Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
File: esYj77_BJHEhYiQMugKk2h1NzqM.mft (raw, json)
Hash identifier: HjleMF4yLWdfhmpNFwlpfy66fYi6QQDwUU4N1iW6sOI=
Subject key identifier: 72:7E:0B:64:E9:1E:DE:8A:1B:61:1B:57:02:8F:8B:12:53:B7:94:AF
Authority key identifier: 7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
Certificate issuer: /CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Certificate serial: 019D386651655538C0200F8A7EA98E033951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
Manifest number: 108C
Signing time: Sun 29 Mar 2026 07:02:02 +0000
Manifest this update: Sun 29 Mar 2026 07:02:02 +0000
Manifest next update: Mon 30 Mar 2026 07:02:02 +0000
Files and hashes: 1: esYj77_BJHEhYiQMugKk2h1NzqM.crl (hash: Foyulr0KMT6UoMFde7vtDrNqFTeaTSmeRK3Bn2pd++c=)
2: oxAaTJm6w19ZYAezwM2Bse1zk-k.roa (hash: UmiPLqYirI4eFKMHzTXAkfjhckK4NXBAKqDlpgaTmlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:51:65:55:38:c0:20:0f:8a:7e:a9:8e:03:39:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ac623efbfc124712162240cba02a4da1d4dcea3
Validity
Not Before: Mar 29 07:02:02 2026 GMT
Not After : Mar 30 07:02:02 2026 GMT
Subject: CN=727e0b64e91ede8a1b611b57028f8b1253b794af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:a3:55:bc:29:ca:f9:9d:65:73:ee:f3:57:
c1:55:1f:df:c4:9d:35:0b:a8:2a:3f:38:8c:19:bf:
28:f3:cb:91:a8:cf:91:d2:7e:0a:f0:b4:79:34:12:
d7:7e:8e:bb:6e:bf:91:a9:db:95:1f:bf:4d:dd:d2:
5a:93:59:3c:41:6e:d3:c0:c7:25:12:34:53:37:cc:
6b:1a:17:bc:24:8d:18:9e:bb:4f:72:b9:a0:9a:02:
3a:7d:22:87:e9:ec:55:9f:47:3f:84:1b:2a:9f:ce:
41:c3:90:f4:60:1b:54:8c:30:13:03:e1:56:5d:ec:
68:cf:eb:b2:93:e7:36:0a:a8:b8:52:b6:fe:29:4c:
53:2c:62:62:bd:69:a3:97:85:77:25:a3:89:d9:a1:
c3:99:4d:68:6a:2f:c5:22:94:95:a1:0d:db:f2:2f:
9b:4e:9f:58:c9:6a:2b:ba:d6:c8:d3:62:e6:77:a9:
19:af:b2:6d:17:57:3a:f6:90:2a:d2:bb:02:40:08:
e5:97:e6:04:f7:67:91:16:b1:e3:80:5c:c3:f5:4f:
32:d6:c8:8c:34:d7:6c:cc:2d:39:a2:d4:f7:32:d4:
8b:06:1f:90:2f:e6:63:2a:97:1f:04:32:69:b2:58:
4f:03:9c:0e:64:5f:c2:e3:33:11:09:40:4b:31:48:
a4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7E:0B:64:E9:1E:DE:8A:1B:61:1B:57:02:8F:8B:12:53:B7:94:AF
X509v3 Authority Key Identifier:
keyid:7A:C6:23:EF:BF:C1:24:71:21:62:24:0C:BA:02:A4:DA:1D:4D:CE:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esYj77_BJHEhYiQMugKk2h1NzqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c74a4f-4052-4c9b-a7f8-43aa4cce3f48/1/esYj77_BJHEhYiQMugKk2h1NzqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:07:ec:84:e9:d9:9e:f8:87:49:12:5d:e9:6c:c1:03:30:47:
b0:d4:f6:dc:c1:12:67:ae:fe:cc:5e:bc:58:fe:fb:8b:76:90:
b7:cc:67:ff:bb:ef:02:cf:e0:45:b1:54:75:9c:27:87:ec:22:
ee:ef:86:ce:da:18:65:09:46:b0:13:6d:ae:15:f6:f3:32:22:
66:74:84:0a:1b:ee:ae:6f:ee:ee:80:72:6b:73:f1:2d:2a:66:
27:bf:16:f0:64:6f:66:b7:9f:57:e3:c3:da:51:ed:e9:02:b9:
95:b5:a5:b4:49:eb:bd:fb:63:ca:93:44:33:3c:61:0f:c3:44:
84:87:f3:e0:55:23:77:42:8b:0d:d0:79:56:91:0f:06:ea:56:
86:5b:95:32:ae:c2:db:26:5d:e7:e6:cc:ff:24:5b:fb:05:83:
5a:99:7a:9b:0a:15:4a:f1:82:9a:73:1d:86:f8:60:9f:db:6e:
47:3c:ba:75:4a:9e:a2:dd:ff:5d:fe:c3:69:ea:5f:b9:e2:a2:
b1:d5:62:3d:b3:fc:1d:44:cf:ca:e1:9b:3a:ca:cf:17:b2:17:
7e:34:ad:8a:62:b8:57:48:b9:95:51:11:a9:40:8d:4a:5f:b7:
c5:75:55:36:74:97:d8:a8:11:0a:ef:18:0c:f9:e5:c2:18:f2:
f5:a7:6d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:12 2026 by rpki-client