Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
File: EsRb041L3Gjj153gJE3wbS7LZgk.mft (raw, json)
Hash identifier: HOxJc5OvAXj8yQIpvv8XhkdnFqQBwE1kqLMkcewCOSA=
Subject key identifier: 5C:A4:2D:9A:1B:4C:98:31:DF:B8:BD:DA:D4:09:15:9A:B0:C6:AD:05
Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
Certificate issuer: /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Certificate serial: 019D29CEA330D40CDD078C25AA6B0CCE8647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
Manifest number: 13EE
Signing time: Thu 26 Mar 2026 11:01:41 +0000
Manifest this update: Thu 26 Mar 2026 11:01:41 +0000
Manifest next update: Fri 27 Mar 2026 11:01:41 +0000
Files and hashes: 1: EsRb041L3Gjj153gJE3wbS7LZgk.crl (hash: lEbGL14k0WzrPeZoRPS6GImvRJVIHIpsy9Bv6RnBSQg=)
2: _1gDjO3zyeb5ku_j0UHNCnoUFl4.roa (hash: rM83OC0RM5ILeCqPDY5cHlMlGdSPagD0ddTyBgkH61k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:a3:30:d4:0c:dd:07:8c:25:aa:6b:0c:ce:86:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Validity
Not Before: Mar 26 11:01:41 2026 GMT
Not After : Mar 27 11:01:41 2026 GMT
Subject: CN=5ca42d9a1b4c9831dfb8bddad409159ab0c6ad05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:73:b9:5c:be:08:69:aa:56:fc:6e:95:26:86:
8a:b3:ba:61:0a:be:c1:0d:ee:ca:db:d5:38:cb:67:
98:ac:e5:4e:f1:2d:5b:27:fc:93:6c:6c:80:d4:b8:
95:99:ca:e5:54:ab:21:a0:93:47:1e:51:dc:b8:15:
b3:2f:9e:15:91:79:cf:c2:26:7f:28:00:db:09:a7:
42:70:31:15:23:7b:70:e6:05:b1:c4:e4:54:1f:11:
cb:ed:67:9a:8a:52:3c:b8:10:1c:13:3e:97:44:2e:
46:41:60:e9:cc:fa:45:39:9e:66:a8:2b:69:ff:70:
08:b2:ad:a9:77:d2:0e:ea:89:78:94:29:5e:65:e8:
69:1e:c6:c6:59:bd:a3:6e:20:c2:88:22:1d:5e:68:
0d:9b:9a:45:24:16:5b:9f:92:b7:79:63:b6:a5:da:
81:99:98:d1:7b:4b:c2:5e:40:f8:45:71:cc:7f:7d:
57:19:43:eb:20:5c:16:1d:37:97:b6:00:ce:53:08:
b5:be:65:c2:bb:f4:fc:77:ee:9e:e9:06:57:52:8e:
f3:17:ba:38:15:07:67:70:e1:ae:18:24:c6:22:d4:
a2:78:ef:d2:4c:6f:51:57:0b:60:3b:88:0f:84:92:
ac:07:96:23:d2:8b:ce:4e:b6:2f:e4:7e:a2:81:8c:
45:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A4:2D:9A:1B:4C:98:31:DF:B8:BD:DA:D4:09:15:9A:B0:C6:AD:05
X509v3 Authority Key Identifier:
keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:27:2a:61:8d:59:4e:15:8b:12:7d:fd:8b:be:37:4f:53:e1:
93:b0:50:38:43:5d:04:13:fc:a5:2f:97:3a:fd:4f:39:33:88:
f6:9e:35:5e:28:48:f5:dc:b3:e4:16:7d:24:20:a8:7f:09:71:
bf:71:bb:2a:db:93:b1:40:b2:bc:e3:96:b2:c3:c0:0b:af:b2:
af:b9:a2:ec:3b:64:99:2a:89:02:f0:9a:1b:53:db:54:47:c6:
86:02:63:5b:2a:4b:4a:4d:6b:d5:58:42:12:05:0d:d5:97:f2:
b1:a6:2d:47:21:e9:11:2b:87:aa:24:92:1a:48:c5:59:15:7e:
7b:b1:c8:41:72:c5:c1:db:bf:92:fe:76:fc:d6:d9:a0:2c:c8:
e7:36:dc:3e:e5:38:b9:63:89:dd:32:29:8d:4b:b1:23:4a:30:
d3:f7:49:dc:81:a0:bb:f0:75:74:39:80:cd:d0:c6:da:40:f7:
33:bf:ac:f5:8c:d4:37:3b:f4:81:70:e3:69:ce:c9:d9:a4:b6:
c8:3d:a8:75:1e:6b:92:41:16:94:fa:7f:a2:8f:05:5b:08:a4:
c5:84:86:2d:60:5e:15:96:99:08:27:77:0b:70:f8:ab:87:af:
58:55:9a:22:29:7b:3f:bc:a7:a0:d0:ca:cf:f4:c9:99:88:d5:
55:2d:9f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:30:12 2026 by rpki-client