Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
File: ESmtAUBy3mYXQ4-xr75BotvcgRw.mft (raw, json)
Hash identifier: cAg51UJcYeMS9UykKWoVJGRIdBn0ue4e+rXgiGWEhNc=
Subject key identifier: 12:23:6B:84:7A:97:6B:F2:67:E1:2F:CF:C0:97:77:38:F9:44:C2:41
Authority key identifier: 11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
Certificate issuer: /CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Certificate serial: 019CED8292C3B8C231B72F96334EB7644F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
Manifest number: 1016
Signing time: Sat 14 Mar 2026 18:01:23 +0000
Manifest this update: Sat 14 Mar 2026 18:01:23 +0000
Manifest next update: Sun 15 Mar 2026 18:01:23 +0000
Files and hashes: 1: ESmtAUBy3mYXQ4-xr75BotvcgRw.crl (hash: RyJnADu66tZ6qXUyhmK6czfz36TEgrc/JgbLJf/DePY=)
2: yOU3uduoN5dP8e-jmAjD8aQwrlU.roa (hash: O6bQWgeJySRYDkrf9DCbKR1ZNlkw4pe8n+wuoJJY0+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 18:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:82:92:c3:b8:c2:31:b7:2f:96:33:4e:b7:64:4f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Validity
Not Before: Mar 14 18:01:23 2026 GMT
Not After : Mar 15 18:01:23 2026 GMT
Subject: CN=12236b847a976bf267e12fcfc0977738f944c241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:52:89:cf:f5:38:27:25:9c:c5:31:89:8c:
4d:f6:76:f1:60:49:18:56:a1:cf:44:0d:2d:8d:f7:
40:86:38:ac:7a:21:d8:d9:e8:f5:78:69:7a:a7:2c:
b6:ce:3a:ac:58:8b:6d:f8:d5:c6:4f:44:e9:a4:d1:
0e:cb:29:1e:ad:97:5f:40:85:73:3e:4d:34:64:e4:
d6:de:0d:91:4c:e1:94:38:40:d4:fd:d1:ee:88:fe:
97:fa:11:b9:8a:e6:35:eb:40:d8:81:c8:ab:11:e5:
ec:3c:8a:10:c0:c9:d3:7f:0b:d3:c1:be:8c:aa:f5:
8d:0e:7d:ce:90:28:9a:f7:66:10:e0:41:ac:3b:18:
c1:bc:27:84:76:f6:ff:b4:f9:e4:42:57:ca:a7:8d:
25:54:99:3e:6a:4f:ac:ac:b5:3c:f4:49:65:90:d9:
6d:51:64:78:80:82:8e:5a:cf:f7:e7:60:f4:51:39:
a2:ed:51:c9:d9:e4:01:7c:20:33:74:6b:b6:86:c8:
21:f8:47:6d:03:b5:7a:a0:1c:60:4f:de:ff:e1:3f:
ae:61:51:53:46:65:4e:13:1d:2a:ff:49:6e:95:f0:
2e:2b:30:21:ee:67:dd:0f:8a:71:c7:88:98:bd:eb:
f8:f0:b6:65:4f:90:ef:16:9f:fe:ec:2d:22:2e:f6:
e7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:23:6B:84:7A:97:6B:F2:67:E1:2F:CF:C0:97:77:38:F9:44:C2:41
X509v3 Authority Key Identifier:
keyid:11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:26:3c:63:09:48:ed:47:c0:10:d1:90:de:09:e4:5b:35:96:
24:0b:42:3d:e8:10:b9:b4:c1:e5:ff:32:9c:c0:04:8b:7d:fe:
69:4b:41:11:bd:94:1d:e0:5a:76:6e:ca:8b:64:dc:0e:4b:27:
34:fe:9e:d8:2d:2b:e5:bd:20:b2:9a:96:1b:34:cf:ce:6e:46:
8c:7d:00:e7:36:df:60:fc:a9:26:04:b8:e9:c7:f2:7c:39:67:
74:4b:5d:40:34:9d:2c:05:34:bd:b3:53:04:73:c6:16:1b:44:
63:60:b5:dc:ba:4d:0d:e6:14:19:53:c5:d5:96:28:53:fa:48:
a7:62:a7:40:36:26:49:8c:a9:e4:f2:c8:a8:2a:97:6e:ee:23:
51:6d:ee:1e:3a:43:88:de:e2:b5:3d:64:2d:67:9b:3c:79:e5:
d2:67:37:3b:3d:de:6a:82:dd:f1:94:dd:1b:6c:f5:ac:7e:77:
1a:dd:f0:17:c2:9c:7d:09:6a:b7:ab:96:28:61:e5:32:d6:dd:
37:b0:42:cb:74:dd:58:c9:66:10:62:56:b0:8d:64:1c:c7:bd:
c3:a0:56:1b:e5:15:ac:e7:34:85:55:44:fb:cc:49:de:85:84:
7e:da:a1:08:d4:29:77:6e:f4:bd:a6:b7:2d:e1:e8:b6:95:9e:
50:3c:b5:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZztgpLDuMIxty+WM063ZE+UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMjlhZDAxNDA3MmRlNjYxNzQzOGZiMWFmYmU0MWEyZGJk
YzgxMWMwHhcNMjYwMzE0MTgwMTIzWhcNMjYwMzE1MTgwMTIzWjAzMTEwLwYDVQQD
EygxMjIzNmI4NDdhOTc2YmYyNjdlMTJmY2ZjMDk3NzczOGY5NDRjMjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxepSic/1OCclnMUxiYxN9nbxYEkY
VqHPRA0tjfdAhjiseiHY2ej1eGl6pyy2zjqsWItt+NXGT0TppNEOyykerZdfQIVz
Pk00ZOTW3g2RTOGUOEDU/dHuiP6X+hG5iuY160DYgcirEeXsPIoQwMnTfwvTwb6M
qvWNDn3OkCia92YQ4EGsOxjBvCeEdvb/tPnkQlfKp40lVJk+ak+srLU89EllkNlt
UWR4gIKOWs/352D0UTmi7VHJ2eQBfCAzdGu2hsgh+EdtA7V6oBxgT97/4T+uYVFT
RmVOEx0q/0lulfAuKzAh7mfdD4pxx4iYvev48LZlT5DvFp/+7C0iLvbnKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIja4R6l2vyZ+Evz8CXdzj5RMJBMB8GA1UdIwQY
MBaAFBEprQFAct5mF0OPsa++QaLb3IEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVNtdEFVQnkzbVlYUTQteHI3NUJvdHZjZ1J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83ZTE5ODktNGIxZS00ZjMzLWJkMzIt
YWM4ODE0OTdlMGEyLzEvRVNtdEFVQnkzbVlYUTQteHI3NUJvdHZjZ1J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83ZTE5ODktNGIxZS00ZjMzLWJkMzItYWM4ODE0OTdlMGEy
LzEvRVNtdEFVQnkzbVlYUTQteHI3NUJvdHZjZ1J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANyY8YwlI
7UfAENGQ3gnkWzWWJAtCPegQubTB5f8ynMAEi33+aUtBEb2UHeBadm7Ki2TcDksn
NP6e2C0r5b0gspqWGzTPzm5GjH0A5zbfYPypJgS46cfyfDlndEtdQDSdLAU0vbNT
BHPGFhtEY2C13LpNDeYUGVPF1ZYoU/pIp2KnQDYmSYyp5PLIqCqXbu4jUW3uHjpD
iN7itT1kLWebPHnl0mc3Oz3eaoLd8ZTdG2z1rH53Gt3wF8KcfQlqt6uWKGHlMtbd
N7BCy3TdWMlmEGJWsI1kHMe9w6BWG+UVrOc0hVVE+8xJ3oWEftqhCNQpd270vaa3
LeHotpWeUDy1/Q==
-----END CERTIFICATE-----
Generated at Sun Mar 15 02:38:26 2026 by rpki-client