Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
File: eSxdjDLKpGYjFoWMZb6-EshhrWc.mft (raw, json)
Hash identifier: 5nmYTOb97JJRdxWT+M/fLtWpho+Yc5w3GsXKGeTbh5o=
Subject key identifier: 72:6F:E6:F5:65:E3:23:08:31:E7:FB:DC:9B:05:E8:50:57:05:6B:BC
Authority key identifier: 79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67
Certificate issuer: /CN=792c5d8c32caa4662316858c65bebe12c861ad67
Certificate serial: 019D394129F541AA5F1535A1DEA3BBF51990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:01:05 +0000
Manifest this update: Sun 29 Mar 2026 11:01:05 +0000
Manifest next update: Mon 30 Mar 2026 11:01:05 +0000
Files and hashes: 1: eSxdjDLKpGYjFoWMZb6-EshhrWc.crl (hash: x436kDof/wuq7tshKxleC8bBUI/+Z/PdoZxNat7ULlM=)
2: m3YFLRolOJzOKxQ9tZfTdlSKifw.roa (hash: i5pG82cl0NYlQscJwoNQNnDgodQ3zb/qtbRnFjtDuso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:29:f5:41:aa:5f:15:35:a1:de:a3:bb:f5:19:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792c5d8c32caa4662316858c65bebe12c861ad67
Validity
Not Before: Mar 29 11:01:05 2026 GMT
Not After : Mar 30 11:01:05 2026 GMT
Subject: CN=726fe6f565e3230831e7fbdc9b05e85057056bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:0a:a3:48:de:53:4d:5c:d8:9f:e7:72:ae:
c0:23:3f:a2:14:0e:f6:b9:52:93:3d:a8:41:7e:a7:
0d:66:51:4c:93:6f:6f:0a:7e:f2:2c:cb:5d:4c:a9:
3c:c8:25:49:ec:b9:9f:01:0e:e2:a0:33:33:44:3e:
9d:ef:99:6e:a9:44:a2:f3:1b:e6:65:2d:17:cc:52:
89:16:7f:46:8a:7a:5c:51:7b:5b:e6:23:6f:75:70:
bc:6d:1b:66:b1:cd:ac:5c:ba:46:ba:13:c1:b1:05:
0b:ad:e9:90:de:00:bf:b3:5d:85:47:90:06:48:1f:
a1:f8:b1:17:2d:c3:04:50:18:9a:c3:6b:0d:87:86:
26:27:39:05:5f:1a:c6:01:ab:30:fa:a0:1a:29:a3:
b6:50:63:e7:4a:2c:7b:f4:00:64:8c:fc:cc:63:36:
76:f5:72:61:cf:08:ae:04:7a:a9:22:7d:c4:64:b4:
9b:a9:6f:80:f7:d0:50:3f:95:46:79:d0:0b:10:db:
5b:b1:e2:32:d1:92:8a:f5:63:0e:10:2d:6e:e1:bf:
b7:cf:6f:6a:d3:b1:22:c0:b0:25:b9:d9:78:78:f1:
c5:4b:ab:e8:95:b2:04:bb:c6:61:ef:de:0e:2e:06:
89:58:17:f2:11:09:f2:cb:6c:c6:ed:41:89:1c:a3:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6F:E6:F5:65:E3:23:08:31:E7:FB:DC:9B:05:E8:50:57:05:6B:BC
X509v3 Authority Key Identifier:
keyid:79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:06:7e:cb:67:d5:96:11:20:c9:b4:87:a5:28:b1:92:65:77:
89:2a:b9:62:29:93:68:e9:b3:88:df:d0:54:29:5b:47:dc:ed:
69:bf:e0:de:b4:48:2d:4c:38:8e:a4:08:db:a4:fb:19:3f:bd:
2d:dd:29:72:d4:89:af:58:81:22:f9:04:89:4e:8b:7e:39:6c:
52:72:e4:41:e8:3b:b2:1b:80:c4:a9:6e:14:2e:dc:d7:bc:69:
f3:57:a6:ee:ff:eb:4e:93:07:7b:a7:68:f4:de:8e:d7:52:fe:
db:6e:aa:ec:4e:42:a8:48:ae:65:60:e2:76:9f:87:7e:5e:39:
45:f4:08:d8:81:72:b6:0d:ec:d4:c6:65:1b:f1:5b:62:0c:48:
ef:14:c9:b5:92:da:fa:d3:14:1c:25:bb:c5:c2:48:d9:30:79:
d7:31:91:73:52:f6:bd:de:28:72:c0:93:e4:33:83:72:b5:21:
a6:f2:84:c7:a4:4c:84:b5:f8:9f:11:b1:58:be:04:86:f2:b8:
95:06:34:04:95:3d:1c:fe:2f:03:c2:9d:df:9e:f7:6e:d4:d2:
a7:9e:50:47:67:45:d4:b6:58:e2:5c:38:a6:2d:47:80:50:3d:
98:4e:0c:41:9a:c2:6e:b2:88:87:b4:47:11:9a:fc:a7:bc:6c:
dd:14:1f:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QSn1QapfFTWh3qO79RmQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MmM1ZDhjMzJjYWE0NjYyMzE2ODU4YzY1YmViZTEyYzg2
MWFkNjcwHhcNMjYwMzI5MTEwMTA1WhcNMjYwMzMwMTEwMTA1WjAzMTEwLwYDVQQD
Eyg3MjZmZTZmNTY1ZTMyMzA4MzFlN2ZiZGM5YjA1ZTg1MDU3MDU2YmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyEKo0jeU01c2J/ncq7AIz+iFA72
uVKTPahBfqcNZlFMk29vCn7yLMtdTKk8yCVJ7LmfAQ7ioDMzRD6d75luqUSi8xvm
ZS0XzFKJFn9GinpcUXtb5iNvdXC8bRtmsc2sXLpGuhPBsQULremQ3gC/s12FR5AG
SB+h+LEXLcMEUBiaw2sNh4YmJzkFXxrGAasw+qAaKaO2UGPnSix79ABkjPzMYzZ2
9XJhzwiuBHqpIn3EZLSbqW+A99BQP5VGedALENtbseIy0ZKK9WMOEC1u4b+3z29q
07EiwLAludl4ePHFS6volbIEu8Zh794OLgaJWBfyEQnyy2zG7UGJHKMUNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJv5vVl4yMIMef73JsF6FBXBWu8MB8GA1UdIwQY
MBaAFHksXYwyyqRmIxaFjGW+vhLIYa1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVN4ZGpETEtwR1lqRm9XTVpiNi1Fc2hocldjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wZTRmNmMtNTEyOC00NmY5LWIzZjMt
OGI4MmMyMDI5M2ExLzEvZVN4ZGpETEtwR1lqRm9XTVpiNi1Fc2hocldjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wZTRmNmMtNTEyOC00NmY5LWIzZjMtOGI4MmMyMDI5M2Ex
LzEvZVN4ZGpETEtwR1lqRm9XTVpiNi1Fc2hocldjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQgZ+y2fV
lhEgybSHpSixkmV3iSq5YimTaOmziN/QVClbR9ztab/g3rRILUw4jqQI26T7GT+9
Ld0pctSJr1iBIvkEiU6LfjlsUnLkQeg7shuAxKluFC7c17xp81em7v/rTpMHe6do
9N6O11L+226q7E5CqEiuZWDidp+Hfl45RfQI2IFytg3s1MZlG/FbYgxI7xTJtZLa
+tMUHCW7xcJI2TB51zGRc1L2vd4ocsCT5DODcrUhpvKEx6RMhLX4nxGxWL4EhvK4
lQY0BJU9HP4vA8Kd3573btTSp55QR2dF1LZY4lw4pi1HgFA9mE4MQZrCbrKIh7RH
EZr8p7xs3RQfWg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:59 2026 by rpki-client