Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
File: ESmtAUBy3mYXQ4-xr75BotvcgRw.mft (raw, json)
Hash identifier: xKnu/n1pHFfl77+zO6EekrTDTq+5ObykCMMKgOO9H8A=
Subject key identifier: 7E:53:4A:7C:95:0F:77:9C:8D:41:2E:EE:BC:B1:50:4D:B6:B4:38:FE
Authority key identifier: 11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
Certificate issuer: /CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Certificate serial: 019D2771D46CCB8D583B6D715A9AC22A2801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
Manifest number: 1034
Signing time: Thu 26 Mar 2026 00:01:04 +0000
Manifest this update: Thu 26 Mar 2026 00:01:04 +0000
Manifest next update: Fri 27 Mar 2026 00:01:04 +0000
Files and hashes: 1: ESmtAUBy3mYXQ4-xr75BotvcgRw.crl (hash: qZPUkwN75KNxxNAgjIqATIMhfHyeG/6qCRt1CCniNbc=)
2: yOU3uduoN5dP8e-jmAjD8aQwrlU.roa (hash: O6bQWgeJySRYDkrf9DCbKR1ZNlkw4pe8n+wuoJJY0+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:d4:6c:cb:8d:58:3b:6d:71:5a:9a:c2:2a:28:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Validity
Not Before: Mar 26 00:01:04 2026 GMT
Not After : Mar 27 00:01:04 2026 GMT
Subject: CN=7e534a7c950f779c8d412eeebcb1504db6b438fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:ed:bb:3b:a5:f8:4d:8b:0c:dd:11:94:17:
58:62:4e:50:1a:88:cf:9f:b9:3a:d8:98:bf:7d:3e:
a7:a9:2a:50:ef:74:9a:16:4e:62:de:b3:1c:d8:b6:
94:43:bb:0c:1d:61:92:1a:68:51:13:ee:6c:bf:98:
7b:d4:bd:35:b7:3f:a1:38:62:8c:5f:87:f7:ab:07:
e7:c3:2b:ba:c9:ca:a5:4b:05:32:64:c0:1f:3c:88:
de:58:e1:85:dd:5b:e6:88:0b:93:ef:b8:62:f6:91:
bd:e9:da:1f:82:fc:c2:73:a9:d2:fd:94:46:86:fe:
bd:08:4d:e2:78:33:96:84:e9:12:dc:8b:aa:88:b3:
46:3f:a0:9b:a5:79:bc:25:b7:ca:02:15:6b:1e:82:
39:46:82:5e:30:c4:ef:e8:08:d3:39:e3:bc:4d:ae:
b3:c0:b2:cc:bd:13:13:dd:36:14:12:04:7f:01:0e:
8e:60:ad:fb:78:43:3c:49:02:91:09:99:a3:96:c8:
c6:8e:4e:fe:3d:b1:30:45:35:2d:7d:aa:6d:26:66:
78:84:18:55:9e:88:5f:54:71:81:b2:5a:06:5e:0f:
d8:2c:81:78:1c:9a:48:23:21:82:ff:c2:97:65:39:
72:03:eb:0b:49:34:44:ba:0b:de:0c:92:cf:4d:9d:
f3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:53:4A:7C:95:0F:77:9C:8D:41:2E:EE:BC:B1:50:4D:B6:B4:38:FE
X509v3 Authority Key Identifier:
keyid:11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2f:44:13:b3:31:a6:77:fd:ca:5e:e2:64:59:4e:46:d8:a2:
5e:ec:96:68:ff:e9:34:d1:60:f0:cd:2b:71:dc:2d:b1:09:5d:
e3:b3:5b:e4:f4:92:12:be:29:53:6b:52:73:df:7e:81:4f:a0:
0b:09:ce:8f:7b:ab:69:35:87:a3:9a:90:59:fc:6c:f8:c6:84:
fb:bf:73:0e:82:5e:c3:7d:ad:ef:59:63:ae:72:76:47:89:94:
d5:4b:b0:15:3c:00:e7:ff:ad:79:1a:d7:d0:43:34:21:6b:b2:
f8:a5:a1:54:1c:27:9c:d7:78:e4:33:8f:3d:db:cb:21:30:8f:
eb:e9:42:33:e0:4f:b2:ed:f1:77:c4:9e:57:57:1c:91:e1:a9:
00:9d:91:b5:63:16:a7:c6:da:a7:84:ff:c6:9c:27:21:71:5f:
02:91:9e:f8:96:a4:19:f5:0a:76:3d:96:f4:18:c7:9e:47:d2:
80:52:3a:7c:32:b7:0b:2c:61:ed:97:91:1a:65:01:14:5f:e4:
dd:3b:8c:c6:86:85:4f:e3:0f:eb:59:ae:85:13:1f:5c:08:22:
3c:ab:cc:be:98:01:4d:3c:a9:58:0e:a0:6b:08:ab:3e:cf:7b:
0f:59:b8:f0:c0:3a:08:d2:ce:06:fc:4d:b0:d1:5c:f1:da:e5:
7d:e6:e5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:32 2026 by rpki-client