Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
File: ES1lq7x-8AUScohER5KrhvsVwu4.mft (raw, json)
Hash identifier: BNRSw/CbDrmacxk8DA3e6JNSfyLO2uUwDsJFzIoEy4Q=
Subject key identifier: FF:72:47:12:F8:72:1B:BB:09:9C:AC:68:7E:CF:86:26:A8:C6:E9:CC
Authority key identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
Certificate issuer: /CN=112d65abbc7ef005127288444792ab86fb15c2ee
Certificate serial: 019F83E7CB8AA34B5021B9AD802DAEF8F967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
Manifest number: 0B42
Signing time: Tue 21 Jul 2026 09:00:33 +0000
Manifest this update: Tue 21 Jul 2026 09:00:33 +0000
Manifest next update: Wed 22 Jul 2026 09:00:33 +0000
Files and hashes: 1: ES1lq7x-8AUScohER5KrhvsVwu4.crl (hash: v7OPpZuMtxHK5DnpwLdcUrrcYsHwGwh4JWCNn1eGIu8=)
2: NyqJ3HcC-3DqTRjPEZHaf1vVpmk.roa (hash: kzMbI7FhKbCR9OfECdQk1NAYRQo9Ic9dt4s+QetZXtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:e7:cb:8a:a3:4b:50:21:b9:ad:80:2d:ae:f8:f9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d65abbc7ef005127288444792ab86fb15c2ee
Validity
Not Before: Jul 21 09:00:33 2026 GMT
Not After : Jul 22 09:00:33 2026 GMT
Subject: CN=ff724712f8721bbb099cac687ecf8626a8c6e9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8f:c4:5e:4d:2c:9e:7a:6f:fa:8b:a0:89:1e:
eb:e5:f3:5a:2f:3b:d6:d0:7b:48:d6:8c:c5:f7:3e:
9f:ea:4f:f7:47:b0:47:12:5f:63:6d:ac:8b:0d:45:
00:2b:ea:98:29:61:d2:68:28:88:93:35:1d:74:4a:
04:b1:99:e6:7c:8a:50:f2:21:89:30:77:32:58:a1:
bb:7f:93:7d:03:3f:b1:8c:8d:7d:3c:e0:53:6c:71:
51:d9:09:71:70:f8:6c:d2:1c:ee:88:73:43:b1:82:
0f:54:59:80:25:be:88:7a:40:40:a6:67:b9:ae:de:
6b:fb:7f:c8:fa:5d:33:0c:f6:68:80:2b:c7:66:a0:
16:8d:4a:45:6f:94:aa:27:9d:d4:2a:17:00:80:cc:
09:89:1b:1e:9a:a5:8b:95:3b:d6:62:36:87:3b:58:
e9:af:f6:bc:fa:53:60:7a:8a:d2:ec:2d:59:e7:48:
aa:41:9e:b1:70:ea:52:ed:85:98:8d:58:b6:f9:82:
cb:dd:1c:24:55:af:14:a1:f4:3a:52:7c:a5:3f:4b:
63:46:b6:4a:f5:69:f9:d7:54:ea:a9:89:d0:f3:f1:
38:ff:31:b9:44:2a:05:ec:c7:81:57:37:82:70:a1:
e4:38:92:d9:80:9d:ae:f1:e5:20:af:f1:20:ac:e6:
c7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:72:47:12:F8:72:1B:BB:09:9C:AC:68:7E:CF:86:26:A8:C6:E9:CC
X509v3 Authority Key Identifier:
keyid:11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:32:60:60:af:f8:cb:6f:28:ce:b2:6a:6a:9f:76:6e:d9:31:
03:90:03:98:31:56:90:92:ff:16:71:e0:03:66:2e:9f:d2:d3:
4d:c6:3f:81:96:b5:af:2a:52:ad:fd:15:31:07:20:94:14:04:
60:b6:c8:c2:71:e8:30:bd:cc:ec:3c:de:6e:fd:ee:22:22:7e:
9b:84:0e:a9:93:0d:47:fd:c3:1e:3d:2d:a4:d0:3b:22:79:e0:
dc:49:fd:06:28:32:93:82:55:85:d7:9d:e7:7e:e9:3a:86:6b:
1e:41:5e:09:5f:43:4c:61:b7:12:6f:40:bd:7e:8e:55:f3:32:
53:ae:b3:a2:ce:f9:d1:e0:d7:ce:80:97:5e:1c:0f:9d:1c:5c:
29:af:b7:02:e5:91:55:56:19:4f:c5:6b:8f:ab:56:74:96:88:
b9:72:11:6c:dc:26:20:92:06:cf:21:34:2b:dd:f0:4e:d7:16:
98:9e:4f:50:dd:84:fa:ef:24:28:50:bd:68:4a:dd:5e:01:f4:
5a:33:dc:b8:9f:da:8b:1d:04:28:ed:be:1e:b1:db:0e:89:78:
48:67:bb:37:c8:e1:e4:ca:ce:b2:a1:fc:e7:7f:d9:0b:9c:6c:
55:a3:03:18:9a:88:99:19:0d:bc:b7:d9:76:aa:01:97:2a:66:
0c:7c:26:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:37:25 2026 by rpki-client