Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
File: EsiJlks1tRuo5eZ5oVsZox8TNXg.mft (raw, json)
Hash identifier: I+6k6lzAp+3TOkCxkkRGIRLb+Gl3DRb1PSCK4ijAP18=
Subject key identifier: 1E:C4:03:EE:0F:4C:0D:89:32:E7:EF:19:F5:E3:8B:26:E6:74:EA:27
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial: 019D2A3C181D0B5FA5B245686E9A1348FAC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 13:01:14 +0000
Manifest this update: Thu 26 Mar 2026 13:01:14 +0000
Manifest next update: Fri 27 Mar 2026 13:01:14 +0000
Files and hashes: 1: 1-75h6Z8XZfpA-J4Xkm8JYxrcW7E.roa (hash: YgoOaQlFbXUdsZx8u8PNBd2uQHXrr/r+JgEvwggSZDA=)
2: 1-kxJVrZkUbclMp6kSpvfNZEt1VM.roa (hash: sllzVYP/WiMPElY3BFy/EfBmKfiCPi4PRAGGrxfDP7g=)
3: 6LKvF_6ld6s3n--fTX7f7BK_ehc.roa (hash: /eEnxWv6EmUP6K8zfowjl8E4hGLa0C38VlYeIpY/h7w=)
4: EsiJlks1tRuo5eZ5oVsZox8TNXg.crl (hash: V3pzQRtXGKidU8yokE3vcunbZ/0OE6C+YZYRRgHaJhg=)
5: GHJyTF0ORoaY9AckOmArWob3_HY.roa (hash: uI00sPFgBL2eDPBgh7Ys5Cfku0oem0hVhkVJpAs4CZg=)
6: QzNYXaK9Heg5iwI0_fdSvPsjX10.roa (hash: 7DicMrMZcYWPra55/EcMga9qpWnVA1JBNRCO/E/beAo=)
7: vsAEpL5w14p4gOY7B1dWMsDjDJI.roa (hash: ULT4TLN8aqk2Vz6VZZi8pMSOHDlIrdLD0OUPI10LgY0=)
8: wsgq7r0bmgVuGnMWeJq55bfKJ_U.roa (hash: TZU5rVeqp7nDnIs3V8dsH2Vbd18ixFe0rwWSFe7vxYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:18:1d:0b:5f:a5:b2:45:68:6e:9a:13:48:fa:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Validity
Not Before: Mar 26 13:01:14 2026 GMT
Not After : Mar 27 13:01:14 2026 GMT
Subject: CN=1ec403ee0f4c0d8932e7ef19f5e38b26e674ea27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2c:f9:c6:f0:bf:9f:06:bc:8b:f6:5e:9e:96:
56:b6:c8:27:df:64:b2:40:01:31:4d:a0:ff:fc:e1:
3a:d0:d9:3e:42:c6:4c:b5:e6:25:70:17:6a:f7:e5:
85:c0:1c:f9:e5:23:58:45:41:82:12:52:d4:06:fa:
7c:0c:f3:db:c6:67:cb:b9:be:d9:43:6a:58:af:ba:
d4:f8:90:43:42:07:d0:9f:55:62:b7:74:00:d9:21:
c3:fa:27:ef:ca:6a:2a:44:01:aa:84:06:37:5c:11:
1e:16:8c:4b:a7:ec:d8:86:08:2d:f3:6c:45:af:55:
f4:82:60:6e:f3:35:87:0a:4f:e6:ad:e6:6a:eb:0f:
4b:c1:aa:0c:64:1b:8b:11:9e:80:9f:0c:4c:e5:99:
d4:34:94:3e:fc:d7:78:c2:7c:ee:4d:92:bc:f5:b7:
90:ac:46:10:ba:8f:97:15:b1:ec:ad:99:52:59:cd:
b7:0a:52:21:3d:4a:31:c1:3f:d0:9e:e4:1b:e2:d7:
14:44:fd:7f:b3:dc:9a:da:99:dd:63:3b:c6:3f:9f:
22:2f:3c:41:a0:c4:5a:90:7d:86:d3:1f:bf:b0:f3:
f7:97:8b:27:6f:25:7e:1b:f6:81:d4:16:4d:91:5d:
e5:0a:e3:c4:2c:11:94:b5:f2:37:2b:6e:f8:d4:ed:
d1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C4:03:EE:0F:4C:0D:89:32:E7:EF:19:F5:E3:8B:26:E6:74:EA:27
X509v3 Authority Key Identifier:
keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f9:48:50:70:90:e7:12:70:d8:b1:08:33:ac:a5:f3:4d:27:
09:f5:a3:c1:4f:e3:af:f9:e0:e8:78:b7:11:c6:f7:a1:f6:ed:
ce:78:86:b7:dd:cd:0e:02:40:b9:9c:06:21:d1:fe:74:21:33:
fe:0e:dc:f2:8e:f5:09:bc:2b:b2:de:31:d8:2d:0b:2d:d1:14:
15:34:c9:13:a7:bb:14:59:e9:c3:13:7e:59:08:07:2c:a4:8e:
86:7c:2c:f7:01:13:24:41:18:65:70:e9:c7:d3:28:75:35:71:
dd:d1:f1:c2:88:aa:70:7e:e8:f6:b2:78:80:9e:13:a3:bd:ca:
81:d3:79:21:41:9b:f8:3b:dc:e0:68:4b:dd:25:0f:aa:b0:c8:
60:80:32:6f:8e:2c:c4:5a:cd:da:3b:56:7e:53:1b:f3:ec:69:
ac:39:ca:ff:c4:5a:96:6f:bc:d3:3d:58:29:95:24:77:f3:9b:
f4:2e:af:9c:29:2a:51:44:e4:69:9c:0d:12:e9:98:9b:40:0b:
12:5f:1d:43:45:b1:21:28:ef:59:c7:30:8d:7d:52:95:2d:cc:
db:68:55:82:00:a7:de:d0:b1:e0:af:0d:8d:1b:78:64:d9:7d:
bb:18:78:80:ad:a9:bf:01:15:a9:2d:a9:1c:aa:17:75:11:28:
ff:f3:39:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:13:50 2026 by rpki-client