Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier: pSbChmxQAcScJIFRhbe2Fq32DhkqVau4cQ2gXEkacfM=
Subject key identifier: 12:FD:D6:FC:AB:48:99:28:26:C3:BD:97:9D:CA:02:AA:0A:68:91:0F
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 019FCB5C8E0381FBE5724DF5066B7A196C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number: 19E5
Signing time: Tue 04 Aug 2026 06:01:08 +0000
Manifest this update: Tue 04 Aug 2026 06:01:08 +0000
Manifest next update: Wed 05 Aug 2026 06:01:08 +0000
Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: xqrFGJjeb2IOunTi4eQrqrjVN83kGVISY+oX3uvJuYI=)
2: m22Y1De-nkPO9R3DafQN5L9RCOU.roa (hash: CsiGy9UFamAf9ICsV6hbl4LryS8JIVMr9rlKyNfLKBQ=)
3: vdBF4D6B4y0Ni8JRFy3wrlKFdow.roa (hash: V5Qj+2qVfjThhkfwRXhTo9kpUUm1HojCtg/JdAzbU9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:5c:8e:03:81:fb:e5:72:4d:f5:06:6b:7a:19:6c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Aug 4 06:01:08 2026 GMT
Not After : Aug 5 06:01:08 2026 GMT
Subject: CN=12fdd6fcab48992826c3bd979dca02aa0a68910f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:83:7b:59:a7:40:ae:d3:13:43:14:bd:86:cb:
23:28:7b:33:32:8c:c7:29:4d:06:25:57:e9:a4:9c:
aa:fb:d4:f6:83:b3:d1:c6:a4:11:37:9c:93:d7:0c:
e1:6e:d8:a1:1e:d1:d5:19:4e:8c:56:85:39:ab:d4:
d1:16:8b:b9:49:ea:b1:17:b0:18:84:c7:96:d4:ce:
5f:2f:14:f8:fc:d1:b4:c7:5c:95:94:af:62:c4:c8:
0b:be:73:b7:80:6f:05:21:b8:83:f1:9c:19:bd:ee:
51:e7:8a:60:18:0f:12:81:f2:30:a4:f8:3c:cc:5c:
d6:c5:de:37:0a:ae:48:3e:a5:c6:0e:11:52:35:e7:
e9:88:81:48:c5:15:44:1b:8a:b5:a5:04:93:d6:7b:
35:43:3f:8b:b3:e4:b7:8b:ed:8f:0b:db:f3:46:3b:
8c:e9:c7:e5:fd:c7:76:33:0c:72:b7:3e:37:51:20:
5f:5e:00:fd:31:1a:ca:44:ae:01:4b:f4:7e:e1:64:
f3:f9:88:01:53:f1:e2:6d:df:6c:f7:58:58:61:9a:
3e:d2:7d:da:48:b0:89:82:fb:4d:e9:4a:d0:13:0f:
36:03:e1:ac:a5:c4:54:3c:04:34:58:c4:e6:2e:2d:
d7:df:fc:b1:30:06:10:99:db:6d:15:a9:c6:09:77:
9e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FD:D6:FC:AB:48:99:28:26:C3:BD:97:9D:CA:02:AA:0A:68:91:0F
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c0:03:b7:17:1f:bf:4b:e3:51:1e:a8:c8:aa:bf:2d:22:46:
3c:e7:8a:69:2c:b0:d5:ad:65:49:f4:bb:36:04:a9:8f:bb:cf:
72:0d:75:07:be:73:d3:3e:55:64:1f:37:8b:1c:60:0d:f2:74:
87:f3:ba:ea:ad:56:16:c7:16:06:a9:95:0e:6a:44:bb:fa:d8:
00:2f:c3:70:2e:1d:d2:57:f1:bc:b3:60:36:98:e5:4e:ea:13:
84:cc:1e:86:a1:94:23:ba:a8:32:28:18:2e:a4:d1:93:04:f3:
af:eb:df:91:56:10:f1:3c:ba:de:42:b9:49:a1:fb:be:a0:a7:
8d:64:2c:20:4e:f6:cb:d7:d0:74:69:5c:e9:e3:77:e2:70:4b:
ac:ed:d7:4d:6f:ba:3b:c5:a6:7f:63:78:82:39:eb:9e:14:0c:
7e:de:43:be:54:55:3d:56:6d:2e:90:7c:7f:09:fa:09:09:5e:
46:2a:45:e4:f3:bc:62:36:43:9b:a0:d2:71:4a:24:92:31:e5:
e8:37:5e:76:08:55:54:e7:3f:bf:07:c0:be:13:8f:b4:e3:39:
97:bb:1d:76:45:c5:9b:03:90:81:db:0a:0a:79:1c:b8:f1:05:
d8:41:27:13:1e:40:e6:27:f6:77:6c:7d:b0:a3:c1:3a:9d:f8:
7d:ef:71:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 13:56:59 2026 by rpki-client