Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
File: EsRb041L3Gjj153gJE3wbS7LZgk.mft (raw, json)
Hash identifier: F+2Fvat6HhA+EiyWuj87wLO9hhXHADNNrZtLgrtYbTA=
Subject key identifier: BF:F2:CB:41:22:22:6F:45:16:C1:71:AE:9F:AF:BA:9B:96:3B:53:7C
Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
Certificate issuer: /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Certificate serial: 019E894812847FB29B6F53A2786D26377B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
Manifest number: 14A4
Signing time: Tue 02 Jun 2026 17:01:02 +0000
Manifest this update: Tue 02 Jun 2026 17:01:02 +0000
Manifest next update: Wed 03 Jun 2026 17:01:02 +0000
Files and hashes: 1: EsRb041L3Gjj153gJE3wbS7LZgk.crl (hash: jdmf6j5DYpShSOREozigqxMX3FG525SZGqX7DIXoaQo=)
2: _1gDjO3zyeb5ku_j0UHNCnoUFl4.roa (hash: rM83OC0RM5ILeCqPDY5cHlMlGdSPagD0ddTyBgkH61k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:89:48:12:84:7f:b2:9b:6f:53:a2:78:6d:26:37:7b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Validity
Not Before: Jun 2 17:01:02 2026 GMT
Not After : Jun 3 17:01:02 2026 GMT
Subject: CN=bff2cb4122226f4516c171ae9fafba9b963b537c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:12:7b:eb:07:ab:1b:40:5c:22:f2:e7:f5:
4c:b2:8c:e9:8b:ce:9b:83:e4:af:09:37:59:4f:a8:
b5:98:77:a7:49:9f:e2:7a:dc:7c:e7:c8:fe:27:2c:
c3:6d:20:0c:98:57:cd:4b:ac:fe:4b:1d:2d:e9:90:
35:33:ec:53:d9:48:18:e2:41:a2:e6:6b:5b:a6:a8:
4d:c7:90:11:ff:33:5c:eb:a9:f7:90:17:d6:83:90:
5d:49:3e:e6:f6:5c:74:fc:2b:a9:ff:e4:71:4e:8e:
fb:01:f4:2a:0a:cc:75:69:8c:1c:ac:48:a5:b7:d6:
9d:5c:ef:c8:cd:a8:fa:88:d3:14:ce:3b:33:36:cf:
e4:60:0d:26:76:15:ec:6a:29:ba:64:00:d6:62:f4:
a4:11:28:a3:b7:2b:09:f3:93:24:d9:f6:d8:ef:76:
a7:8e:9c:74:a1:79:3b:29:94:39:bc:13:32:c1:05:
11:39:91:bd:41:a0:9e:83:b6:81:e6:e1:35:c7:d9:
f3:56:ac:bc:89:83:89:a1:30:6d:1e:22:d6:34:c9:
c3:e3:12:06:a0:dd:fb:f3:c9:87:fb:f8:c3:f9:5a:
1f:20:53:22:7a:e1:22:ed:cd:b7:f6:af:12:ad:11:
cb:c2:a7:21:de:f4:3c:b4:ea:1d:2a:c1:b5:a6:92:
00:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F2:CB:41:22:22:6F:45:16:C1:71:AE:9F:AF:BA:9B:96:3B:53:7C
X509v3 Authority Key Identifier:
keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d5:82:cd:37:07:24:ab:ac:55:79:4f:ac:33:d4:bf:b3:71:
8f:32:70:9b:b2:8b:9d:96:ba:9f:3a:b6:53:80:73:98:de:67:
7b:64:74:75:35:5e:f3:00:aa:b8:7c:1a:c3:b6:c6:97:f4:ae:
c2:a5:ca:62:85:0e:ac:bd:58:93:dd:4a:1f:93:dd:3f:66:39:
c8:35:eb:32:91:67:a5:21:ce:78:99:22:00:b6:f0:11:cc:3d:
10:8c:1e:a3:b4:b7:1f:49:6e:e2:2f:5d:93:ed:d0:bd:f5:b1:
cd:fa:c7:0d:32:41:3d:f0:00:48:1f:0f:53:0f:a2:15:89:87:
98:71:f2:b2:35:b3:ea:fd:40:81:26:fd:f6:7e:2e:73:95:f1:
52:e1:e1:c5:53:d9:d4:03:57:e1:0f:0e:cb:33:03:69:08:09:
b5:e9:57:83:f6:30:e9:48:e2:5d:04:66:d9:65:bd:a4:af:fb:
c0:fe:27:4b:aa:c2:9d:34:24:a5:40:8c:b3:e4:69:1e:f5:af:
ab:a0:04:15:74:ca:19:aa:3b:b3:e2:ca:ab:a9:0f:5f:1b:17:
23:38:29:d6:1c:08:28:eb:36:a5:b8:50:ce:47:73:fb:00:95:
fd:dd:23:75:d9:e7:af:2b:68:4d:76:7d:10:06:91:d9:a4:d6:
d2:b5:a2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:17:30 2026 by rpki-client