Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
File: EsMFQE6AtaTXDSHauG_FtrgBqLg.mft (raw, json)
Hash identifier: pvVUf884tsKN+cRYYg5HMlFMqpAhtO9aJ3OmSQodHCA=
Subject key identifier: 20:9F:E7:3E:95:70:6F:E5:81:D9:D6:AF:C1:0F:59:D9:0D:A8:E3:E5
Authority key identifier: 12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8
Certificate issuer: /CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8
Certificate serial: 019D29CE40F32CE76F6C0BAE048E204536F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 11:01:16 +0000
Manifest this update: Thu 26 Mar 2026 11:01:16 +0000
Manifest next update: Fri 27 Mar 2026 11:01:16 +0000
Files and hashes: 1: 3nfvY0I0VrbwO32y2-kd0ubWfRg.roa (hash: f5ve+22gvtdJ/a/eB+O5WK4SdRb1WOcwjSGFSIVWpT4=)
2: EsMFQE6AtaTXDSHauG_FtrgBqLg.crl (hash: HmfHwAcIhZHHAk6WxlNOKhbkx1wbfu9w58nKqCze58A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:40:f3:2c:e7:6f:6c:0b:ae:04:8e:20:45:36:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8
Validity
Not Before: Mar 26 11:01:16 2026 GMT
Not After : Mar 27 11:01:16 2026 GMT
Subject: CN=209fe73e95706fe581d9d6afc10f59d90da8e3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:65:39:8a:71:1c:14:99:a4:2b:5a:1a:55:00:
99:31:d7:ca:70:0b:05:10:b0:f2:80:78:3b:bd:34:
72:18:92:ab:54:b2:1a:cd:a8:e2:0b:e9:d4:39:78:
fe:b5:ca:1c:21:17:64:80:de:a0:be:ba:ee:3f:d4:
8b:5b:fc:46:36:bb:91:85:6a:ea:de:61:7e:c6:e0:
6a:b4:6d:72:e7:d1:1d:d8:7a:7f:92:58:f3:4a:d3:
a2:18:69:7a:0e:87:30:bd:85:01:5b:74:11:4f:31:
ca:0a:78:e0:17:71:5c:00:c5:b7:1a:7d:a3:1c:4e:
bc:be:fc:e3:70:23:94:db:25:5e:62:d7:f1:e3:37:
30:2d:d9:16:e8:bc:6d:8c:00:16:34:07:a4:45:f2:
01:27:59:61:6f:eb:86:96:39:b6:e9:41:ce:93:fa:
84:86:49:d7:65:8f:49:db:7c:ac:50:00:10:39:70:
31:8f:1d:25:78:0b:af:cc:26:54:27:30:5e:df:47:
60:ee:7f:75:fe:2d:37:8d:e1:6c:78:3f:db:4b:b8:
9b:79:ae:97:c4:e2:02:03:93:97:13:18:76:7c:18:
c5:cd:68:c7:63:17:65:a1:18:0b:2c:45:e1:3d:54:
47:58:2d:e4:38:24:b0:dc:53:47:36:62:98:0f:81:
f6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9F:E7:3E:95:70:6F:E5:81:D9:D6:AF:C1:0F:59:D9:0D:A8:E3:E5
X509v3 Authority Key Identifier:
keyid:12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:58:5a:71:fa:03:13:f5:3a:f8:ac:c2:a8:cb:a4:4b:76:38:
eb:d7:a2:30:e0:d6:e6:06:ad:9e:a9:65:0b:48:23:0b:9e:cf:
d7:f8:a2:5a:3e:45:a8:e8:e0:e2:7a:b5:4d:a6:d8:dd:59:f6:
b6:54:75:df:37:34:49:2a:04:85:15:d7:79:68:0f:50:98:f6:
07:4a:86:09:c1:82:c5:0b:d3:82:16:67:43:0a:4e:89:0b:7b:
38:65:87:c6:87:ac:cd:f3:e2:03:cb:9d:7f:24:94:2f:9d:e5:
27:e2:ea:96:02:3e:7f:5a:ac:98:5e:6a:6f:88:2a:1f:7d:88:
c3:09:d4:cc:ef:52:f5:d7:b4:4e:57:6a:1a:36:10:92:60:0b:
aa:1b:08:32:36:b6:4a:98:44:79:d4:b2:67:76:91:6c:cd:4b:
c9:a2:7c:73:e5:5e:e5:9e:ef:23:8b:a5:be:70:0c:13:a6:06:
29:61:ea:48:e9:1e:1c:c8:5c:b8:22:99:ae:35:2d:9b:91:46:
a9:65:a4:aa:2a:a3:84:df:09:42:63:8a:5a:f2:fa:ac:6a:35:
08:9b:27:a4:34:eb:4c:9f:f3:20:c3:3c:f4:ef:02:28:09:c8:
2c:e6:85:14:39:06:5c:fa:51:a9:f2:8c:cc:98:41:b3:2f:4a:
20:27:0d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:40:32 2026 by rpki-client