Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
File: ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft (raw, json)
Hash identifier: XTk4lxxRESckar5zultsTYe2/JhJSl+dIaoPJKue0nM=
Subject key identifier: 51:43:DB:FC:07:78:5E:46:E3:2A:24:C2:34:0F:31:E8:61:BF:65:72
Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
Certificate issuer: /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Certificate serial: 01A13F7049A8AE35E9460D585546EFFD459D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
Manifest number: 097D
Signing time: Thu 15 Oct 2026 12:01:25 +0000
Manifest this update: Thu 15 Oct 2026 12:01:25 +0000
Manifest next update: Fri 16 Oct 2026 12:01:25 +0000
Files and hashes: 1: ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl (hash: GFV8o3Q1Ozy3M6XsxT/QQpybSNlcD1i6sytjZPr5CMU=)
2: stYBdowOVPO4I6l2lk6N70Rzn-E.roa (hash: YY8VJy7fjrv/nyUerV6XVPDCUnj9z+ve+4ysfFvneOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:49:a8:ae:35:e9:46:0d:58:55:46:ef:fd:45:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Validity
Not Before: Oct 15 12:01:25 2026 GMT
Not After : Oct 16 12:01:25 2026 GMT
Subject: CN=5143dbfc07785e46e32a24c2340f31e861bf6572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:53:8a:90:84:23:f4:03:57:61:08:39:e5:
2e:55:2a:f2:1d:bd:d3:b5:ff:4e:e4:80:a1:d6:f7:
6e:2f:f4:85:be:9c:80:36:37:a8:db:63:db:19:7d:
85:22:de:a7:8d:6c:70:58:ec:67:c2:c8:98:c4:48:
5c:4f:51:b5:9c:0d:f6:d8:97:42:c0:29:2c:bf:b8:
40:e4:fb:0e:72:a0:fd:18:08:6b:d9:05:73:36:3e:
c1:31:26:a6:17:60:e6:3c:bf:ba:2e:71:b0:7c:24:
20:91:52:4a:18:57:d5:56:2f:e6:0d:0b:58:dd:43:
29:61:2c:21:e4:72:f3:16:88:c4:02:b7:66:93:50:
57:1e:3a:cb:00:fd:da:52:d8:ac:13:ab:91:91:d9:
fd:41:c2:a3:b9:c7:d3:0a:bd:77:97:74:42:61:08:
d3:53:10:47:3e:fa:3c:9b:b9:90:91:48:7a:81:51:
26:5b:d1:59:83:32:e9:9c:35:65:f3:c1:3e:17:39:
3b:1d:3d:e8:c7:5c:65:3f:95:e4:ef:b3:e9:c5:43:
89:f8:a2:89:23:4d:5b:75:40:68:a9:08:d4:d5:a3:
02:d7:f2:da:1a:f1:f6:c0:f9:3a:80:08:4c:5e:05:
09:5b:46:18:99:ac:4a:68:9b:45:6a:07:22:f0:34:
c8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:43:DB:FC:07:78:5E:46:E3:2A:24:C2:34:0F:31:E8:61:BF:65:72
X509v3 Authority Key Identifier:
keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:21:74:29:5f:62:07:c0:f2:d6:1b:08:85:f0:e8:e7:93:fd:
cc:d9:1b:2d:af:e1:71:15:27:de:30:8b:94:28:bf:33:c0:d4:
48:4b:47:8c:f7:9a:23:87:db:70:41:47:03:58:09:f9:2a:bf:
7b:a4:56:1b:1f:df:e5:9b:3a:60:58:f5:f3:cf:d6:70:f5:23:
9d:65:59:76:bd:e9:e4:08:09:77:aa:a8:b5:e1:d6:f2:66:8e:
3e:f0:2f:f0:3d:d0:0f:d1:cc:16:ec:06:74:53:c0:64:f7:7b:
68:27:31:2d:95:14:ae:6b:ba:62:10:26:34:69:30:08:96:3a:
18:92:37:94:e0:03:f1:20:33:cd:17:fe:4a:1d:53:ac:9e:3b:
ca:f9:9e:e1:90:e4:2b:f6:8b:32:39:f5:52:ce:ad:63:8b:5d:
e7:e2:7f:b4:e9:24:d6:07:9e:4c:8a:4d:3e:0e:11:b9:6f:b2:
a8:d7:5d:90:7b:84:de:49:53:f6:98:85:28:ed:be:d3:e1:ac:
ec:91:fd:40:b6:f1:c7:25:84:f7:32:f3:9e:e3:11:1c:fc:f9:
12:11:02:b8:ae:84:a5:cf:f1:0b:01:15:7d:61:f1:56:23:04:
cc:0f:23:75:bf:8c:3d:0b:6e:aa:3d:07:c9:82:05:16:51:66:
6a:d3:63:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:21:50 2026 by rpki-client