Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
File: EsMFQE6AtaTXDSHauG_FtrgBqLg.mft (raw, json)
Hash identifier: jcIjkoCdLSZbFK6a2AxweP7nHE9ihb7dtxhEWn4k02Q=
Subject key identifier: B4:1A:52:39:E1:6D:34:27:52:0E:BC:24:71:E5:92:75:1F:D3:E1:C3
Authority key identifier: 12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8
Certificate issuer: /CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8
Certificate serial: 019DCFE3EE4C70F09A422B3F4299FC1F5C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 17:01:54 +0000
Manifest this update: Mon 27 Apr 2026 17:01:54 +0000
Manifest next update: Tue 28 Apr 2026 17:01:54 +0000
Files and hashes: 1: 3nfvY0I0VrbwO32y2-kd0ubWfRg.roa (hash: f5ve+22gvtdJ/a/eB+O5WK4SdRb1WOcwjSGFSIVWpT4=)
2: EsMFQE6AtaTXDSHauG_FtrgBqLg.crl (hash: 7YTngU2x45ChfoTj9CvR2EhrsxIBs2C+7UsxIciceSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:ee:4c:70:f0:9a:42:2b:3f:42:99:fc:1f:5c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8
Validity
Not Before: Apr 27 17:01:54 2026 GMT
Not After : Apr 28 17:01:54 2026 GMT
Subject: CN=b41a5239e16d3427520ebc2471e592751fd3e1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:09:ea:f2:9b:9f:a9:86:60:ab:5a:16:26:ac:
ba:2f:91:9b:33:93:cd:6d:fa:6f:9f:06:7a:37:c8:
45:e5:f2:4e:ab:cd:7a:dc:b8:89:7f:97:0a:63:13:
94:44:c1:a6:16:74:80:8b:b0:5a:b8:d6:27:5b:d4:
0e:18:c2:2f:4d:43:20:de:09:dc:e8:9c:3e:5e:dd:
55:a4:80:2a:5d:ac:2b:01:f4:68:a6:0b:6a:6a:da:
f0:3e:4c:9b:14:dc:57:b1:ec:a1:04:12:49:91:8a:
63:99:66:a8:2a:71:ee:d9:40:3a:5a:3d:05:21:0d:
9c:59:94:99:f9:7f:81:05:30:58:0e:16:93:94:1b:
3d:18:6d:b7:aa:0f:1f:2e:af:d7:5e:6f:4d:24:77:
92:a3:4e:f6:c9:1d:55:b8:9c:0e:6c:9e:7a:42:8d:
a4:20:2f:88:a6:31:f2:65:68:13:80:dd:45:8f:4c:
ed:b6:79:ed:0a:de:7e:fa:ad:66:1d:52:25:98:1d:
50:34:a9:9a:07:8e:ba:07:87:ac:bd:14:55:b1:46:
d7:b4:70:f2:02:29:74:60:1d:01:83:52:b4:d8:0e:
f3:73:bd:d1:d6:ee:89:0f:0b:cb:f7:bf:7a:d2:2a:
13:32:b8:e6:a5:b1:55:1a:51:e1:4b:da:0b:29:a2:
41:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1A:52:39:E1:6D:34:27:52:0E:BC:24:71:E5:92:75:1F:D3:E1:C3
X509v3 Authority Key Identifier:
keyid:12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:27:4a:a5:2e:ce:2a:12:52:0e:2d:8d:48:ef:68:e2:ca:7f:
86:33:8b:40:75:70:33:8a:b8:42:fb:b8:69:fa:08:e2:05:2e:
98:58:e0:60:75:e6:c6:b5:fd:28:e0:c0:98:96:a1:70:21:66:
ce:c1:12:49:07:21:9c:e3:85:51:c7:14:b9:4a:26:eb:e3:4a:
f2:a3:67:39:d8:d7:7e:34:fe:55:fa:d8:90:ff:3d:c6:66:bf:
30:8f:9f:a9:e0:7c:55:aa:36:2b:79:2e:c5:b6:07:d0:60:9f:
57:39:24:d5:1f:f6:b2:b5:b0:8c:97:9f:00:3c:3d:a5:10:76:
3e:39:03:6a:69:ca:24:e4:a0:f0:d3:23:6d:4c:fb:cc:ed:52:
c6:80:64:b5:e8:b7:02:89:c1:1b:85:83:9b:06:0b:3b:bc:ed:
ee:c9:78:d1:1b:14:fa:39:1d:1c:b2:49:56:a3:5d:af:78:2a:
a7:03:36:a1:75:55:1b:d7:fb:57:d7:ad:25:d2:ec:ec:94:67:
d1:6a:e2:de:6d:7f:ac:80:38:44:e0:cc:c5:06:a9:08:74:37:
e5:50:c3:6a:d9:07:74:0e:b8:bf:bb:30:6f:3d:9f:a3:ab:7a:
35:54:eb:16:37:22:ff:4b:73:02:66:09:95:7e:27:88:d7:f3:
7f:9a:0f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:50:07 2026 by rpki-client