Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
File: ES0MTxbciSISn_YFDiNVYjF1ZeU.mft (raw, json)
Hash identifier: 75+pfhg9p5cpJyxZVlttX6t1IfM7HRqfAZwKsRzWIaQ=
Subject key identifier: 63:AC:94:44:5C:BF:01:97:FD:CC:07:1E:6E:E7:CB:1F:48:66:20:2C
Authority key identifier: 11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
Certificate issuer: /CN=112d0c4f16dc8922129ff6050e235562317565e5
Certificate serial: 019D38662A52179E9405CC36F9E9D29E5A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:01:52 +0000
Manifest this update: Sun 29 Mar 2026 07:01:52 +0000
Manifest next update: Mon 30 Mar 2026 07:01:52 +0000
Files and hashes: 1: 6ZC-AU-L5WqpZGLxzGOhgHsE1Cg.roa (hash: UlcGyQuYQRtTD6A9l9CK5v44VAfVgy8O5yhh3y24c6s=)
2: ES0MTxbciSISn_YFDiNVYjF1ZeU.crl (hash: +dfXaXAHJctUb+QbcWLrcxWoafJfoKz7/p02+K+7cNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:2a:52:17:9e:94:05:cc:36:f9:e9:d2:9e:5a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d0c4f16dc8922129ff6050e235562317565e5
Validity
Not Before: Mar 29 07:01:52 2026 GMT
Not After : Mar 30 07:01:52 2026 GMT
Subject: CN=63ac94445cbf0197fdcc071e6ee7cb1f4866202c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:9e:73:f5:99:38:a5:0d:a4:9d:43:35:e2:
35:bb:9c:d0:ce:50:8f:56:28:d8:d3:0a:a5:5b:0f:
43:ca:20:a1:f9:2b:c9:aa:95:ef:9d:bb:e6:a1:24:
8a:9c:a0:d0:bd:4e:72:80:cf:aa:a3:00:b8:a2:c4:
33:b7:db:df:79:fc:ad:61:4e:d7:16:7c:27:33:44:
95:ae:2b:f4:1a:47:a3:77:fb:cf:b6:90:95:0e:af:
63:be:21:9b:c8:92:d2:3a:56:7f:4c:e6:55:27:35:
29:8a:29:d3:be:df:a4:c6:ff:db:ac:c1:90:26:2c:
ae:50:b4:28:5e:04:3d:8e:a4:19:0c:bb:75:c3:34:
04:8d:8d:8c:28:c4:bd:98:e1:61:1e:d8:ab:2c:06:
c8:00:30:2c:66:97:f5:21:c8:7d:e9:08:3f:8c:d1:
73:17:28:c6:69:b0:13:dd:38:97:96:58:4c:f7:88:
46:b4:a8:26:64:46:35:2c:a0:37:50:38:8a:b4:e6:
1d:9a:9e:4e:5a:47:b4:96:2f:53:dd:1d:95:ef:de:
35:d3:5e:48:b9:aa:01:3a:00:39:be:8e:22:27:e9:
73:eb:5e:07:fa:0f:44:02:90:0f:4e:d7:ff:49:7c:
e1:34:5e:9a:8b:2a:a6:1e:20:87:22:fc:1e:20:16:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AC:94:44:5C:BF:01:97:FD:CC:07:1E:6E:E7:CB:1F:48:66:20:2C
X509v3 Authority Key Identifier:
keyid:11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bb:fb:36:48:c1:56:5c:37:3b:76:6e:53:d4:02:fe:52:89:
2d:20:5f:1a:7e:8d:c3:d3:4b:58:d4:c4:27:be:05:26:20:94:
e8:4f:5b:ea:25:c5:33:61:ee:2d:b5:86:f5:f0:06:a1:70:f4:
e3:3f:87:3a:90:6b:f9:fa:a4:fb:dc:e8:ef:f3:bf:b3:53:d1:
b9:0b:8b:5e:86:6b:e0:db:20:c1:1f:58:9d:74:75:fe:f9:22:
0c:87:f4:e3:82:a5:9d:de:60:ca:72:98:5e:17:13:1d:7e:cb:
90:7f:4d:dd:9d:95:7b:c6:85:54:75:b3:55:81:4e:39:80:d6:
9e:d9:ae:71:96:31:be:54:64:bb:35:b0:8b:40:2f:dd:27:7e:
e1:aa:19:68:58:b4:be:61:9e:fb:c7:68:d3:8d:ce:b9:ad:19:
8b:b3:68:25:6f:61:39:7f:35:98:57:1e:99:54:e8:9f:70:8e:
07:0f:c1:34:a3:27:6e:ad:a8:0f:0d:59:c4:42:21:92:68:90:
f4:cf:76:5b:41:6d:c8:bd:37:9b:f1:d2:6b:75:77:d2:53:09:
1e:76:b9:60:df:10:86:df:e4:91:1b:00:96:a8:8d:91:b3:47:
10:48:b7:1a:e1:27:55:8f:9a:91:52:40:de:d9:5e:13:eb:d1:
d6:00:50:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:54 2026 by rpki-client