbhtl9qc3+hd0/YM43RfLjiHN6cJAd78QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUcZj/QDwqqBVJFJT/uT5Oge44mMB8GA1UdIwQY
MBaAFBLNmt0WE36Lq5jXjiozYLyL1vDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXMyYTNSWVRmb3VybU5lT0tqTmd2SXZXOFBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81N2NjNmUtOGIxYS00ODI3LTk5OWMt
MTcyZGY2YmNkNDViLzEvRXMyYTNSWVRmb3VybU5lT0tqTmd2SXZXOFBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81N2NjNmUtOGIxYS00ODI3LTk5OWMtMTcyZGY2YmNkNDVi
LzEvRXMyYTNSWVRmb3VybU5lT0tqTmd2SXZXOFBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYETwdPJ
60i1wNKP1mreCAihAygeIk1qGbVn4LsLgXs/aZ0yrV2il8LTIXyTAplJ/V9V1TFv
K1FdV3e99dpaWj9yMGg56uKVNElOE985t1PILLZZxOTboH80kZAdMmXZlE5QMiLy
rRHCs3kfb27k4qz6Njb2sIy/QqMUKNmya2rb2sToafqBtxKiACivfNxL4maiKUw/
guXi5GP10OvKSOrlZt2dIhjfA6Eh7MR+4PD2QiCbX2+lVyvHOPLFQIEb0dZdKiPn
BmWO5hwvrujgad/RYH6zT3hhElB5RgeF1cy8cieN40BdzONY3YUI082mlwRU4L5o
174Wa0Fhf0lDxw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:08 2026 by rpki-client