Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
File: sEsc31Bs5emTfnf4Jj7PbdslWwU.mft (raw, json)
Hash identifier: hTseEEHxpdiMR3kNx7WGxDI7ovtpTzXGhLMXSf7/B3Q=
Subject key identifier: 46:14:26:5C:FF:31:0B:C5:A7:52:21:6C:6D:9C:E8:9E:30:FF:9D:61
Authority key identifier: B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
Certificate issuer: /CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Certificate serial: 019D382E488CE93B07A5B8DF4DB9B73C1F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
Manifest number: 16EB
Signing time: Sun 29 Mar 2026 06:00:50 +0000
Manifest this update: Sun 29 Mar 2026 06:00:50 +0000
Manifest next update: Mon 30 Mar 2026 06:00:50 +0000
Files and hashes: 1: cMQiZnAEZAcj3C0lkcgvF6RD5y8.roa (hash: 42uo0Cj9Z9TNuXBZG2n2ywXXuk81qWLkR5LdFIJRmv0=)
2: sEsc31Bs5emTfnf4Jj7PbdslWwU.crl (hash: 8pz5MKz/sgyf/jV3rY1DWxplT9XMQcadMD34XDG7Urs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:48:8c:e9:3b:07:a5:b8:df:4d:b9:b7:3c:1f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Validity
Not Before: Mar 29 06:00:50 2026 GMT
Not After : Mar 30 06:00:50 2026 GMT
Subject: CN=4614265cff310bc5a752216c6d9ce89e30ff9d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:0d:dd:62:c7:c6:d5:73:3b:79:37:de:c4:
e3:e2:a6:de:aa:c8:11:f0:20:c3:49:b4:34:5f:63:
56:f0:50:9a:99:bf:db:46:6e:7f:9f:ad:dd:16:f3:
47:65:9e:58:31:e9:f2:05:e9:2c:8a:19:3a:be:4a:
bb:01:9e:df:bf:90:10:f9:0b:3c:bc:de:a6:92:6d:
c7:2a:32:63:91:ef:e1:87:63:1c:b9:2e:7b:e2:6b:
92:e9:83:82:c5:fe:76:3a:17:8a:1f:dc:1c:01:d0:
c6:cc:43:4d:e6:53:cc:ef:fc:33:ba:60:f7:40:9e:
09:19:1e:ed:0e:79:0c:eb:c8:16:eb:ee:2d:77:5c:
48:6a:94:96:5f:50:b4:b4:d5:77:b4:66:fb:5c:7e:
89:b4:10:a3:b2:12:30:ee:42:b9:8f:a9:f9:b5:27:
31:5e:66:f5:00:30:e2:33:16:1d:f8:52:a3:66:04:
92:55:3c:2e:ee:64:39:a9:cd:3e:f2:d3:66:bb:9b:
69:11:37:5a:9e:0a:1a:13:73:23:15:cc:ee:b2:d5:
b4:a9:ec:df:59:04:89:4f:c9:5e:f2:87:aa:cf:73:
bd:3f:48:f2:7d:15:97:df:a3:ae:8c:12:cd:4d:1c:
0f:47:40:80:bd:ef:97:5f:dd:9d:fa:90:9a:9d:69:
b1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:14:26:5C:FF:31:0B:C5:A7:52:21:6C:6D:9C:E8:9E:30:FF:9D:61
X509v3 Authority Key Identifier:
keyid:B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4d:c3:57:63:4a:62:df:4c:72:0a:c7:76:5b:c9:19:38:17:
b9:47:0d:96:01:38:02:29:7f:ff:5b:ef:58:f8:f2:58:6c:85:
a1:90:20:3f:c5:1b:10:cc:6e:a9:0c:07:ef:5c:ae:91:ae:5f:
b4:29:21:9e:15:1c:ad:c8:ff:53:a2:b1:01:89:c0:a6:8f:26:
e8:b3:e2:0c:0d:34:82:64:47:39:ee:e4:62:e3:70:f5:ae:63:
20:a7:ee:de:50:d0:37:1c:a7:8b:37:c1:a6:ba:3c:70:04:cf:
5a:b0:ac:3c:a1:99:54:47:70:54:e0:6a:80:42:af:06:e6:0b:
b8:48:f1:a6:8c:1f:96:be:9c:a1:55:1b:30:d8:d0:3d:f2:a9:
30:6e:bd:3b:73:5d:d8:fd:93:25:c9:56:0e:0e:b6:e1:0d:bf:
43:08:25:d2:b4:5f:d2:a0:c9:45:4d:47:1a:35:2f:7f:4e:f3:
cd:a4:e1:9c:ed:35:cd:9d:6c:b0:ca:a1:db:24:12:ae:45:1f:
a3:db:84:b6:c0:eb:e9:aa:a8:67:2b:2e:9d:4e:cc:d0:16:c3:
f2:57:06:99:11:70:c2:39:e5:74:53:64:b5:aa:81:5d:ab:82:
a0:15:3e:5f:b6:26:b4:71:c9:ae:02:5c:5e:e1:d9:95:41:5f:
79:2e:29:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:43 2026 by rpki-client