Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/f2fb22-3cac-444a-91d2-2141a8525e11/1/EsXd3Byzz0wva_roWuTlUF0Aqig.mft
File: EsXd3Byzz0wva_roWuTlUF0Aqig.mft (raw, json)
Hash identifier: pmwj/KZ43mD4Sd8pPBlegnEnl2uZc8DGU1mTJKuwoGQ=
Subject key identifier: 09:AB:85:85:65:65:5B:63:D9:93:6E:4E:E6:74:22:5A:52:41:BC:A0
Authority key identifier: 12:C5:DD:DC:1C:B3:CF:4C:2F:6B:FA:E8:5A:E4:E5:50:5D:00:AA:28
Certificate issuer: /CN=12c5dddc1cb3cf4c2f6bfae85ae4e5505d00aa28
Certificate serial: 01A12089F63D41FE41C8D01CEAF1500508F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsXd3Byzz0wva_roWuTlUF0Aqig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f2fb22-3cac-444a-91d2-2141a8525e11/1/EsXd3Byzz0wva_roWuTlUF0Aqig.mft
Manifest number: 3A
Signing time: Fri 09 Oct 2026 12:01:14 +0000
Manifest this update: Fri 09 Oct 2026 12:01:14 +0000
Manifest next update: Sat 10 Oct 2026 12:01:14 +0000
Files and hashes: 1: EsXd3Byzz0wva_roWuTlUF0Aqig.crl (hash: iBTdhHCVXyz1p5Bzbqub2QFieKvGBsL7p+JnqBXyxCA=)
2: rYnIZXP7kictb-ZcjRpbQ2r5CKg.roa (hash: A6WCoJo4mfbbDcrsB3Tt5p2MDahvttbSGUqh5ZGDRXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f2fb22-3cac-444a-91d2-2141a8525e11/1/EsXd3Byzz0wva_roWuTlUF0Aqig.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f2fb22-3cac-444a-91d2-2141a8525e11/1/EsXd3Byzz0wva_roWuTlUF0Aqig.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsXd3Byzz0wva_roWuTlUF0Aqig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:89:f6:3d:41:fe:41:c8:d0:1c:ea:f1:50:05:08:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c5dddc1cb3cf4c2f6bfae85ae4e5505d00aa28
Validity
Not Before: Oct 9 12:01:14 2026 GMT
Not After : Oct 10 12:01:14 2026 GMT
Subject: CN=09ab858565655b63d9936e4ee674225a5241bca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:69:83:6d:20:6b:0c:5b:8d:a4:e2:7c:74:
cb:c4:f3:c7:dd:3c:66:92:df:8e:01:ba:36:95:b0:
b8:12:ef:d4:74:3c:d0:d7:55:9a:00:b2:f3:31:2e:
ae:be:15:cf:31:f1:21:5e:07:aa:76:9c:a5:78:39:
50:31:c8:ef:0a:e1:dd:95:59:f6:e5:b9:da:7f:c6:
73:ea:59:75:a4:0c:31:49:0f:b7:77:0e:27:15:1e:
3c:63:5b:f4:5b:3a:02:fb:ff:8f:9c:5b:16:8f:15:
90:e3:24:9f:17:41:ee:eb:73:eb:d8:c0:90:ae:34:
b3:46:5d:1e:5d:51:ee:42:8b:1c:b0:d2:c5:a1:2c:
94:96:bd:b9:d1:52:76:68:8c:6d:f3:e8:d7:3e:a6:
e3:ca:a7:f9:c0:ed:2f:54:2e:8e:37:35:77:6f:30:
ce:47:be:9c:ba:3a:51:f2:65:51:93:aa:92:38:93:
8e:71:3e:02:a9:b4:c6:87:00:4e:5d:9d:61:46:0c:
3d:42:21:07:c5:ab:34:45:e6:f4:11:25:c6:8c:58:
0b:78:2f:3f:ea:0c:d0:a7:b5:12:86:dc:dd:9c:ea:
4c:13:99:7a:ae:5e:bc:a2:16:e1:45:54:9e:cd:97:
88:09:4c:db:73:8f:af:2b:31:f1:d3:7a:fc:7b:e0:
4c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AB:85:85:65:65:5B:63:D9:93:6E:4E:E6:74:22:5A:52:41:BC:A0
X509v3 Authority Key Identifier:
keyid:12:C5:DD:DC:1C:B3:CF:4C:2F:6B:FA:E8:5A:E4:E5:50:5D:00:AA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsXd3Byzz0wva_roWuTlUF0Aqig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f2fb22-3cac-444a-91d2-2141a8525e11/1/EsXd3Byzz0wva_roWuTlUF0Aqig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f2fb22-3cac-444a-91d2-2141a8525e11/1/EsXd3Byzz0wva_roWuTlUF0Aqig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f3:66:8e:35:ca:a6:d5:8e:62:35:5d:7d:6e:91:af:5a:9d:
d3:5e:30:67:00:55:84:84:8a:f0:c0:28:9c:04:03:3a:f4:44:
8c:88:72:07:a3:1d:b6:ab:93:06:54:c2:90:95:aa:23:1b:02:
97:66:9f:65:00:72:28:37:21:f1:7c:48:a7:f5:0c:18:a6:85:
92:01:b9:75:8e:b7:6d:a3:a4:f9:d5:0a:4d:c9:8a:62:c3:e8:
af:27:b8:a9:53:73:5b:7f:cf:73:a0:70:f8:8c:ee:27:7b:dc:
65:cb:e7:3b:41:1c:51:4a:bd:1d:ef:1b:02:2d:f2:87:45:06:
ba:97:72:fe:cf:e0:8a:2f:64:ed:4a:2b:bc:13:d3:ff:e3:48:
9d:a6:0d:6b:6b:82:d2:b8:44:04:5c:2c:48:7d:ef:42:ec:24:
de:11:16:ac:1b:f7:a8:3a:f5:6b:ba:ce:23:1f:4d:e9:f1:25:
bf:80:4a:98:df:87:99:28:d5:24:0a:c4:d3:1d:4c:d4:1e:96:
f1:a2:f7:9c:35:91:41:1b:3a:f8:5f:f0:83:00:54:6b:7e:7e:
ef:ee:ba:59:b3:75:09:b4:b8:ba:b3:93:30:65:f1:19:9d:b4:
2c:38:db:98:95:55:8b:47:37:73:b3:58:40:1d:5f:e0:44:15:
65:cf:19:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEgifY9Qf5ByNAc6vFQBQj1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYzVkZGRjMWNiM2NmNGMyZjZiZmFlODVhZTRlNTUwNWQw
MGFhMjgwHhcNMjYxMDA5MTIwMTE0WhcNMjYxMDEwMTIwMTE0WjAzMTEwLwYDVQQD
EygwOWFiODU4NTY1NjU1YjYzZDk5MzZlNGVlNjc0MjI1YTUyNDFiY2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaFpg20gawxbjaTifHTLxPPH3Txm
kt+OAbo2lbC4Eu/UdDzQ11WaALLzMS6uvhXPMfEhXgeqdpyleDlQMcjvCuHdlVn2
5bnaf8Zz6ll1pAwxSQ+3dw4nFR48Y1v0WzoC+/+PnFsWjxWQ4ySfF0Hu63Pr2MCQ
rjSzRl0eXVHuQoscsNLFoSyUlr250VJ2aIxt8+jXPqbjyqf5wO0vVC6ONzV3bzDO
R76cujpR8mVRk6qSOJOOcT4CqbTGhwBOXZ1hRgw9QiEHxas0Reb0ESXGjFgLeC8/
6gzQp7UShtzdnOpME5l6rl68ohbhRVSezZeICUzbc4+vKzHx03r8e+BMXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmrhYVlZVtj2ZNuTuZ0IlpSQbygMB8GA1UdIwQY
MBaAFBLF3dwcs89ML2v66Frk5VBdAKooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXNYZDNCeXp6MHd2YV9yb1d1VGxVRjBBcWlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mMmZiMjItM2NhYy00NDRhLTkxZDIt
MjE0MWE4NTI1ZTExLzEvRXNYZDNCeXp6MHd2YV9yb1d1VGxVRjBBcWlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mMmZiMjItM2NhYy00NDRhLTkxZDItMjE0MWE4NTI1ZTEx
LzEvRXNYZDNCeXp6MHd2YV9yb1d1VGxVRjBBcWlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfNmjjXK
ptWOYjVdfW6Rr1qd014wZwBVhISK8MAonAQDOvREjIhyB6MdtquTBlTCkJWqIxsC
l2afZQByKDch8XxIp/UMGKaFkgG5dY63baOk+dUKTcmKYsPorye4qVNzW3/Pc6Bw
+IzuJ3vcZcvnO0EcUUq9He8bAi3yh0UGupdy/s/gii9k7UorvBPT/+NInaYNa2uC
0rhEBFwsSH3vQuwk3hEWrBv3qDr1a7rOIx9N6fElv4BKmN+HmSjVJArE0x1M1B6W
8aL3nDWRQRs6+F/wgwBUa35+7+66WbN1CbS4urOTMGXxGZ20LDjbmJVVi0c3c7NY
QB1f4EQVZc8ZSg==
-----END CERTIFICATE-----
Generated at Fri Oct 9 20:01:48 2026 by rpki-client