Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
File: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft (raw, json)
Hash identifier: IXB1vGlo/yUwQ0EsO2FkT/EBcFpIa2MpgLDU9L39ySs=
Subject key identifier: CC:8A:F7:72:53:90:E9:84:D2:BB:80:4B:B2:49:B8:67:CE:AC:DB:C9
Authority key identifier: 12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
Certificate issuer: /CN=12c603666719e979bef0921451a2ec264ed01209
Certificate serial: 019D38D3AA140161C00784EF506E0EBF079C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:01:28 +0000
Manifest this update: Sun 29 Mar 2026 09:01:28 +0000
Manifest next update: Mon 30 Mar 2026 09:01:28 +0000
Files and hashes: 1: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl (hash: 7TOWekxO5vkW3z/043Aa1J2TRsHyS0INiJ4Fa5geXMI=)
2: IXzvb0oMAUQE_F6M51MZp-vD2zA.roa (hash: yPGLWb8LE+8WjEXthn7v5ZfntWLr2abqa8ktyJTdaHI=)
3: qJG0Hd7c9EV41M-mzPnawa776Ng.roa (hash: 38xg5etHC6ngVwSZkinLtA2QpEFQUOmcoXPkIJ0ae5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:aa:14:01:61:c0:07:84:ef:50:6e:0e:bf:07:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c603666719e979bef0921451a2ec264ed01209
Validity
Not Before: Mar 29 09:01:28 2026 GMT
Not After : Mar 30 09:01:28 2026 GMT
Subject: CN=cc8af7725390e984d2bb804bb249b867ceacdbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5a:e9:7d:60:19:1c:c5:f7:f3:ae:4a:48:67:
2f:e8:3d:c6:91:07:04:54:32:4e:eb:cd:d1:6d:63:
c2:46:d9:3b:4f:97:37:08:ec:69:90:d1:40:ff:89:
99:a7:c2:d9:c6:58:69:bf:1a:cc:6d:1a:11:ae:8f:
36:d2:40:40:bb:cd:18:92:49:7f:fb:39:92:1b:33:
26:9b:0f:7f:0c:19:7d:db:4b:78:7d:da:40:83:a4:
25:d1:dc:35:ac:0f:91:30:7d:f1:80:4d:ab:5f:12:
57:2c:fd:12:64:3d:be:04:fb:d2:b1:ff:0f:aa:99:
be:14:6b:a4:0a:ac:a0:5a:1f:cc:a6:23:d0:21:9d:
96:9f:2f:49:ea:e6:3e:67:39:ba:7d:cd:17:c9:cb:
4a:ae:e1:c1:e8:ff:4c:dc:66:c2:f3:9e:37:a0:da:
a6:94:f9:b6:67:fe:58:f4:e2:4f:61:ca:28:ab:34:
05:51:62:05:3c:ba:b7:81:e5:a1:eb:8c:b2:a0:3d:
4f:90:98:f0:15:93:eb:bb:6b:1e:e5:d6:ed:3d:88:
30:98:da:e8:3c:fe:a3:aa:39:de:50:0f:fd:c0:0e:
17:b0:9b:f2:55:41:86:8e:a3:a7:3a:46:cf:cd:79:
ef:75:4b:b9:a4:7e:e1:c8:8c:a8:eb:ff:f2:50:17:
d3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8A:F7:72:53:90:E9:84:D2:BB:80:4B:B2:49:B8:67:CE:AC:DB:C9
X509v3 Authority Key Identifier:
keyid:12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:28:76:b1:74:b9:12:64:72:2b:72:94:4e:c1:4c:a2:b2:63:
ff:5a:73:3c:30:0f:fd:dd:0e:dd:b3:d7:b6:fe:c6:ce:ad:a1:
1c:44:3c:4e:69:3c:05:24:e6:50:27:be:93:5b:0f:df:ce:e3:
c4:f5:5d:58:a8:45:07:85:7b:46:9b:3e:11:29:63:01:43:4e:
41:af:e4:3c:88:e8:ef:ee:ec:99:a2:6d:88:77:48:18:d8:02:
54:79:ba:fd:55:c9:d6:24:1f:ae:78:58:2e:37:ce:0a:fa:ff:
1c:6c:31:dc:84:42:13:a0:e1:d9:92:5d:9b:06:28:c2:e5:ff:
6c:0a:95:4d:db:a1:40:68:66:28:65:85:08:91:0a:10:ed:d7:
33:27:59:7c:b6:7e:dc:af:df:0b:7b:f9:72:46:e9:99:f6:b2:
9d:f9:8f:96:80:b8:30:83:84:53:39:31:8f:a3:18:48:f0:6c:
8a:fb:66:54:d2:59:b9:94:ba:e4:ae:c1:ab:06:4c:51:35:45:
08:09:04:70:5f:be:01:15:56:37:c2:da:de:89:6f:74:a7:2b:
48:ef:c3:69:14:67:3a:08:47:ff:60:ca:8d:56:10:c0:46:bc:
28:82:b6:88:7b:77:e5:55:e1:fb:bf:db:ad:68:3b:ba:88:e5:
27:3a:6d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:46 2026 by rpki-client