Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
File: EsqtEcXYmB2YPDAehqGs8tgRqsE.mft (raw, json)
Hash identifier: zabd42/MKlwsGXkl0I/XA/Vg3RobkMyN/cdF48+Ecso=
Subject key identifier: C6:E5:62:EE:4F:65:3A:54:39:76:3D:05:9D:EC:89:BE:72:A4:B5:12
Authority key identifier: 12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1
Certificate issuer: /CN=12caad11c5d8981d983c301e86a1acf2d811aac1
Certificate serial: 019D39AE960629B9F1AF6F7FC33E0C85281E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
Manifest number: 128C
Signing time: Sun 29 Mar 2026 13:00:36 +0000
Manifest this update: Sun 29 Mar 2026 13:00:36 +0000
Manifest next update: Mon 30 Mar 2026 13:00:36 +0000
Files and hashes: 1: EsqtEcXYmB2YPDAehqGs8tgRqsE.crl (hash: vUUh7XayBznslCedbcTiL/0Cef5xg1gETiVQwQVQK4s=)
2: fWvJKSqx17IpwOZP-DnMdVD05bA.roa (hash: a2shhv3zQfZlWKQCMJwiD1YrWh6DtVIVP13FjzeqLCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:96:06:29:b9:f1:af:6f:7f:c3:3e:0c:85:28:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12caad11c5d8981d983c301e86a1acf2d811aac1
Validity
Not Before: Mar 29 13:00:36 2026 GMT
Not After : Mar 30 13:00:36 2026 GMT
Subject: CN=c6e562ee4f653a5439763d059dec89be72a4b512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:25:4e:33:88:3a:cb:b7:63:bd:fe:c6:5c:1a:
ad:d1:05:53:a8:ff:68:46:d3:bf:c8:53:dc:67:d3:
b3:15:e4:64:56:30:b6:14:69:87:24:af:1f:60:52:
f1:f4:c5:55:0f:04:44:fb:a8:ba:66:1e:12:f6:87:
5a:47:21:69:37:37:2a:c2:59:e7:06:03:bc:43:3d:
65:68:f3:f9:ee:9d:41:c3:14:55:38:d4:fc:db:ae:
10:38:9b:55:e7:b8:a4:fa:c4:cc:cc:02:9a:3b:60:
a9:cf:6d:31:4c:b4:33:30:5c:13:d7:03:9d:4c:49:
5f:9a:47:da:39:2d:1d:eb:ca:c7:81:19:a8:01:f0:
de:fe:0a:14:25:e7:42:6e:d3:4d:9e:92:4c:aa:93:
d8:53:46:00:84:2f:93:d3:ef:65:ef:5f:f1:5b:1d:
4e:f0:5c:a5:72:76:80:33:56:6c:10:00:8e:20:1e:
4d:c4:3a:f7:35:a6:18:bd:bd:4a:b7:14:80:f3:12:
6c:ac:9c:86:1e:b7:f1:c8:99:03:e6:2b:28:41:30:
53:87:f3:32:46:37:fd:f0:af:22:03:70:c4:0f:92:
3e:39:65:2d:1a:b0:e3:82:64:6d:64:a6:01:64:a7:
42:c7:f3:a1:94:5d:1a:3c:56:9f:66:d9:a6:d2:03:
0b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E5:62:EE:4F:65:3A:54:39:76:3D:05:9D:EC:89:BE:72:A4:B5:12
X509v3 Authority Key Identifier:
keyid:12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:74:cd:fb:f2:6a:30:cb:db:18:db:cc:b5:31:1c:19:ab:17:
d9:ba:4d:68:78:d6:c9:dc:4d:db:08:1a:92:ea:59:20:56:fe:
d4:1e:ba:6d:f1:7a:c6:aa:b0:1a:d3:3f:fb:41:03:3a:55:46:
bd:db:cb:f9:a4:06:c1:23:a5:ac:4a:bc:9b:42:7e:41:48:00:
99:67:a2:f7:57:4b:cb:2d:1d:c6:5b:65:e1:0f:e0:2a:cd:21:
8c:9f:0e:7d:f6:0e:92:3f:fb:78:a2:76:68:ed:0d:d9:df:19:
c3:0d:f4:1d:f1:d1:b1:47:44:8a:81:96:8a:8d:b9:07:8e:6a:
6b:e0:40:f5:c3:ee:24:e2:4d:79:3c:0b:39:68:5f:8a:cf:6f:
64:fe:9d:fe:a9:42:d1:36:2e:cb:33:2c:a6:be:22:38:8f:a7:
d4:74:6b:99:2d:a2:29:9f:b5:16:8a:88:71:e9:d1:5d:20:e4:
77:48:eb:28:72:ec:dd:54:12:0d:84:1a:b7:06:ee:c3:3d:d7:
4f:7f:1a:96:43:bd:72:d3:ee:9a:87:67:84:0f:42:0f:d9:b4:
0c:59:38:6d:30:9e:25:06:03:91:0d:33:70:55:2c:4a:0b:ae:
33:37:70:18:83:92:aa:f2:cc:0d:4b:ec:2d:8d:db:96:8b:cf:
39:57:14:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:43 2026 by rpki-client