Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
File: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft (raw, json)
Hash identifier: rs7blPz2lehOYDdzfJMyKJ5s0KwsFFeJUnN0GS+PvBM=
Subject key identifier: DC:65:A0:AF:4D:DB:E6:F6:FF:04:71:51:E7:B4:0E:05:01:9A:79:9D
Authority key identifier: 7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
Certificate issuer: /CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Certificate serial: 019D38D362D32C7992E0729A0D4F409BB103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:01:10 +0000
Manifest this update: Sun 29 Mar 2026 09:01:10 +0000
Manifest next update: Mon 30 Mar 2026 09:01:10 +0000
Files and hashes: 1: 1-gB5rLPnht4_2fTXD19vo6rGOgY.roa (hash: MrHKvfkkxIsYa65L6lLIguftbi69CSEX2nGOpQCCn6M=)
2: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl (hash: Ulh1sQlFkkVUDTXNhNe954WZ1BawkqAXZcOQh9dw8Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:62:d3:2c:79:92:e0:72:9a:0d:4f:40:9b:b1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Validity
Not Before: Mar 29 09:01:10 2026 GMT
Not After : Mar 30 09:01:10 2026 GMT
Subject: CN=dc65a0af4ddbe6f6ff047151e7b40e05019a799d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:50:c2:44:f1:51:2b:2b:cf:44:6b:12:7b:
cb:3d:8d:64:05:0a:72:d2:8a:72:22:23:c0:3a:00:
46:f3:ae:ca:63:ce:06:ce:f3:ff:c3:05:37:40:f6:
08:fc:e2:dc:8d:7c:b9:c1:ba:d4:c8:cb:b6:7e:f7:
de:9c:fc:31:55:6b:78:2a:d3:60:1b:ee:b8:2c:8e:
9f:ab:5a:d0:06:84:e7:f0:21:27:dc:af:1b:b6:33:
1a:14:a6:f5:18:9f:a3:a7:c8:90:00:d1:4d:33:3a:
e4:33:d2:bd:00:30:9c:99:28:f0:6b:72:c2:0d:f4:
80:b5:56:6e:bb:bd:51:1b:52:8f:67:68:80:ac:b0:
aa:db:7b:5a:36:a7:c3:30:8d:e3:c1:12:ce:12:b1:
82:69:7e:6f:a0:ae:4b:b2:15:c3:86:fe:c2:95:67:
55:e9:aa:94:c2:aa:18:47:f2:24:74:09:ca:8e:d4:
d3:e0:1f:22:3b:af:9d:ef:bd:87:de:74:d2:b1:23:
b4:bf:df:3d:c9:77:1b:1b:79:20:47:c5:00:eb:54:
a8:e4:de:4c:6c:0c:9a:c2:33:89:13:cd:89:6c:20:
ad:2a:1b:d0:3b:26:f6:31:34:31:7b:2f:44:8b:d5:
0c:5b:8a:8a:d2:a0:ed:54:d7:60:67:03:eb:84:cb:
8f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:65:A0:AF:4D:DB:E6:F6:FF:04:71:51:E7:B4:0E:05:01:9A:79:9D
X509v3 Authority Key Identifier:
keyid:7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:9d:d6:f9:85:54:8a:5f:3e:56:2e:0e:e9:44:64:23:0c:2f:
51:ab:70:f0:42:e1:be:00:08:9a:8b:26:3d:d2:f0:5b:e9:f9:
b3:ae:82:e6:8c:06:aa:3a:82:07:d8:a8:e2:2a:f1:bc:3e:be:
2e:37:ad:43:78:48:29:4d:d4:c5:f7:3c:9f:78:82:78:35:65:
41:0f:6c:25:f7:e2:72:57:9e:27:d0:cd:ae:ac:87:43:80:b8:
b8:37:cc:8b:28:3d:60:5a:fc:69:5e:50:0d:4c:87:df:e6:f0:
b8:65:d5:b9:28:7f:8a:8b:f3:04:bf:40:6f:4e:c1:2d:01:dd:
9c:a1:a8:21:0a:5a:5a:66:71:ef:49:98:9f:b9:1d:fe:e8:9e:
63:4c:b0:31:3a:1a:f5:16:2f:db:71:73:44:cc:35:f9:aa:75:
2b:1f:9f:33:91:73:67:91:03:e7:35:12:73:51:b0:e9:e8:d1:
77:df:de:56:ef:f5:40:df:d7:8a:12:94:14:f0:73:7f:f5:4e:
a4:35:28:1c:34:10:ef:a2:60:bb:44:6e:b4:a4:ba:9f:64:d5:
15:bd:9d:af:ed:d1:6d:a8:a6:cd:b1:ad:52:1d:e1:fc:05:29:
7e:81:22:00:6c:2e:f7:52:43:e4:49:9f:ff:15:ac:f7:86:35:
63:80:a4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:01 2026 by rpki-client