Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
File: Es84yOexki9uvz_TQHNc2wQjFBg.mft (raw, json)
Hash identifier: qMn6NZw+RqbG5lJ0ouPps9qMRUafsMb7voO457hf/4A=
Subject key identifier: F2:D3:10:D1:9D:49:06:2B:02:C6:6E:7B:DB:31:F4:C2:01:6A:D5:85
Authority key identifier: 12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
Certificate issuer: /CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Certificate serial: 019D39AF313BF7C5F8AB7B8861AE59A68599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 13:01:15 +0000
Manifest this update: Sun 29 Mar 2026 13:01:15 +0000
Manifest next update: Mon 30 Mar 2026 13:01:15 +0000
Files and hashes: 1: Es84yOexki9uvz_TQHNc2wQjFBg.crl (hash: iVnRb3kX5UXvPVXKKs/p3LkHL+hK6bHfatE+KTJ32Y8=)
2: d77IWbkczkICwfpVT1sRhf7rXjA.roa (hash: zbuTl//ldlxEHT4wWa1vNyL5/cZHH2/ZJ1uuYflyQnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:31:3b:f7:c5:f8:ab:7b:88:61:ae:59:a6:85:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Validity
Not Before: Mar 29 13:01:15 2026 GMT
Not After : Mar 30 13:01:15 2026 GMT
Subject: CN=f2d310d19d49062b02c66e7bdb31f4c2016ad585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:66:24:c7:41:3f:f1:02:0b:d3:ff:eb:e3:05:
51:8e:af:ed:f1:19:17:b4:28:5f:45:39:62:b2:72:
19:32:2e:93:84:8b:63:8a:c8:b6:1a:0c:50:d5:be:
69:97:4b:27:89:04:25:91:01:96:80:ad:1c:70:02:
44:1e:5e:75:4e:16:0f:71:7d:56:3a:a3:fc:bf:ba:
ec:a2:9a:a9:72:8a:8e:b4:bf:c9:24:04:b4:ab:aa:
d6:91:b5:39:d8:d0:fe:49:6e:8a:8c:11:d2:0b:b4:
e9:38:34:a7:77:50:54:01:bc:ad:82:d3:06:3c:53:
2e:b1:75:a2:8d:a1:4b:fd:86:e4:94:ef:fe:9a:25:
09:9f:44:d4:df:e5:d8:74:4e:3a:59:0d:a6:6a:a3:
c7:62:7e:b6:e6:ac:2b:71:9a:1a:24:52:4e:81:ed:
7b:cb:0b:d0:da:88:ed:ef:9b:8f:de:63:1b:0a:1a:
5e:13:9c:c8:e4:3b:5c:c6:a1:8d:c1:18:5b:cc:5c:
f1:9c:2e:3c:ed:35:6c:02:82:df:08:9b:32:3d:3a:
ff:c2:eb:9a:fb:6a:42:d8:22:f6:33:7d:50:54:da:
b8:5f:0d:7a:76:bc:bd:84:4b:22:31:43:dd:cb:9e:
99:6d:3c:64:f9:08:fa:13:1b:d9:03:4c:f6:9e:e4:
33:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D3:10:D1:9D:49:06:2B:02:C6:6E:7B:DB:31:F4:C2:01:6A:D5:85
X509v3 Authority Key Identifier:
keyid:12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1e:43:1c:a3:d5:84:5d:3f:bc:b1:84:a8:fa:d6:17:31:e1:
2b:6e:e1:82:19:df:d6:88:96:48:73:dc:be:d4:63:1f:ee:47:
0d:07:36:e6:72:42:d8:41:0d:79:55:56:8a:ef:40:65:20:6a:
27:fb:17:dc:93:45:d1:1a:cf:c1:61:aa:21:68:23:09:22:e7:
6c:ad:2b:50:c5:dc:22:52:ac:71:52:22:e8:92:34:5a:03:8a:
a9:02:52:ba:b0:44:49:cc:14:30:4b:03:93:8d:5b:e7:92:16:
42:fc:dc:ec:6d:0e:5b:03:0d:be:e1:57:5a:7e:c0:d3:a2:94:
b0:3f:42:e6:e5:22:bb:fc:51:56:4d:00:66:6e:0d:ad:16:99:
db:dc:9e:75:1d:ea:ed:ee:b1:42:09:fb:7b:93:95:aa:ca:11:
e3:6b:87:7d:05:3d:d9:5d:ca:7a:a5:1f:25:0a:ea:ed:a0:c8:
f7:7a:eb:9e:97:3f:72:02:b8:58:42:ec:d0:a4:1b:c6:0e:c0:
dd:39:a2:ce:01:64:df:d0:fc:fd:f2:59:83:73:c3:9c:57:8c:
80:6f:46:49:df:bc:e0:10:90:ac:c5:5a:ab:b1:4d:56:63:8f:
17:83:c3:8b:46:3d:1d:de:e0:73:8d:64:4e:16:5d:d0:a8:c4:
16:60:f4:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rzE798X4q3uIYa5ZpoWZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyY2YzOGM4ZTdiMTkyMmY2ZWJmM2ZkMzQwNzM1Y2RiMDQy
MzE0MTgwHhcNMjYwMzI5MTMwMTE1WhcNMjYwMzMwMTMwMTE1WjAzMTEwLwYDVQQD
EyhmMmQzMTBkMTlkNDkwNjJiMDJjNjZlN2JkYjMxZjRjMjAxNmFkNTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGYkx0E/8QIL0//r4wVRjq/t8RkX
tChfRTlisnIZMi6ThItjisi2GgxQ1b5pl0sniQQlkQGWgK0ccAJEHl51ThYPcX1W
OqP8v7rsopqpcoqOtL/JJAS0q6rWkbU52ND+SW6KjBHSC7TpODSnd1BUAbytgtMG
PFMusXWijaFL/YbklO/+miUJn0TU3+XYdE46WQ2maqPHYn625qwrcZoaJFJOge17
ywvQ2ojt75uP3mMbChpeE5zI5DtcxqGNwRhbzFzxnC487TVsAoLfCJsyPTr/wuua
+2pC2CL2M31QVNq4Xw16dry9hEsiMUPdy56ZbTxk+Qj6ExvZA0z2nuQzpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLTENGdSQYrAsZue9sx9MIBatWFMB8GA1UdIwQY
MBaAFBLPOMjnsZIvbr8/00BzXNsEIxQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXM4NHlPZXhraTl1dnpfVFFITmMyd1FqRkJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83ZmQ2YjQtYTc3ZC00ZGVjLWEwM2Mt
YmUwYmFmYjc4MmVlLzEvRXM4NHlPZXhraTl1dnpfVFFITmMyd1FqRkJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83ZmQ2YjQtYTc3ZC00ZGVjLWEwM2MtYmUwYmFmYjc4MmVl
LzEvRXM4NHlPZXhraTl1dnpfVFFITmMyd1FqRkJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiB5DHKPV
hF0/vLGEqPrWFzHhK27hghnf1oiWSHPcvtRjH+5HDQc25nJC2EENeVVWiu9AZSBq
J/sX3JNF0RrPwWGqIWgjCSLnbK0rUMXcIlKscVIi6JI0WgOKqQJSurBEScwUMEsD
k41b55IWQvzc7G0OWwMNvuFXWn7A06KUsD9C5uUiu/xRVk0AZm4NrRaZ29yedR3q
7e6xQgn7e5OVqsoR42uHfQU92V3KeqUfJQrq7aDI93rrnpc/cgK4WELs0KQbxg7A
3TmizgFk39D8/fJZg3PDnFeMgG9GSd+84BCQrMVaq7FNVmOPF4PDi0Y9Hd7gc41k
ThZd0KjEFmD0fg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:00 2026 by rpki-client