Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
File: EsCzmbynzX_KI2gTkGefXMqVueE.mft (raw, json)
Hash identifier: pBchjrGmI6OMOpFov+sol5YZpXmzj/jKTc6drUJlb70=
Subject key identifier: 34:E3:87:2E:E2:DC:08:1F:FE:3B:DD:3F:3B:60:23:DA:C6:66:B8:48
Authority key identifier: 12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
Certificate issuer: /CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Certificate serial: 019D3AF821B7EE6688D07BE20C3876BEC33E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
Manifest number: 15FE
Signing time: Sun 29 Mar 2026 19:00:33 +0000
Manifest this update: Sun 29 Mar 2026 19:00:33 +0000
Manifest next update: Mon 30 Mar 2026 19:00:33 +0000
Files and hashes: 1: EsCzmbynzX_KI2gTkGefXMqVueE.crl (hash: xqUHT17PxUS/bFlqmLRNUz8eQ72eC5kmSr5Qr7BeP+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:f8:21:b7:ee:66:88:d0:7b:e2:0c:38:76:be:c3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Validity
Not Before: Mar 29 19:00:33 2026 GMT
Not After : Mar 30 19:00:33 2026 GMT
Subject: CN=34e3872ee2dc081ffe3bdd3f3b6023dac666b848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:47:fa:b5:e4:74:08:71:bd:9f:63:bf:54:
58:16:05:92:5d:40:07:c9:64:62:e4:ce:58:3a:ba:
ff:ef:d6:cc:3a:7f:7f:9c:e7:81:4e:b8:2d:91:00:
97:5b:13:a9:42:e0:4d:ef:70:6e:65:4b:db:11:5f:
db:bb:aa:f1:ad:4f:7b:66:2c:84:8a:61:bc:4f:1a:
ef:fc:c4:94:e9:19:4b:a7:f9:a5:47:eb:83:61:1d:
ea:ed:fd:11:1d:cc:af:fe:43:78:78:c7:2d:d5:ff:
83:37:4e:f3:36:b6:b2:b5:e0:79:5d:29:c6:cf:a7:
0c:9a:e4:8e:32:57:da:3b:f0:1a:bb:16:f7:f4:2a:
52:d6:a8:c7:36:e2:e5:e5:a6:b9:9e:81:96:e1:5f:
ae:7f:0b:8e:32:67:7f:4d:d6:b0:06:3a:c1:02:72:
b5:68:52:ce:a6:5e:0c:51:03:8d:a1:59:49:43:4b:
f6:f3:b6:91:c2:af:05:63:3d:e3:76:f5:d8:92:57:
00:a6:7c:eb:dc:d6:93:be:07:a0:d7:b4:d5:38:6b:
d6:3c:d7:a0:cd:1a:14:6f:df:4b:75:06:9e:7d:54:
25:2e:da:27:72:61:19:26:73:2a:2e:02:68:96:20:
55:a5:41:6e:6d:69:4d:10:77:c2:f3:80:67:76:83:
7a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E3:87:2E:E2:DC:08:1F:FE:3B:DD:3F:3B:60:23:DA:C6:66:B8:48
X509v3 Authority Key Identifier:
keyid:12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:15:ad:34:b0:02:f1:76:f8:59:ad:5a:83:06:6b:aa:6a:d7:
16:bd:7b:e4:3c:41:41:ad:5f:93:e7:a2:40:3f:6e:54:b2:f4:
62:93:fa:f7:1a:9a:a4:80:6c:b3:58:2f:ef:7a:42:38:a1:4e:
fd:f5:4d:ac:03:b5:eb:1d:71:65:9a:7c:88:bd:ee:0d:b9:bf:
a9:32:80:e7:e6:0f:ab:1b:72:e1:e0:22:bd:cc:fd:e2:c7:38:
13:35:7d:28:d9:fd:a3:3a:4d:1e:46:1a:8e:c0:a7:3c:84:91:
56:cb:3f:d2:ef:68:ca:1f:6c:80:1e:03:e2:a6:e7:a3:2a:85:
e1:7d:32:34:3e:e1:d8:95:e7:6d:35:64:f7:9d:11:e9:4d:2f:
87:5d:29:ad:05:11:82:5d:b3:65:07:95:6b:f8:00:4b:29:ac:
3d:d6:83:4a:58:d7:13:da:fd:b5:bc:5c:38:a2:10:60:94:81:
3a:19:7b:1a:ce:3f:30:34:5d:af:87:1f:03:30:71:a5:f4:b1:
13:4e:ea:40:ab:e9:4d:0e:c9:18:75:0f:e6:1a:df:f1:1b:c2:
b7:54:2d:a7:5d:d4:95:ff:5c:16:10:a3:80:86:2e:a4:93:8d:
e3:1d:a7:be:5c:ee:07:d1:d7:c6:98:db:27:c4:2b:a0:63:ac:
16:c7:17:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06+CG37maI0HviDDh2vsM+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYzBiMzk5YmNhN2NkN2ZjYTIzNjgxMzkwNjc5ZjVjY2E5
NWI5ZTEwHhcNMjYwMzI5MTkwMDMzWhcNMjYwMzMwMTkwMDMzWjAzMTEwLwYDVQQD
EygzNGUzODcyZWUyZGMwODFmZmUzYmRkM2YzYjYwMjNkYWM2NjZiODQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSVH+rXkdAhxvZ9jv1RYFgWSXUAH
yWRi5M5YOrr/79bMOn9/nOeBTrgtkQCXWxOpQuBN73BuZUvbEV/bu6rxrU97ZiyE
imG8Txrv/MSU6RlLp/mlR+uDYR3q7f0RHcyv/kN4eMct1f+DN07zNrayteB5XSnG
z6cMmuSOMlfaO/Aauxb39CpS1qjHNuLl5aa5noGW4V+ufwuOMmd/TdawBjrBAnK1
aFLOpl4MUQONoVlJQ0v287aRwq8FYz3jdvXYklcApnzr3NaTvgeg17TVOGvWPNeg
zRoUb99LdQaefVQlLtoncmEZJnMqLgJoliBVpUFubWlNEHfC84BndoN64wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTjhy7i3Agf/jvdPztgI9rGZrhIMB8GA1UdIwQY
MBaAFBLAs5m8p81/yiNoE5Bnn1zKlbnhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXNDem1ieW56WF9LSTJnVGtHZWZYTXFWdWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iMGNhOWUtN2NjNi00YWRjLThiZTQt
ZjRlZDI2ZTQ0Yzk3LzEvRXNDem1ieW56WF9LSTJnVGtHZWZYTXFWdWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9iMGNhOWUtN2NjNi00YWRjLThiZTQtZjRlZDI2ZTQ0Yzk3
LzEvRXNDem1ieW56WF9LSTJnVGtHZWZYTXFWdWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBWtNLAC
8Xb4Wa1agwZrqmrXFr175DxBQa1fk+eiQD9uVLL0YpP69xqapIBss1gv73pCOKFO
/fVNrAO16x1xZZp8iL3uDbm/qTKA5+YPqxty4eAivcz94sc4EzV9KNn9ozpNHkYa
jsCnPISRVss/0u9oyh9sgB4D4qbnoyqF4X0yND7h2JXnbTVk950R6U0vh10prQUR
gl2zZQeVa/gASymsPdaDSljXE9r9tbxcOKIQYJSBOhl7Gs4/MDRdr4cfAzBxpfSx
E07qQKvpTQ7JGHUP5hrf8RvCt1Qtp13Ulf9cFhCjgIYupJON4x2nvlzuB9HXxpjb
J8QroGOsFscXpw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:32:13 2026 by rpki-client