Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
File: eSf20AYql2a9WPDQdcTw0QJX5gY.mft (raw, json)
Hash identifier: KAYy1c5BBOWEJl4okk5N93uDjpXlIgykdHCf6Zxa2zk=
Subject key identifier: EA:C2:76:90:7A:22:43:FB:99:FF:90:B2:8D:6E:5F:A5:52:68:0B:6A
Authority key identifier: 79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06
Certificate issuer: /CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
Certificate serial: 019D50A503DC503FEA770E6F78C074A5D2A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
Manifest number: 0488
Signing time: Fri 03 Apr 2026 00:01:24 +0000
Manifest this update: Fri 03 Apr 2026 00:01:24 +0000
Manifest next update: Sat 04 Apr 2026 00:01:24 +0000
Files and hashes: 1: dwwuDg-_Lj4wB527-ou6-S3pBWg.asa (hash: rYIJNLZplB93Gf88vCn/UEDs9B2NpoWxqEIzhJdh1xw=)
2: eSf20AYql2a9WPDQdcTw0QJX5gY.crl (hash: YY7jDBMXAiYQcfaORBhDQl8/dvxRxSysyhgPSz3Ce4U=)
3: nGbIVWhps3UHxhstB6YJ_xOK-Bc.roa (hash: UAJt17CKwokf5TiXBHPy3xcrVlpfB1owep0x5mOCX4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Apr 2026 00:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:50:a5:03:dc:50:3f:ea:77:0e:6f:78:c0:74:a5:d2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7927f6d0062a9766bd58f0d075c4f0d10257e606
Validity
Not Before: Apr 3 00:01:24 2026 GMT
Not After : Apr 4 00:01:24 2026 GMT
Subject: CN=eac276907a2243fb99ff90b28d6e5fa552680b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:b9:6d:4e:3f:2c:80:73:71:83:54:d1:0e:
3b:4a:9b:7a:80:41:23:97:c8:3c:24:40:22:90:99:
e1:22:95:51:36:c7:81:a1:18:16:71:d8:d9:b5:b8:
43:06:6d:78:a0:d9:9f:6c:da:aa:55:07:65:40:82:
a0:71:f5:b2:ce:88:4b:0b:9f:98:82:29:a4:ac:a9:
bc:a9:5e:2f:c7:20:55:83:64:33:80:30:df:79:1e:
0f:21:b5:cd:4f:08:06:71:3f:a1:b9:ff:d7:c4:64:
83:9c:f8:b0:58:be:fa:41:cd:06:00:11:64:13:56:
84:df:df:ad:c0:9b:65:9e:6d:a1:b1:d5:4e:a4:06:
9e:67:df:4b:cd:30:1c:25:5a:64:8b:0c:5d:84:32:
12:bf:bd:c3:cb:f7:23:f9:4c:40:c0:e7:35:e0:6e:
00:49:57:6d:15:bc:49:b8:dd:f0:d9:fe:cd:86:aa:
77:61:38:03:2c:da:d9:6b:43:56:c0:82:03:bf:9c:
95:3a:57:cd:6e:7a:00:a8:50:89:f3:a8:8f:95:65:
f2:a4:d0:7a:44:8a:ed:3f:6b:b7:dc:a7:b2:4b:27:
e2:fa:f3:37:c1:6b:c9:69:d0:56:45:2c:95:ea:f8:
17:49:84:2a:16:da:e5:a0:59:47:95:b6:28:12:00:
11:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C2:76:90:7A:22:43:FB:99:FF:90:B2:8D:6E:5F:A5:52:68:0B:6A
X509v3 Authority Key Identifier:
keyid:79:27:F6:D0:06:2A:97:66:BD:58:F0:D0:75:C4:F0:D1:02:57:E6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSf20AYql2a9WPDQdcTw0QJX5gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6a9b1-552b-46ec-a31b-c5d0cb7b7df5/1/eSf20AYql2a9WPDQdcTw0QJX5gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ac:60:e7:b4:8e:30:4d:52:e3:1d:96:48:59:58:d3:36:e1:
2d:db:9e:68:f9:19:35:ad:9c:2e:ed:38:b5:14:a3:9a:e0:c0:
b6:56:f7:62:58:69:20:a2:3a:10:7a:e5:0c:69:bf:f9:24:ba:
e4:67:d6:67:7e:1b:66:52:f5:b9:5b:2e:4a:94:4e:34:94:8d:
0c:e8:5a:35:73:50:54:d3:55:0d:27:d4:b1:42:40:d6:ee:00:
f0:d5:f6:58:cb:0f:9d:c7:5e:3a:bb:4c:5d:81:d7:22:3e:b3:
e2:db:20:0d:da:2e:f6:ef:84:8a:aa:61:6f:5e:e8:b5:c2:56:
9b:9d:e5:57:28:3f:78:97:1d:83:57:2e:d7:0c:69:74:fa:47:
00:18:88:b7:45:8d:eb:d8:19:7e:df:c9:db:23:a8:2a:0e:c8:
fc:61:a9:51:72:81:a7:53:d3:4e:af:d5:41:ea:aa:a8:24:25:
ff:b6:f3:a7:58:8f:e7:ea:ce:32:6d:4f:45:57:fc:ff:7e:e0:
d5:ba:ac:48:84:ea:37:fe:56:7e:2a:ff:c3:49:ad:15:1d:83:
68:a5:54:22:fb:98:1a:61:aa:1f:d0:67:a9:e5:61:d8:8a:1c:
ee:43:9e:df:7e:0d:91:f5:21:b5:7e:f4:ca:32:c4:a2:70:bc:
d4:f5:cd:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ1QpQPcUD/qdw5veMB0pdKmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MjdmNmQwMDYyYTk3NjZiZDU4ZjBkMDc1YzRmMGQxMDI1
N2U2MDYwHhcNMjYwNDAzMDAwMTI0WhcNMjYwNDA0MDAwMTI0WjAzMTEwLwYDVQQD
EyhlYWMyNzY5MDdhMjI0M2ZiOTlmZjkwYjI4ZDZlNWZhNTUyNjgwYjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCe5bU4/LIBzcYNU0Q47Spt6gEEj
l8g8JEAikJnhIpVRNseBoRgWcdjZtbhDBm14oNmfbNqqVQdlQIKgcfWyzohLC5+Y
gimkrKm8qV4vxyBVg2QzgDDfeR4PIbXNTwgGcT+huf/XxGSDnPiwWL76Qc0GABFk
E1aE39+twJtlnm2hsdVOpAaeZ99LzTAcJVpkiwxdhDISv73Dy/cj+UxAwOc14G4A
SVdtFbxJuN3w2f7Nhqp3YTgDLNrZa0NWwIIDv5yVOlfNbnoAqFCJ86iPlWXypNB6
RIrtP2u33KeySyfi+vM3wWvJadBWRSyV6vgXSYQqFtrloFlHlbYoEgAR4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrCdpB6IkP7mf+Qso1uX6VSaAtqMB8GA1UdIwQY
MBaAFHkn9tAGKpdmvVjw0HXE8NECV+YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVNmMjBBWXFsMmE5V1BEUWRjVHcwUUpYNWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kNmE5YjEtNTUyYi00NmVjLWEzMWIt
YzVkMGNiN2I3ZGY1LzEvZVNmMjBBWXFsMmE5V1BEUWRjVHcwUUpYNWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9kNmE5YjEtNTUyYi00NmVjLWEzMWItYzVkMGNiN2I3ZGY1
LzEvZVNmMjBBWXFsMmE5V1BEUWRjVHcwUUpYNWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqxg57SO
ME1S4x2WSFlY0zbhLdueaPkZNa2cLu04tRSjmuDAtlb3YlhpIKI6EHrlDGm/+SS6
5GfWZ34bZlL1uVsuSpRONJSNDOhaNXNQVNNVDSfUsUJA1u4A8NX2WMsPncdeOrtM
XYHXIj6z4tsgDdou9u+Eiqphb17otcJWm53lVyg/eJcdg1cu1wxpdPpHABiIt0WN
69gZft/J2yOoKg7I/GGpUXKBp1PTTq/VQeqqqCQl/7bzp1iP5+rOMm1PRVf8/37g
1bqsSITqN/5Wfir/w0mtFR2DaKVUIvuYGmGqH9BnqeVh2Ioc7kOe334NkfUhtX70
yjLEonC81PXNpg==
-----END CERTIFICATE-----
Generated at Fri Apr 3 08:54:59 2026 by rpki-client