Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
File: Es84yOexki9uvz_TQHNc2wQjFBg.mft (raw, json)
Hash identifier: M2G9EEPJsZWI0Mej2xZKNR3zgppzcwMI/ZZGqbIAZsw=
Subject key identifier: C6:40:6C:BA:A5:91:9B:EA:AC:6C:5C:8E:14:5C:AC:D0:1F:84:AB:F7
Authority key identifier: 12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
Certificate issuer: /CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Certificate serial: 019D284DD70341D29CC393006B63D63D73BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 04:01:23 +0000
Manifest this update: Thu 26 Mar 2026 04:01:23 +0000
Manifest next update: Fri 27 Mar 2026 04:01:23 +0000
Files and hashes: 1: Es84yOexki9uvz_TQHNc2wQjFBg.crl (hash: 6nZPDMYkHH1LQ+KIJejuiXyBSyr42T3GEpYVQa0xUj4=)
2: d77IWbkczkICwfpVT1sRhf7rXjA.roa (hash: zbuTl//ldlxEHT4wWa1vNyL5/cZHH2/ZJ1uuYflyQnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:d7:03:41:d2:9c:c3:93:00:6b:63:d6:3d:73:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Validity
Not Before: Mar 26 04:01:23 2026 GMT
Not After : Mar 27 04:01:23 2026 GMT
Subject: CN=c6406cbaa5919beaac6c5c8e145cacd01f84abf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:97:9c:2d:16:ff:6e:9b:2c:a1:a7:18:bc:
79:5a:ed:d7:de:e4:32:c1:24:4a:e2:10:79:58:ed:
49:a2:54:1e:fe:22:00:ce:6d:b7:75:e3:19:66:7f:
4b:eb:65:e8:d5:78:e0:64:0d:af:cf:1c:6e:b3:94:
49:e7:20:eb:54:0a:3f:6f:49:4d:93:7e:a7:12:64:
aa:89:85:f8:96:64:91:9f:8a:2e:8e:a8:ff:af:2a:
db:2c:7d:8e:1a:aa:cf:1d:01:9c:68:07:10:0b:4c:
58:17:5b:7b:a6:bc:da:77:03:9f:d5:bd:e3:8e:7d:
97:af:7c:38:99:71:ab:cb:d4:7e:f4:de:47:af:aa:
99:fe:96:7b:3f:43:e3:b8:10:4a:f8:61:fd:87:95:
a3:a5:00:eb:25:0a:0a:1a:fd:73:f2:d7:72:a8:80:
85:94:0b:6c:7c:3a:9e:bc:5d:cf:62:2b:16:92:27:
5c:d0:5a:30:82:db:48:0e:6b:e3:f9:5a:cf:0f:a9:
0e:8c:38:0a:a6:3b:a0:05:5a:12:f8:3e:73:f9:71:
1d:71:e7:87:20:ba:68:b2:49:bc:38:38:31:f4:79:
bb:e9:7a:24:b7:94:e4:17:60:c0:33:25:11:a8:b4:
74:9b:18:55:7d:6b:3c:24:86:84:7b:6e:6d:e4:a4:
cc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:40:6C:BA:A5:91:9B:EA:AC:6C:5C:8E:14:5C:AC:D0:1F:84:AB:F7
X509v3 Authority Key Identifier:
keyid:12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f7:25:44:d8:44:96:f2:8e:8d:7d:92:10:06:b7:60:e1:75:
1a:51:7e:41:b0:51:27:88:45:64:df:60:6d:a7:21:67:36:cd:
2c:f8:da:f4:2d:9d:70:c8:9a:54:bc:f8:4c:6d:fb:c3:02:dd:
a9:3c:06:9e:c8:ef:d2:18:25:0c:df:9e:fd:94:5a:7d:1e:f9:
c7:df:dc:39:13:13:d1:d1:14:d2:49:d9:19:0b:b8:e1:07:69:
37:8e:ab:ad:7e:9f:e2:7e:25:60:b8:6d:3f:7a:ff:05:14:6b:
c1:6f:1f:31:cb:52:41:53:e5:25:fd:ce:3b:93:b4:2b:14:13:
40:4f:d7:06:dc:65:47:8e:1c:7c:88:06:87:76:94:65:e5:0d:
0d:2f:2b:a5:53:be:f7:94:70:b2:8c:6d:ba:fe:36:37:f8:2c:
5c:77:1c:f4:d9:f2:f1:c0:51:12:e3:7a:1c:7f:8e:82:1e:d3:
01:94:31:06:d8:78:5a:ae:f8:51:17:7b:92:82:ca:81:05:be:
31:3f:c0:f5:b2:bb:5f:0f:15:a9:42:1d:d5:8e:66:ed:28:e3:
2d:23:d1:9d:6b:57:f7:62:7b:35:65:39:39:ef:99:e1:f3:4c:
6c:f4:8c:e8:0c:5d:64:94:b3:9c:1f:cd:80:74:e8:8c:9a:b6:
f1:47:75:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:02 2026 by rpki-client