Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
File: EsShfSBma32NKx_-GKRoevkmIY8.mft (raw, json)
Hash identifier: YA3LT1OKiFBjkVWtjFazVAqzJ8i69AoqwKSieBM/ZXA=
Subject key identifier: 56:46:8D:3E:59:7C:CB:97:6A:36:AD:99:14:4E:FB:1F:0E:41:F9:A2
Authority key identifier: 12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F
Certificate issuer: /CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f
Certificate serial: 019D269619609F635A5755B42FBA44310024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 20:01:04 +0000
Manifest this update: Wed 25 Mar 2026 20:01:04 +0000
Manifest next update: Thu 26 Mar 2026 20:01:04 +0000
Files and hashes: 1: 2SnbqmjRC1mfOLhWvcx2MqiVnBQ.roa (hash: 9wsvsp03KFtWIrs+dsNBw/+Vtj/EYC0hFE8Wh2C75jw=)
2: EsShfSBma32NKx_-GKRoevkmIY8.crl (hash: o2RINRC/UKC7tKeAZzzVwDGiMsxaFPlffz5yAtLsCFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:19:60:9f:63:5a:57:55:b4:2f:ba:44:31:00:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f
Validity
Not Before: Mar 25 20:01:04 2026 GMT
Not After : Mar 26 20:01:04 2026 GMT
Subject: CN=56468d3e597ccb976a36ad99144efb1f0e41f9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:51:0c:aa:51:62:1b:b4:91:ae:e0:86:fb:87:
4e:64:05:39:4c:88:4f:28:85:34:3f:2c:dd:c8:1c:
87:0b:2f:2f:74:8d:43:05:08:d5:46:20:5c:b5:e1:
47:45:6d:76:1f:ca:1b:2c:c7:6d:8d:0c:5c:dd:d5:
17:43:0a:4b:80:1f:1d:85:2b:25:70:d0:6b:8d:39:
65:3f:4a:c1:6d:38:63:f4:85:e7:c4:ae:b5:1c:71:
4e:e5:3e:d9:df:4a:65:59:89:56:77:07:cb:29:19:
e5:8f:e2:d1:70:91:22:0f:71:23:8f:6d:9b:19:ad:
d6:4b:b7:4a:21:b9:a0:b3:f6:18:d5:06:51:1a:9e:
17:1e:83:ff:c8:34:2d:ee:c9:88:e8:d6:c2:ad:06:
ed:74:84:2b:87:72:67:c8:47:22:bd:3f:7d:85:d8:
20:9a:f7:1e:83:2f:35:be:00:e6:88:62:ef:57:42:
4a:e7:80:e7:09:34:77:d4:af:96:0c:35:da:d5:b2:
35:42:42:57:db:d4:36:59:af:95:76:cb:7a:d2:83:
1f:d6:e1:14:d2:6d:7c:4d:9f:ff:56:26:2c:1e:e2:
55:72:28:9a:37:1b:63:65:b5:87:02:e6:7b:74:f5:
d8:37:00:42:f0:d8:7c:fc:80:41:e0:25:dd:f0:64:
34:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:46:8D:3E:59:7C:CB:97:6A:36:AD:99:14:4E:FB:1F:0E:41:F9:A2
X509v3 Authority Key Identifier:
keyid:12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c5:7f:7b:a2:c8:1e:85:20:d7:e4:45:6f:d2:ec:11:87:ae:
fb:f6:95:2a:3e:06:65:5b:c7:3a:c1:8f:90:0a:57:35:22:17:
f9:b7:3b:a0:0b:fb:fb:a4:05:fd:01:31:4d:d8:f2:1f:35:b2:
11:7d:d3:60:a8:0a:af:9b:91:20:3d:46:11:d4:11:66:c1:99:
fa:ab:c5:1e:5d:11:83:cd:7b:c6:4c:25:7b:61:49:0e:19:d4:
20:50:2b:b3:a4:ef:c6:31:90:af:28:c4:4c:d1:de:ac:a8:bd:
1f:d3:2d:ef:5b:57:e6:2e:32:ae:59:c4:86:a5:45:cb:9d:ab:
e3:8a:f6:d6:7f:96:06:fb:87:ad:93:53:2b:0e:c4:08:e3:6f:
41:5f:9b:51:8c:23:37:2e:5a:58:e5:19:8e:89:50:ca:84:77:
02:48:8f:35:f6:16:b2:57:c3:ca:6a:63:26:94:bd:f5:e3:50:
5a:d1:54:f1:81:e3:5e:5c:6e:7b:43:c9:cd:71:ad:86:70:cb:
ae:ff:07:5a:6d:d4:e5:20:7b:bf:f5:ea:98:11:c7:53:03:20:
da:88:9a:bf:a2:bf:ad:0d:99:06:3f:55:17:10:b8:74:55:a6:
29:1b:5a:1b:55:20:0e:64:cf:2f:03:44:98:25:e6:5b:51:6c:
19:e6:e3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:43 2026 by rpki-client