Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
File: Es2a3RYTfourmNeOKjNgvIvW8PE.mft (raw, json)
Hash identifier: RZ//xEU8/1RTCSecN/ExCCTFqv5uuyK4W+UpmyJdBbY=
Subject key identifier: D1:E5:7D:06:4F:A3:E1:62:DF:15:D2:26:10:CA:94:EF:26:3A:E5:81
Authority key identifier: 12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
Certificate issuer: /CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Certificate serial: 019D3789543C6E90E844C1198B48DC4A67E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 03:00:39 +0000
Manifest this update: Sun 29 Mar 2026 03:00:39 +0000
Manifest next update: Mon 30 Mar 2026 03:00:39 +0000
Files and hashes: 1: 5PuKtCw0QFU1GY0J5UpP_xHtRIk.roa (hash: j1mFIiv449G4hXYGvmw9c0Kk7V0VX9Tiu6ckBGnez8Y=)
2: Es2a3RYTfourmNeOKjNgvIvW8PE.crl (hash: zcHzNeFP5ZpV6DnseBOvXQ/ff/12FDtNdnu0Iex+zCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:54:3c:6e:90:e8:44:c1:19:8b:48:dc:4a:67:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Validity
Not Before: Mar 29 03:00:39 2026 GMT
Not After : Mar 30 03:00:39 2026 GMT
Subject: CN=d1e57d064fa3e162df15d22610ca94ef263ae581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b7:59:4e:66:1c:d6:18:e1:d1:0b:46:10:74:
26:8a:fc:8c:68:63:24:58:64:4f:00:dc:11:18:ee:
76:a9:2b:c7:c1:d3:72:bc:3b:21:94:ca:d9:57:98:
a2:b2:de:36:71:ea:55:f9:26:88:40:d0:c6:8f:f1:
96:24:20:92:51:d6:f0:7b:92:84:3e:44:99:ed:be:
52:e5:4c:d8:4e:86:dc:c8:3f:d7:a6:d7:30:84:3a:
0a:6d:6c:0e:09:e5:17:08:c8:83:43:df:20:13:53:
bf:a4:a1:c3:03:69:1f:b3:bd:df:34:78:93:5b:4e:
4e:36:08:9a:2c:30:34:86:44:b0:fc:a1:c6:0c:07:
db:a8:20:19:1b:33:81:ea:bf:45:c9:d1:fa:8f:2c:
2b:bb:74:c0:ee:f5:aa:35:3d:35:e8:9c:92:c7:05:
40:cd:24:32:84:c7:5a:b1:e8:bf:64:8a:13:e2:bc:
d1:ce:0a:ba:f1:0a:79:5c:8e:fa:e0:79:46:5e:c5:
db:24:25:c3:3f:10:c2:2e:90:cf:d0:1f:fa:c8:9c:
20:11:4e:b8:3d:88:85:55:ab:95:84:5f:7b:ec:c7:
a1:8f:87:39:2e:80:bb:d7:fa:19:c1:96:e9:47:d0:
3c:3b:9b:53:28:1a:71:f4:63:cb:e5:4f:c5:ab:8a:
07:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E5:7D:06:4F:A3:E1:62:DF:15:D2:26:10:CA:94:EF:26:3A:E5:81
X509v3 Authority Key Identifier:
keyid:12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:08:ab:54:8e:7e:51:e5:c6:e4:06:7c:fd:f8:8b:6c:05:7f:
e2:97:ee:39:0b:6d:0b:c5:87:b3:f7:01:3b:08:19:a9:da:12:
da:e8:11:01:10:0b:7a:a2:e6:42:1c:57:da:26:79:b7:81:b6:
e7:cf:ce:f0:e8:83:a6:fd:9c:7c:b9:37:26:bd:09:eb:b6:ad:
45:d9:c5:15:bc:ce:1e:96:63:75:cc:5f:9c:79:5a:1b:6d:ba:
26:cb:91:4d:e3:15:37:62:e8:37:70:0e:4f:e1:d6:ce:7f:da:
89:36:c9:12:43:84:40:6d:5f:68:ba:0e:43:e1:37:d6:80:35:
55:f3:6c:f4:47:ad:1d:b0:d3:3a:51:fe:ce:2a:fa:15:3d:38:
0b:3d:5e:25:3b:65:31:c0:97:39:ab:3d:b4:8e:c9:ad:fd:24:
da:bc:40:21:f2:6a:14:50:b4:4b:e3:10:3f:36:27:62:7e:ac:
39:01:db:28:74:44:ab:b2:00:1a:4f:87:85:a5:45:09:a1:7a:
65:4c:8f:4e:cc:02:1c:07:34:d7:94:b6:55:bc:24:f1:aa:20:
cc:8a:44:c0:5a:59:17:76:19:43:30:94:ec:fa:54:b4:ef:b3:
e7:d9:91:77:6e:41:65:d9:cc:f9:7f:6d:38:ea:21:fb:01:f4:
0c:07:3c:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iVQ8bpDoRMEZi0jcSmfkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyY2Q5YWRkMTYxMzdlOGJhYjk4ZDc4ZTJhMzM2MGJjOGJk
NmYwZjEwHhcNMjYwMzI5MDMwMDM5WhcNMjYwMzMwMDMwMDM5WjAzMTEwLwYDVQQD
EyhkMWU1N2QwNjRmYTNlMTYyZGYxNWQyMjYxMGNhOTRlZjI2M2FlNTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LdZTmYc1hjh0QtGEHQmivyMaGMk
WGRPANwRGO52qSvHwdNyvDshlMrZV5iist42cepV+SaIQNDGj/GWJCCSUdbwe5KE
PkSZ7b5S5UzYTobcyD/XptcwhDoKbWwOCeUXCMiDQ98gE1O/pKHDA2kfs73fNHiT
W05ONgiaLDA0hkSw/KHGDAfbqCAZGzOB6r9FydH6jywru3TA7vWqNT016JySxwVA
zSQyhMdasei/ZIoT4rzRzgq68Qp5XI764HlGXsXbJCXDPxDCLpDP0B/6yJwgEU64
PYiFVauVhF977Mehj4c5LoC71/oZwZbpR9A8O5tTKBpx9GPL5U/Fq4oHjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHlfQZPo+Fi3xXSJhDKlO8mOuWBMB8GA1UdIwQY
MBaAFBLNmt0WE36Lq5jXjiozYLyL1vDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXMyYTNSWVRmb3VybU5lT0tqTmd2SXZXOFBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81N2NjNmUtOGIxYS00ODI3LTk5OWMt
MTcyZGY2YmNkNDViLzEvRXMyYTNSWVRmb3VybU5lT0tqTmd2SXZXOFBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81N2NjNmUtOGIxYS00ODI3LTk5OWMtMTcyZGY2YmNkNDVi
LzEvRXMyYTNSWVRmb3VybU5lT0tqTmd2SXZXOFBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwirVI5+
UeXG5AZ8/fiLbAV/4pfuOQttC8WHs/cBOwgZqdoS2ugRARALeqLmQhxX2iZ5t4G2
58/O8OiDpv2cfLk3Jr0J67atRdnFFbzOHpZjdcxfnHlaG226JsuRTeMVN2LoN3AO
T+HWzn/aiTbJEkOEQG1faLoOQ+E31oA1VfNs9EetHbDTOlH+zir6FT04Cz1eJTtl
McCXOas9tI7Jrf0k2rxAIfJqFFC0S+MQPzYnYn6sOQHbKHREq7IAGk+HhaVFCaF6
ZUyPTswCHAc015S2Vbwk8aogzIpEwFpZF3YZQzCU7PpUtO+z59mRd25BZdnM+X9t
OOoh+wH0DAc8JA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:20 2026 by rpki-client