Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
File: Es2a3RYTfourmNeOKjNgvIvW8PE.mft (raw, json)
Hash identifier: rwXBCvECSkh6XKZOaqwIvfDl8x7TTanL1bCPn/ahKCc=
Subject key identifier: 36:03:D7:BE:08:6B:A4:72:E1:4A:68:C4:FB:F7:CF:E5:22:E8:B7:FF
Authority key identifier: 12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
Certificate issuer: /CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Certificate serial: 019EB9C602B3FADF8262C50E438983B7F2D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
Manifest number: 1959
Signing time: Fri 12 Jun 2026 03:00:22 +0000
Manifest this update: Fri 12 Jun 2026 03:00:22 +0000
Manifest next update: Sat 13 Jun 2026 03:00:22 +0000
Files and hashes: 1: 5PuKtCw0QFU1GY0J5UpP_xHtRIk.roa (hash: j1mFIiv449G4hXYGvmw9c0Kk7V0VX9Tiu6ckBGnez8Y=)
2: Es2a3RYTfourmNeOKjNgvIvW8PE.crl (hash: WCCJZ2O31Mko6sl1lYgqQrmS7MCyOP4xSvunAA0teM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c6:02:b3:fa:df:82:62:c5:0e:43:89:83:b7:f2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Validity
Not Before: Jun 12 03:00:22 2026 GMT
Not After : Jun 13 03:00:22 2026 GMT
Subject: CN=3603d7be086ba472e14a68c4fbf7cfe522e8b7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f6:42:8e:3a:34:02:e8:83:63:dc:f7:d7:de:
94:26:56:32:44:06:2e:e5:7b:90:b7:89:a0:19:9c:
9f:52:0e:b4:05:3b:a1:35:2c:60:95:00:5b:17:31:
a3:6c:9a:e0:be:d8:e0:bd:38:73:3b:a3:8d:22:08:
60:a6:51:96:3d:45:8f:c4:8f:3e:99:42:52:7b:e0:
a0:9b:ca:bf:90:04:db:6c:b5:e1:16:3b:94:d9:90:
b5:92:35:9e:d5:98:33:32:e4:6c:21:8e:a5:d7:7f:
23:37:3f:55:3f:c6:b7:9c:ff:8c:f2:b3:1a:e5:33:
41:3b:a9:06:e6:c2:f9:e6:cf:1f:48:df:ce:56:1d:
fc:65:f1:81:53:9c:90:2e:eb:a3:46:de:35:25:4d:
2b:32:bc:29:b3:57:bb:9a:e0:75:70:58:12:45:d4:
c4:7b:4c:b0:56:1e:93:23:10:2b:b5:df:2c:1a:6c:
7a:3d:21:1c:71:a5:1a:d6:72:b4:9a:81:1d:f6:2c:
9c:6a:9a:8b:b3:ce:5c:e4:e3:1e:43:de:e5:1a:ba:
08:0f:1e:21:a4:ca:23:2d:cd:8e:55:fd:c4:fa:3e:
b5:f3:88:1c:ba:40:ad:26:21:8e:d1:c9:38:58:0e:
ea:65:18:70:d2:35:63:25:d9:26:70:8f:b0:a4:e0:
85:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:03:D7:BE:08:6B:A4:72:E1:4A:68:C4:FB:F7:CF:E5:22:E8:B7:FF
X509v3 Authority Key Identifier:
keyid:12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:bb:ad:49:c2:6f:0c:06:8f:5b:e7:04:c6:19:5d:61:a6:2e:
60:36:b2:93:ca:14:d4:5a:29:86:95:e6:bf:6b:1d:f3:53:db:
a6:30:2f:f4:25:4d:d6:4e:c3:dc:1d:45:a0:58:e3:00:d5:c0:
ce:26:ff:5b:96:b6:85:ca:d8:8d:31:f4:82:16:63:8c:f5:af:
ec:e8:25:4e:26:66:1a:6e:e2:d8:a5:07:a2:78:b3:51:f1:f0:
40:c4:a6:e4:67:33:59:66:0d:ed:7e:dc:d8:38:d6:67:95:16:
69:d7:23:7c:37:74:76:ed:f2:00:e5:3b:5b:ec:29:df:25:e5:
06:3e:5b:6c:a4:78:e0:47:e0:bf:3b:0d:60:ea:5a:35:63:a9:
d1:7f:54:d5:9d:c6:13:a8:e1:92:00:4d:5f:18:48:47:70:6e:
22:f2:c3:b2:18:e5:8a:8d:f5:72:48:4d:87:50:50:28:59:fd:
b1:30:1f:94:09:29:ec:59:7e:f4:35:3c:8c:76:0b:7e:ce:4c:
f9:a3:35:b6:8e:ac:04:2b:94:bb:6d:3b:eb:7a:3c:52:dd:0c:
a4:5b:6a:14:60:cc:e4:7d:1d:66:24:c8:2f:53:40:83:a5:de:
83:d4:c0:4a:4f:d3:7f:8d:a7:aa:c8:5c:7c:70:1e:97:4f:63:
71:d4:fa:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65xgKz+t+CYsUOQ4mDt/LQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyY2Q5YWRkMTYxMzdlOGJhYjk4ZDc4ZTJhMzM2MGJjOGJk
NmYwZjEwHhcNMjYwNjEyMDMwMDIyWhcNMjYwNjEzMDMwMDIyWjAzMTEwLwYDVQQD
EygzNjAzZDdiZTA4NmJhNDcyZTE0YTY4YzRmYmY3Y2ZlNTIyZThiN2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vZCjjo0AuiDY9z3196UJlYyRAYu
5XuQt4mgGZyfUg60BTuhNSxglQBbFzGjbJrgvtjgvThzO6ONIghgplGWPUWPxI8+
mUJSe+Cgm8q/kATbbLXhFjuU2ZC1kjWe1ZgzMuRsIY6l138jNz9VP8a3nP+M8rMa
5TNBO6kG5sL55s8fSN/OVh38ZfGBU5yQLuujRt41JU0rMrwps1e7muB1cFgSRdTE
e0ywVh6TIxArtd8sGmx6PSEccaUa1nK0moEd9iycapqLs85c5OMeQ97lGroIDx4h
pMojLc2OVf3E+j6184gcukCtJiGO0ck4WA7qZRhw0jVjJdkmcI+wpOCFkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYD174Ia6Ry4UpoxPv3z+Ui6Lf/MB8GA1UdIwQY
MBaAFBLNmt0WE36Lq5jXjiozYLyL1vDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXMyYTNSWVRmb3VybU5lT0tqTmd2SXZXOFBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81N2NjNmUtOGIxYS00ODI3LTk5OWMt
MTcyZGY2YmNkNDViLzEvRXMyYTNSWVRmb3VybU5lT0tqTmd2SXZXOFBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81N2NjNmUtOGIxYS00ODI3LTk5OWMtMTcyZGY2YmNkNDVi
LzEvRXMyYTNSWVRmb3VybU5lT0tqTmd2SXZXOFBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnLutScJv
DAaPW+cExhldYaYuYDayk8oU1FophpXmv2sd81PbpjAv9CVN1k7D3B1FoFjjANXA
zib/W5a2hcrYjTH0ghZjjPWv7OglTiZmGm7i2KUHonizUfHwQMSm5GczWWYN7X7c
2DjWZ5UWadcjfDd0du3yAOU7W+wp3yXlBj5bbKR44EfgvzsNYOpaNWOp0X9U1Z3G
E6jhkgBNXxhIR3BuIvLDshjlio31ckhNh1BQKFn9sTAflAkp7Fl+9DU8jHYLfs5M
+aM1to6sBCuUu20763o8Ut0MpFtqFGDM5H0dZiTIL1NAg6Xeg9TASk/Tf42nqshc
fHAel09jcdT6rw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 07:04:00 2026 by rpki-client