Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
File: ESunl1d-pgpWGvmkWYxFBg47cIg.mft (raw, json)
Hash identifier: 8dhaxtcrB7mK17Gjh7Ou1N/uOkeGuqNsJ0Ibuk3YxMs=
Subject key identifier: DD:4A:40:BD:43:75:84:C9:3B:57:F7:CB:65:4A:08:7F:56:FF:69:FF
Authority key identifier: 11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
Certificate issuer: /CN=112ba797577ea60a561af9a4598c45060e3b7088
Certificate serial: 019F18307F457A3FD8E38AFEB32914F0CF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
Manifest number: 1990
Signing time: Tue 30 Jun 2026 11:00:59 +0000
Manifest this update: Tue 30 Jun 2026 11:00:59 +0000
Manifest next update: Wed 01 Jul 2026 11:00:59 +0000
Files and hashes: 1: ESunl1d-pgpWGvmkWYxFBg47cIg.crl (hash: /WOYBlOmRokcsdHZRs9v37GWZ9kwuZJRlLxBsveXgAY=)
2: bMsWuNjJeP6phBVhg103vHZmDa0.roa (hash: s0x48DlOykKpKhvQQl3SddYhoNO1CHyfuX31p3oQ2Xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:7f:45:7a:3f:d8:e3:8a:fe:b3:29:14:f0:cf:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112ba797577ea60a561af9a4598c45060e3b7088
Validity
Not Before: Jun 30 11:00:59 2026 GMT
Not After : Jul 1 11:00:59 2026 GMT
Subject: CN=dd4a40bd437584c93b57f7cb654a087f56ff69ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a1:a1:d0:fd:b8:47:e9:08:58:89:82:83:41:
ee:4c:a2:b2:91:80:10:cb:6f:d8:b5:03:eb:5e:ae:
6c:fd:7b:7e:f2:93:ca:97:34:3d:34:72:26:b5:ad:
64:19:ba:75:68:05:ae:fd:41:f7:8c:97:c8:5b:b8:
08:45:2d:a6:c9:47:0b:61:8e:5b:80:db:bf:86:76:
1b:10:2a:d2:3e:13:bc:d8:7c:df:b8:43:54:53:dc:
6b:57:f3:b7:18:34:d5:72:bc:6a:95:91:d3:41:da:
a7:99:42:7b:ec:a5:ce:bb:8c:56:65:af:4f:42:9a:
25:56:95:64:c8:ec:85:56:fd:a2:e4:2d:72:0e:2c:
d0:95:69:aa:d5:19:bb:3b:6b:1d:eb:23:64:96:18:
66:c9:91:84:bd:9c:c0:fe:40:8d:12:1c:c7:8f:df:
4c:69:a0:b7:a2:a6:34:66:98:b4:c0:6c:d8:04:0b:
06:65:6d:f8:3b:bf:69:d4:8b:4d:8f:f2:78:69:5a:
d5:90:85:63:1e:5c:d8:43:7d:fe:04:fd:ba:94:db:
80:95:fe:6c:3c:66:de:ab:21:3f:fd:03:48:59:2e:
51:36:8e:34:4b:53:91:08:29:df:81:35:09:fc:c3:
61:de:d7:2a:8f:37:72:e9:04:bb:9d:24:73:ae:27:
4b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4A:40:BD:43:75:84:C9:3B:57:F7:CB:65:4A:08:7F:56:FF:69:FF
X509v3 Authority Key Identifier:
keyid:11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:20:8d:99:c6:a4:36:01:aa:3e:93:11:6d:73:55:10:bc:e7:
28:16:bd:bc:46:bd:38:5b:44:6a:10:46:88:b0:6b:f1:98:f8:
cf:ae:10:cb:a1:60:80:ca:23:25:d1:b8:83:31:04:b1:dd:19:
d1:ae:e9:4e:24:2d:a5:08:87:4d:f1:0e:0d:77:60:e3:08:23:
de:b6:2d:a8:99:96:bf:d6:b4:39:ee:6c:c4:1f:b5:e9:1c:b9:
7b:09:6b:36:6d:46:64:4b:88:02:7c:e9:07:cd:1f:93:3e:f4:
57:d4:0c:72:fb:ea:2d:6a:0e:b5:30:ce:9c:d1:76:0d:9b:b0:
c7:7b:6b:86:fd:96:22:a6:19:da:74:62:18:dc:2b:db:24:3a:
fc:b1:92:b2:72:20:0d:84:99:5b:d6:e6:d5:99:b5:f2:34:62:
1d:20:09:94:73:a5:8f:6e:56:20:1a:f8:51:4f:04:34:4a:16:
82:f9:64:aa:c1:ec:e7:0e:2f:5e:4f:ec:66:9f:af:2e:7a:52:
fc:58:18:15:9c:2e:c5:ea:2a:71:da:ad:8c:29:25:0e:90:d3:
af:ed:1d:33:bf:a4:01:9d:3f:ca:58:44:29:27:c2:f1:f3:58:
7c:9c:8f:cd:48:c8:d9:6c:93:1c:e7:a6:02:7b:e5:f7:6c:0e:
f6:17:ba:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:18:30 2026 by rpki-client