Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.mft
File: EsEUQhohU4u2vwJkmH56REyA6j4.mft (raw, json)
Hash identifier: ZVNNxbPgMezpKQC+sF5FeWx2MTFDSE33hBLaaSjUg8c=
Subject key identifier: 98:AC:D5:E9:4A:6C:55:CE:47:7D:53:32:B1:B2:90:6D:BA:73:84:2B
Authority key identifier: 12:C1:14:42:1A:21:53:8B:B6:BF:02:64:98:7E:7A:44:4C:80:EA:3E
Certificate issuer: /CN=12c114421a21538bb6bf0264987e7a444c80ea3e
Certificate serial: 01A08A8C6C148981043F764EC93A5B8BE9EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsEUQhohU4u2vwJkmH56REyA6j4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.mft
Manifest number: 0117
Signing time: Thu 10 Sep 2026 09:00:53 +0000
Manifest this update: Thu 10 Sep 2026 09:00:53 +0000
Manifest next update: Fri 11 Sep 2026 09:00:53 +0000
Files and hashes: 1: EsEUQhohU4u2vwJkmH56REyA6j4.crl (hash: aShKa2WldaZGW16Zi8aGDSzGgomRKZ6trPN5Adejedg=)
2: OR-UUzM73lSUM_hbKHEM8OHJZXo.roa (hash: kUN7qIoBO4FukILSXeAZWF7RJ65CvgOOJNH7ORJAX/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsEUQhohU4u2vwJkmH56REyA6j4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:6c:14:89:81:04:3f:76:4e:c9:3a:5b:8b:e9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c114421a21538bb6bf0264987e7a444c80ea3e
Validity
Not Before: Sep 10 09:00:53 2026 GMT
Not After : Sep 11 09:00:53 2026 GMT
Subject: CN=98acd5e94a6c55ce477d5332b1b2906dba73842b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1c:eb:cf:05:f2:8b:91:9b:cf:5f:93:f3:ab:
c4:ec:4b:0e:8a:a0:ff:a4:9f:11:80:46:8f:0d:55:
0c:55:13:d5:32:2d:0d:83:d6:df:48:29:23:d3:f6:
9b:08:c0:60:ce:72:5c:0f:3f:6f:ff:ae:f4:1d:c9:
38:33:fc:c0:cb:8e:a7:9c:b2:46:eb:65:29:9c:a6:
2b:9c:35:d1:f6:a7:a1:9f:03:28:91:47:75:fe:06:
77:28:1e:7d:d7:c2:8e:f2:5a:22:46:0e:d0:84:5b:
ef:0f:02:b8:19:d1:c9:7f:56:2b:0b:3e:4f:18:ad:
ec:42:09:7a:2b:08:bc:89:b8:0a:c2:84:53:72:48:
2d:17:9d:63:23:37:fe:92:44:47:18:d9:fa:8c:1c:
04:69:2d:9b:19:c4:b1:20:ad:3b:1b:11:42:2e:11:
ad:f6:13:26:6b:67:c4:2e:d7:3b:34:73:68:01:1f:
c2:74:bc:b7:dc:e3:e9:71:f8:9c:d5:98:8f:3c:f0:
6b:b6:cf:57:53:41:bd:b8:29:69:79:8d:12:e2:e5:
cd:cc:74:4c:a5:ad:a6:e7:dd:d9:dc:a7:ab:10:cd:
7f:f4:30:75:59:16:17:2b:e3:6f:55:d3:ce:c4:12:
64:23:c1:ec:b4:09:3d:24:0b:8c:de:d5:90:56:2e:
1e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AC:D5:E9:4A:6C:55:CE:47:7D:53:32:B1:B2:90:6D:BA:73:84:2B
X509v3 Authority Key Identifier:
keyid:12:C1:14:42:1A:21:53:8B:B6:BF:02:64:98:7E:7A:44:4C:80:EA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsEUQhohU4u2vwJkmH56REyA6j4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:33:be:1f:bd:58:dc:24:58:a6:f0:55:dc:d0:cb:6d:0c:ba:
72:86:fc:1b:3b:61:bd:7a:f3:23:67:3f:65:7b:9a:d6:6c:d2:
7d:c9:3a:d2:b3:4c:27:a2:49:64:24:30:6a:af:42:77:7c:7b:
17:b0:6b:95:ae:51:69:70:3c:3a:92:c2:8f:68:23:d1:2a:ed:
a9:f3:8e:fd:c5:0d:f9:79:81:30:01:43:67:f4:ff:19:72:15:
ea:e8:0f:69:a7:30:b7:92:ac:72:3b:01:ad:66:29:d9:fa:ae:
87:d9:ce:55:cd:18:c8:8b:75:dc:c3:bd:0f:8b:a1:ec:25:d0:
eb:37:76:d3:71:e1:98:6c:f0:b5:85:4d:38:ca:7f:52:f1:b1:
3e:c7:2a:e5:c5:25:17:72:10:a5:3b:e1:59:7f:97:ce:56:b7:
c6:0a:78:60:5b:98:1f:41:22:be:e4:17:9e:6d:8a:d1:b9:b3:
22:33:5b:bd:f1:31:f4:0b:50:96:76:8a:fc:53:4e:24:cb:90:
de:a1:33:54:85:1b:af:39:12:aa:e6:2d:ee:7f:d4:09:3a:f4:
ef:29:8c:65:ae:a4:55:f2:7b:2d:2e:42:c9:2e:fe:27:83:72:
7e:25:6b:cc:34:4f:e4:85:6f:7c:8c:75:bb:c0:ad:ad:85:72:
57:2e:b6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:52:08 2026 by rpki-client