Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier: 185D/+MeL8pr/BCIMHWbP6k+D0E1XBQtzUSGeXeNtTM=
Subject key identifier: 77:A3:B3:0B:5C:49:86:5B:6E:83:2A:40:33:E3:7A:40:48:72:E6:C7
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 019DDCFAEF00F19C15E5087D77170156B5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number: 18E5
Signing time: Thu 30 Apr 2026 06:02:05 +0000
Manifest this update: Thu 30 Apr 2026 06:02:05 +0000
Manifest next update: Fri 01 May 2026 06:02:05 +0000
Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: hVJ4Xqo512czluoBXNztfpkfKyC3V94pJ3uDRJ3Agv8=)
2: m22Y1De-nkPO9R3DafQN5L9RCOU.roa (hash: CsiGy9UFamAf9ICsV6hbl4LryS8JIVMr9rlKyNfLKBQ=)
3: vdBF4D6B4y0Ni8JRFy3wrlKFdow.roa (hash: V5Qj+2qVfjThhkfwRXhTo9kpUUm1HojCtg/JdAzbU9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 06:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:fa:ef:00:f1:9c:15:e5:08:7d:77:17:01:56:b5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Apr 30 06:02:05 2026 GMT
Not After : May 1 06:02:05 2026 GMT
Subject: CN=77a3b30b5c49865b6e832a4033e37a404872e6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:78:7e:7d:0d:dc:62:96:72:06:6f:6b:ef:56:
ff:80:39:28:87:a8:91:f2:26:55:15:cf:eb:34:df:
12:f7:10:3d:4f:6d:13:fc:bd:60:e2:40:83:ee:9a:
c4:f9:c0:b7:77:bc:01:aa:09:34:63:ab:e1:88:fd:
e0:96:34:ff:cf:f7:e1:5c:47:35:6d:80:a2:14:1f:
38:c5:ce:90:12:05:a3:24:5f:ac:cd:56:5f:1d:fd:
c2:07:49:ed:5a:05:41:3e:e8:7e:aa:81:fe:94:5d:
3d:7f:02:03:0c:1f:b4:59:d0:88:1d:60:e1:87:1b:
45:b0:1e:17:52:97:df:c3:82:48:02:30:7b:97:c3:
a0:93:90:2f:de:84:ff:df:aa:f5:37:40:05:ff:87:
2c:97:49:93:28:fc:5d:16:45:d5:fc:a9:19:ea:e7:
6a:bb:9e:6a:95:0a:d3:c7:61:1e:14:f7:65:d1:1c:
d4:42:aa:b9:27:fa:52:48:e3:67:ad:38:7b:ca:08:
e7:05:38:dc:f4:18:2b:35:1a:e1:89:62:d8:14:d2:
5a:77:64:8e:22:83:c1:90:14:f4:a2:de:43:dd:01:
45:ad:d0:af:a6:aa:f0:5e:ff:72:79:aa:4d:bd:d6:
6f:20:68:fc:56:f5:ec:26:c1:22:86:1d:a8:d6:95:
75:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A3:B3:0B:5C:49:86:5B:6E:83:2A:40:33:E3:7A:40:48:72:E6:C7
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5e:2d:52:a9:f2:67:34:b4:1e:1e:a6:74:81:01:95:cf:ab:
b8:04:8a:a5:90:a0:9e:65:e0:77:ab:ad:aa:5d:53:a0:cc:3e:
08:09:f5:95:63:a6:31:27:86:9c:51:10:39:bf:89:a8:22:65:
a1:d8:57:f0:a3:6b:02:25:63:26:05:18:da:9f:72:4b:67:1b:
75:e3:eb:da:ef:98:7e:33:1e:36:65:a6:ea:3a:53:ac:d0:ff:
49:d8:04:b0:d8:65:e7:da:d7:87:43:54:f9:33:a8:b3:56:cc:
cd:eb:b6:5f:8a:db:c0:1c:6c:36:bc:16:ee:ea:6b:7a:5c:1d:
d1:a9:3e:42:1c:56:7c:15:f0:18:2d:35:7b:49:c6:11:f9:a5:
32:c3:59:d2:08:62:14:89:50:ca:b2:c8:fc:98:8b:f3:ab:e7:
09:b8:53:3a:9f:f3:05:c4:f9:d5:5c:96:b8:fa:e4:78:da:85:
89:8a:fb:4c:fe:a5:80:30:1c:fa:5d:bd:94:8e:ff:77:a2:16:
b3:14:d1:2c:49:2e:5c:7a:92:21:0c:db:1c:f0:9f:53:a5:fd:
5a:46:b8:a1:98:8c:22:6c:77:f8:a3:68:2a:23:8a:c2:ae:f3:
85:e3:ea:8c:56:dd:e3:a5:ac:62:74:16:50:1a:1d:f8:22:23:
e0:3a:35:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:46:24 2026 by rpki-client