Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier: +lpNzTJht6YEhWn3haIKeVOcEDkYOqQmnVLPrp0Uu6Q=
Subject key identifier: 54:7B:63:78:13:9C:49:AF:81:6A:74:32:46:8E:09:C5:18:C8:EB:42
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 019CF34CF0A1C9F7E2642CC508F2D1411921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number: 186C
Signing time: Sun 15 Mar 2026 21:00:31 +0000
Manifest this update: Sun 15 Mar 2026 21:00:31 +0000
Manifest next update: Mon 16 Mar 2026 21:00:31 +0000
Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: 71J+5FOcZZAKL3holyDNXTivcC5sAvf07aHWm2QpV3M=)
2: m22Y1De-nkPO9R3DafQN5L9RCOU.roa (hash: CsiGy9UFamAf9ICsV6hbl4LryS8JIVMr9rlKyNfLKBQ=)
3: vdBF4D6B4y0Ni8JRFy3wrlKFdow.roa (hash: V5Qj+2qVfjThhkfwRXhTo9kpUUm1HojCtg/JdAzbU9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:4c:f0:a1:c9:f7:e2:64:2c:c5:08:f2:d1:41:19:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Mar 15 21:00:31 2026 GMT
Not After : Mar 16 21:00:31 2026 GMT
Subject: CN=547b6378139c49af816a7432468e09c518c8eb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:0f:66:d8:3e:2c:a8:f6:24:b2:08:28:7a:
08:9a:67:42:bc:f4:09:9a:0d:e2:c2:b0:29:58:2a:
ee:43:a6:9a:08:c4:b7:9b:e6:00:68:8e:3a:e6:75:
52:49:11:21:ae:cc:bd:cc:5e:83:7f:2d:31:a7:bd:
4b:2f:54:2d:bd:ce:11:29:42:a8:a0:35:9b:a6:72:
c5:a7:fe:46:dc:ab:a9:a9:64:e5:7e:7e:82:e0:59:
a8:a6:5c:c8:56:24:15:7f:44:72:a6:a4:45:8d:a1:
8c:e0:ab:07:05:b3:8c:4f:eb:3e:80:0d:1d:27:3e:
2c:fe:0f:f8:27:31:05:f7:2a:79:d2:89:5c:24:b7:
e5:fd:f8:5f:50:4f:f7:37:e4:90:64:f5:38:28:cc:
61:13:e2:0e:1b:c3:54:8c:0f:45:94:8b:0f:be:a3:
af:bf:ab:16:fa:f7:56:bb:15:de:be:f2:87:31:75:
bd:da:1b:ee:68:e5:8f:41:29:21:60:92:94:39:59:
1c:29:46:63:49:0d:e5:76:bc:d3:d1:df:e9:ca:68:
a9:5f:d8:68:14:7e:31:5a:1c:82:41:2b:52:7b:17:
a7:b3:01:cd:b1:24:81:31:45:db:4e:b2:c2:27:7b:
b2:37:67:ae:ce:ca:5f:65:d8:ec:71:d5:43:ff:b8:
bf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7B:63:78:13:9C:49:AF:81:6A:74:32:46:8E:09:C5:18:C8:EB:42
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d3:37:8f:5f:f8:74:91:c9:6e:da:31:21:e4:9a:d4:18:4a:
ea:21:72:28:71:06:3f:2f:9d:c0:89:cf:15:3e:1b:b6:c2:3d:
af:e4:33:76:e9:22:a5:d3:54:3a:f6:2a:04:11:7b:6d:c0:d9:
22:7d:53:4e:39:31:6b:57:c5:3f:cf:e1:63:ea:57:89:fd:fd:
25:d9:d7:82:c6:da:6b:70:cc:a9:3d:d5:a7:8d:5c:26:b0:ba:
67:91:b3:96:54:77:2d:94:42:15:e6:7b:50:10:94:cb:f5:17:
51:ce:44:8a:71:6b:1f:36:6e:7e:14:c4:9b:16:65:d0:75:0f:
72:10:33:c5:ed:05:c3:0b:22:65:4d:c0:bc:6d:ea:3c:b4:b2:
90:6a:e3:48:88:07:a3:a2:8d:d4:48:d6:1b:18:18:ac:2e:17:
ab:c5:b2:de:11:c8:0d:ee:ce:27:87:06:e3:ee:68:41:cb:06:
3b:45:bb:c0:a0:66:3a:20:92:9b:e7:03:45:30:ff:7f:bf:70:
ff:60:4b:5f:e7:f1:ce:7f:9d:e7:ad:f5:9a:19:aa:b8:c6:ab:
b6:ce:d8:d4:2e:c2:a9:bc:c7:ae:34:ea:15:89:85:7b:4b:1e:
73:2f:ac:db:49:56:27:58:a6:1b:fe:d4:22:8d:b6:b4:d3:3d:
7e:28:de:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 02:01:52 2026 by rpki-client