Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier: ucGN6yk5mkeX3L4lRB7EgcZ36Xvd+5ZKCI4vEib8D50=
Subject key identifier: EF:E6:E1:B8:B3:F2:50:E5:E1:4A:A0:54:FE:9A:09:8F:C3:C7:ED:99
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 019EDBE4C851E82151A242474A9B22F4FFCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number: 1969
Signing time: Thu 18 Jun 2026 18:01:04 +0000
Manifest this update: Thu 18 Jun 2026 18:01:04 +0000
Manifest next update: Fri 19 Jun 2026 18:01:04 +0000
Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: gJYFOawZFlD0B2YYWgg4ueMakOUzrmz+/YGU76HOwnQ=)
2: m22Y1De-nkPO9R3DafQN5L9RCOU.roa (hash: CsiGy9UFamAf9ICsV6hbl4LryS8JIVMr9rlKyNfLKBQ=)
3: vdBF4D6B4y0Ni8JRFy3wrlKFdow.roa (hash: V5Qj+2qVfjThhkfwRXhTo9kpUUm1HojCtg/JdAzbU9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Jun 2026 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:db:e4:c8:51:e8:21:51:a2:42:47:4a:9b:22:f4:ff:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Jun 18 18:01:04 2026 GMT
Not After : Jun 19 18:01:04 2026 GMT
Subject: CN=efe6e1b8b3f250e5e14aa054fe9a098fc3c7ed99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6a:db:45:73:29:de:59:a9:05:b2:32:54:8c:
7d:f9:5b:15:e3:9a:2b:ed:0b:fa:ef:ea:3a:87:38:
d5:3a:d8:f2:1d:09:04:ac:4f:98:1a:ab:fb:ee:f6:
06:2d:17:2a:cb:43:af:16:cc:9f:fe:bb:f1:6b:49:
91:2a:91:52:f6:8c:4b:8c:6b:a6:31:69:6d:5b:21:
f7:de:78:fa:09:9d:d4:2d:cb:1d:71:ec:29:72:9a:
27:97:e2:e4:65:19:81:89:73:54:e9:d6:bf:25:50:
03:b8:6e:8d:ed:0f:ae:c0:57:ee:36:42:f2:2b:3b:
4a:37:65:08:d2:1a:6b:84:d2:01:db:69:74:4d:96:
a5:78:4e:dd:0c:3e:88:36:2f:1b:90:fd:cd:cb:c2:
d6:d7:b8:d7:e5:ec:03:25:f0:5c:71:47:d7:29:56:
4f:9f:ce:ae:79:05:3d:ce:b4:d0:d1:d0:4b:5a:05:
1c:cb:f2:23:b4:56:ff:65:3e:02:77:ad:66:6a:c9:
f9:8e:49:57:56:5e:47:8c:89:08:50:8a:89:09:9e:
47:38:34:b7:25:92:1c:03:ca:8c:bc:69:1e:75:17:
02:33:ee:cd:35:e7:2e:dd:b7:6d:b2:5a:8d:4b:53:
61:a9:4c:0a:9d:06:93:b9:b3:b0:2b:c9:0f:4c:b5:
22:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E6:E1:B8:B3:F2:50:E5:E1:4A:A0:54:FE:9A:09:8F:C3:C7:ED:99
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5e:1b:45:ca:62:ca:b0:41:0c:62:fd:45:16:d5:42:b3:a8:
35:4e:8f:0e:17:27:f4:be:29:e9:c7:47:f9:ae:64:32:8b:ce:
b9:c8:c6:cb:43:80:27:5c:3e:f8:8d:7d:2d:84:61:7c:03:88:
07:db:03:63:c9:d2:31:b5:4e:3f:55:38:29:fc:d0:88:d4:89:
31:8f:ad:09:21:fa:77:9f:f9:b0:63:30:4a:64:ad:8c:03:b0:
ab:ad:85:4a:f3:44:8d:31:b5:ad:f5:27:8b:07:dd:5d:78:f6:
fd:0c:b9:85:08:61:ea:07:a0:ad:bc:e3:a7:35:89:4d:f9:44:
a7:d3:de:10:93:cc:7a:47:a2:09:6e:1d:4f:16:74:66:40:4c:
dc:cb:b0:03:b2:fd:db:74:99:f0:83:35:c0:ba:8f:ff:ba:42:
6c:c7:9b:07:b7:90:02:0b:ac:09:5e:a5:ed:b2:6a:f9:ea:c5:
e8:dc:13:bd:56:27:d6:9d:c6:99:59:8d:e4:1c:d0:25:b4:92:
fb:72:66:dd:fa:ef:9b:8d:4f:70:d1:59:60:67:9f:9b:12:a5:
06:0f:d9:1d:4c:a1:2e:4c:43:e1:d0:7c:a9:cf:f6:50:22:23:
0f:f9:57:17:da:49:00:02:b5:7b:64:fc:67:3b:b8:33:29:ee:
df:ac:d4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 04:29:08 2026 by rpki-client