Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
File: e_es5VMOXVCQfS3bQ1vym03x1uQ.mft (raw, json)
Hash identifier: 2UWWWP+hcIVMUAWbcUDSD/pytsftBt6sKnIWbpEmpPo=
Subject key identifier: 0B:4A:6A:59:22:79:8D:4D:56:42:6A:E4:D1:23:A7:F0:0A:E0:0B:72
Authority key identifier: 7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
Certificate issuer: /CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
Certificate serial: 019D3A1CA2DE739E7BB912FCC52A27F76852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
Manifest number: 0689
Signing time: Sun 29 Mar 2026 15:00:48 +0000
Manifest this update: Sun 29 Mar 2026 15:00:48 +0000
Manifest next update: Mon 30 Mar 2026 15:00:48 +0000
Files and hashes: 1: e_es5VMOXVCQfS3bQ1vym03x1uQ.crl (hash: DiY6aYFi8LrpVhZxo8O6AsvJxv07ZEeqbpWatKoii84=)
2: yn22QITeYuSiQ4etW04NOKsyiwg.roa (hash: Hhng+JY/6IvIYBVuvykD/FKUSe2wsbGUoRKGJNpfZo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:a2:de:73:9e:7b:b9:12:fc:c5:2a:27:f7:68:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
Validity
Not Before: Mar 29 15:00:48 2026 GMT
Not After : Mar 30 15:00:48 2026 GMT
Subject: CN=0b4a6a5922798d4d56426ae4d123a7f00ae00b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:d4:0c:93:91:27:5f:ae:52:c1:cc:1a:c3:
c7:14:0b:00:29:2b:52:e1:ac:e5:8c:3e:98:c4:46:
76:63:8a:1e:a5:ed:fe:50:99:d0:a4:b2:25:e5:39:
06:fc:11:d9:55:48:7a:c6:51:38:83:82:07:b4:3c:
ed:dd:91:57:4f:a2:af:fe:c5:0e:68:37:c1:32:94:
f8:f9:e1:82:0b:6a:61:54:78:24:b7:c3:18:03:28:
86:0c:d5:28:30:25:d3:42:84:11:99:4d:34:84:29:
dd:1e:16:1a:67:bf:64:1d:61:f7:f1:54:30:f1:20:
ae:2f:5a:85:cd:68:9e:a5:4f:d6:c9:c8:11:90:8c:
7b:2c:d5:20:3a:be:9a:d3:81:1d:a0:24:a5:41:96:
d0:eb:b4:fb:28:50:78:11:a0:a6:81:ce:73:a1:65:
85:62:81:45:f9:15:2e:51:d2:85:35:e3:8c:52:5a:
18:d0:29:96:5b:6e:0a:b6:a2:e7:d4:81:4a:1c:01:
98:ba:f3:ce:94:ac:f1:0b:bd:de:1c:98:80:24:78:
b9:b4:72:d1:31:9d:1d:8f:04:2d:06:18:15:49:5d:
ef:54:a3:23:b7:8a:a3:6b:cf:71:9b:b5:43:2d:94:
80:74:b6:73:4c:5f:db:9c:2b:d2:1b:db:c9:e2:b4:
64:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4A:6A:59:22:79:8D:4D:56:42:6A:E4:D1:23:A7:F0:0A:E0:0B:72
X509v3 Authority Key Identifier:
keyid:7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:68:3c:67:68:92:b2:e7:34:b5:f8:ee:4e:a5:31:16:9e:99:
12:c5:33:37:e7:4c:0f:e1:63:74:3b:1c:e0:69:85:a3:a1:fa:
e2:7d:8d:2c:83:ee:97:e6:1a:17:40:26:70:06:3d:95:71:be:
01:2e:35:9a:da:80:6d:6b:72:58:22:0d:03:77:2f:46:13:bd:
91:24:61:d8:44:f8:66:14:70:89:78:5f:8c:0c:85:6c:b9:74:
c4:7a:ca:86:32:dd:4d:b5:3f:a7:7e:1c:f2:77:7e:91:ba:f2:
d1:09:aa:39:9d:48:35:a3:55:e1:7d:7d:ff:9b:59:f3:34:ed:
6d:d5:7b:ff:06:21:86:63:5a:9e:01:6a:8e:74:45:4c:66:d0:
30:1c:af:5d:16:5c:08:67:ef:91:51:ad:40:07:f9:16:5e:eb:
55:f5:11:f0:1b:43:22:0a:cc:48:7e:5f:f9:27:43:ec:27:32:
81:dd:75:9b:c3:77:41:8f:9a:5a:59:d2:1a:ab:81:cd:f0:9b:
d2:fc:43:16:9d:fc:b8:83:77:5a:c2:f7:66:de:69:65:78:b7:
a5:ab:36:11:bd:de:60:b1:2e:2f:4c:52:8a:f9:aa:d8:03:f4:
92:7d:6c:36:36:b5:b9:8a:89:76:f1:12:9d:59:54:a2:1d:e5:
a2:6f:87:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:48:36 2026 by rpki-client