Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier: t7WYnhyRtwzDeSH/IoBHe+8ahD4qxbLEodpFD0Gzzr4=
Subject key identifier: FF:F9:48:64:5B:4A:92:24:64:03:6F:12:E3:5A:40:B5:61:13:EB:BD
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 01A0B5098180B5043C7664C296E6E7387508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number: 1A5E
Signing time: Fri 18 Sep 2026 15:01:34 +0000
Manifest this update: Fri 18 Sep 2026 15:01:34 +0000
Manifest next update: Sat 19 Sep 2026 15:01:34 +0000
Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: lsuUGPiA6dUpi0aqr7Ht+zzMfV+JXyX3gAbk5YHIkio=)
2: m22Y1De-nkPO9R3DafQN5L9RCOU.roa (hash: CsiGy9UFamAf9ICsV6hbl4LryS8JIVMr9rlKyNfLKBQ=)
3: vdBF4D6B4y0Ni8JRFy3wrlKFdow.roa (hash: V5Qj+2qVfjThhkfwRXhTo9kpUUm1HojCtg/JdAzbU9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 15:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:09:81:80:b5:04:3c:76:64:c2:96:e6:e7:38:75:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Sep 18 15:01:34 2026 GMT
Not After : Sep 19 15:01:34 2026 GMT
Subject: CN=fff948645b4a922464036f12e35a40b56113ebbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:af:63:47:2d:43:e4:0f:de:1d:60:93:f4:
d8:f4:42:fd:f1:8e:d3:64:36:8d:c7:91:51:d2:05:
48:14:35:ae:4d:d1:e0:99:ed:2c:68:3a:1f:77:13:
9f:19:75:7d:04:93:24:83:1c:b4:fb:25:d9:01:d2:
b8:a8:5d:3e:f2:1f:86:5e:3f:a4:bd:46:c8:09:68:
7b:c8:ee:a9:9f:d4:9b:e4:22:65:33:08:14:a7:2b:
bb:3c:8d:9d:d2:6a:58:11:6e:b9:b6:2e:e3:51:3b:
13:71:0c:fe:2d:9e:c9:3a:cb:0c:9d:4a:05:f2:72:
a9:53:6e:a0:37:36:28:8d:01:7b:9a:1d:6f:95:b1:
76:4f:f1:2d:df:7e:fe:28:60:52:f4:91:93:92:57:
8c:bd:2c:38:b4:b2:b9:92:24:e7:5a:a9:61:16:bb:
5a:d3:0f:b4:6d:05:f2:ab:7d:cc:c3:4f:19:28:6e:
e8:18:7b:7d:14:b4:8b:16:58:c9:5d:e8:40:d1:a5:
1f:75:ae:17:42:d0:a8:a8:13:3d:50:b8:11:a0:5c:
a2:74:a4:dd:3c:a2:25:36:e7:64:d8:3b:07:c7:8f:
67:c3:d0:dc:01:92:14:77:bb:d3:be:be:d2:d4:32:
4e:a4:cb:df:1d:d8:9d:9e:79:47:b4:8f:d0:bb:92:
5e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F9:48:64:5B:4A:92:24:64:03:6F:12:E3:5A:40:B5:61:13:EB:BD
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:00:d6:77:55:f5:c6:cc:91:f1:0a:43:ba:7c:fe:f6:4d:7f:
8d:1a:bf:01:18:56:8b:c2:b1:77:33:ad:89:f5:bc:46:d3:72:
fd:b9:10:e7:09:7c:aa:7f:20:33:4d:ec:33:8d:da:a2:b6:d6:
11:ed:a6:22:a5:1d:89:5b:42:d9:6d:a6:c5:36:c2:32:3f:ca:
28:57:fb:7c:97:ac:97:9f:2e:b5:02:bb:39:b2:0d:05:b7:3f:
8e:ff:77:f4:5f:4b:64:f7:f3:04:a4:e0:75:30:44:f5:1f:34:
1b:a7:5f:4b:ad:f1:82:a5:9b:a8:c1:04:60:2a:db:a4:8e:f8:
fe:d7:bf:49:cd:cd:cf:0a:2a:35:73:2d:82:04:99:c5:eb:9b:
db:dc:5a:c7:5b:76:27:8c:cb:c4:7a:9f:7e:8c:61:de:33:b5:
5b:f2:e3:6d:2c:65:df:c0:0e:85:bc:b6:69:ad:90:00:d2:e1:
15:75:8b:29:23:92:0f:f8:e0:62:b7:90:7b:a9:bb:4a:36:d3:
31:38:32:21:e6:76:48:78:1d:79:80:58:d6:f8:9d:3f:70:13:
46:f7:ce:db:82:bd:a9:0e:45:f7:20:45:76:28:6a:44:34:de:
32:23:bf:97:13:72:a4:66:3d:0c:32:bd:6f:9d:b6:d4:01:03:
c5:c0:16:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:58:58 2026 by rpki-client