Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
File: ES1lq7x-8AUScohER5KrhvsVwu4.mft (raw, json)
Hash identifier: bvPGq1eOgrfduwjUj9fLQuul5Y3EJwkiBKKZXOCG298=
Subject key identifier: DB:C9:78:69:AC:9F:9E:21:60:E1:C1:E6:38:E4:7E:DC:EF:36:BE:49
Authority key identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
Certificate issuer: /CN=112d65abbc7ef005127288444792ab86fb15c2ee
Certificate serial: 019F95493AA8199345D9427EFA07DB5F2E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
Manifest number: 0B4B
Signing time: Fri 24 Jul 2026 18:00:31 +0000
Manifest this update: Fri 24 Jul 2026 18:00:31 +0000
Manifest next update: Sat 25 Jul 2026 18:00:31 +0000
Files and hashes: 1: ES1lq7x-8AUScohER5KrhvsVwu4.crl (hash: yBTF3LnZDtAU3Rt5Ghr+RQbiv2KaDBK6UjC8cnt/9Ns=)
2: NyqJ3HcC-3DqTRjPEZHaf1vVpmk.roa (hash: kzMbI7FhKbCR9OfECdQk1NAYRQo9Ic9dt4s+QetZXtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:3a:a8:19:93:45:d9:42:7e:fa:07:db:5f:2e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d65abbc7ef005127288444792ab86fb15c2ee
Validity
Not Before: Jul 24 18:00:31 2026 GMT
Not After : Jul 25 18:00:31 2026 GMT
Subject: CN=dbc97869ac9f9e2160e1c1e638e47edcef36be49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:76:19:e7:d7:2e:ee:55:d8:12:18:12:44:
5e:18:76:54:94:d2:e1:8a:1f:7f:2a:7b:90:e1:86:
1c:88:a5:ed:73:1c:af:ef:11:1f:c7:7e:b6:55:b6:
1d:2b:f8:40:ba:b9:df:20:06:5a:e8:20:ab:65:6a:
39:60:80:54:1c:04:b8:09:3a:a6:cb:07:5b:73:56:
dc:f7:c4:19:f2:77:43:99:99:fa:2d:1f:35:70:b4:
b2:f7:3a:cd:84:7d:4f:f1:3b:19:c0:93:d9:5e:65:
69:22:d1:e2:52:6a:45:06:79:54:8c:91:cf:94:93:
83:fa:fc:45:64:a7:09:c3:38:83:71:e8:a5:b4:30:
19:3a:e9:27:22:1b:f7:cc:9b:b9:34:21:85:e8:92:
e1:88:87:fe:0a:bd:cd:87:f0:7d:49:41:70:6a:62:
90:f8:05:0f:2c:d1:94:12:b9:f0:91:bb:40:a5:6a:
5a:80:8a:f5:61:3e:c8:5b:7c:5f:86:67:22:bb:26:
52:54:d2:56:08:56:5e:45:e2:4a:eb:f5:a9:63:78:
98:00:28:4b:42:e6:67:e1:c4:df:e7:b7:88:8e:74:
2f:44:b0:f6:20:dc:31:d9:1a:59:06:5a:3a:25:01:
9d:b0:cb:3f:6d:00:26:9e:70:88:78:f9:be:af:a4:
25:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C9:78:69:AC:9F:9E:21:60:E1:C1:E6:38:E4:7E:DC:EF:36:BE:49
X509v3 Authority Key Identifier:
keyid:11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:98:6c:07:0a:13:82:68:63:e9:86:91:6f:a1:51:65:3a:07:
9c:2f:9e:06:49:ec:0c:3d:b2:e9:bb:92:5c:35:39:12:ba:73:
9b:0c:75:49:41:e2:47:49:84:38:6c:6e:85:90:0c:8e:42:1d:
a3:d1:d9:c8:ec:1c:20:e1:1e:8e:56:67:1d:76:bd:f2:9b:aa:
c1:ae:6f:e1:a5:ed:4c:36:de:8f:08:02:7c:06:27:3c:b6:30:
82:f7:d6:80:8b:e9:66:e3:43:ed:69:d9:17:a1:18:1a:9d:bc:
ee:7d:a6:24:d0:2b:41:f1:9c:ad:ad:8a:25:1b:43:3e:5e:17:
84:58:55:fc:83:bd:58:9e:0b:ef:07:58:57:8c:f8:67:ba:f5:
e5:3b:2c:00:59:81:ac:ca:02:63:ff:ab:eb:12:98:6a:40:59:
2f:fb:1a:2b:6d:73:85:6e:01:1f:51:4b:5d:de:21:02:55:5e:
df:56:d7:be:4c:92:9e:ea:8b:7e:47:14:7d:07:ac:dd:21:f8:
34:db:75:00:3d:85:b7:29:47:e8:fa:1f:6e:fb:63:5b:19:df:
11:c0:45:eb:ec:47:b3:bb:82:0d:26:24:42:6a:c9:f7:2e:78:
82:17:03:ef:ef:a5:a8:dd:8a:ba:f1:47:86:3c:0e:01:6f:43:
5f:78:ff:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:07:45 2026 by rpki-client