Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
File: EsRb041L3Gjj153gJE3wbS7LZgk.mft (raw, json)
Hash identifier: bezRea4d8r8FoOtNM2lBsKi1AZownXVruLqgHA4mLp0=
Subject key identifier: 5D:3D:BB:FB:F4:A4:64:47:1C:85:8E:E3:B8:AB:4F:18:A4:E9:76:A1
Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
Certificate issuer: /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Certificate serial: 01A17883B7D91A3332C9C09C62F3E18D97BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
Manifest number: 1629
Signing time: Mon 26 Oct 2026 14:01:00 +0000
Manifest this update: Mon 26 Oct 2026 14:01:00 +0000
Manifest next update: Tue 27 Oct 2026 14:01:00 +0000
Files and hashes: 1: EsRb041L3Gjj153gJE3wbS7LZgk.crl (hash: Agp1UpfIhl7nLaMweEmDpe06+qGZNxqOaLKN1SVic1U=)
2: _1gDjO3zyeb5ku_j0UHNCnoUFl4.roa (hash: rM83OC0RM5ILeCqPDY5cHlMlGdSPagD0ddTyBgkH61k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:83:b7:d9:1a:33:32:c9:c0:9c:62:f3:e1:8d:97:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Validity
Not Before: Oct 26 14:01:00 2026 GMT
Not After : Oct 27 14:01:00 2026 GMT
Subject: CN=5d3dbbfbf4a464471c858ee3b8ab4f18a4e976a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:79:b4:28:13:ce:6c:8e:ea:52:4b:10:b5:
6d:ed:e7:d7:7f:93:4a:ce:49:f6:c4:cf:85:1d:76:
1b:0a:60:de:e7:95:2d:4a:77:f2:0e:c8:ef:1c:7c:
65:da:75:b4:56:71:fd:68:27:02:87:b2:16:e0:a6:
0e:a3:bb:b5:c5:e9:60:40:cf:4a:cc:e2:70:77:22:
e8:a2:72:9d:57:6b:de:7a:c4:32:63:fb:d5:b4:f4:
9e:1d:0f:ac:f1:c0:f2:88:d2:2a:c2:c8:f3:1a:e9:
55:e8:7e:82:de:39:a1:0a:29:7a:19:fa:5d:cd:ea:
18:fe:7c:48:1e:b3:40:19:55:79:5a:65:d1:bc:26:
fb:fb:3d:11:56:0b:90:a5:9a:9b:32:88:4e:3e:b4:
3a:f7:17:6c:e7:d2:24:98:13:9c:83:0f:e2:71:e8:
b9:85:14:8b:72:cf:8d:b5:ce:8b:69:5c:be:f4:94:
17:83:4b:bd:04:66:01:56:59:18:59:19:78:43:a3:
59:fe:c2:fe:b4:aa:37:c4:7a:08:2b:bf:d6:3d:b3:
27:e7:28:6d:62:f7:4a:eb:f8:bd:d2:fe:3c:f5:2d:
9f:4f:00:f8:26:65:c3:45:c7:01:a1:ae:e7:4f:5f:
57:27:72:47:7a:17:66:33:a1:74:d7:08:d6:a8:5e:
da:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3D:BB:FB:F4:A4:64:47:1C:85:8E:E3:B8:AB:4F:18:A4:E9:76:A1
X509v3 Authority Key Identifier:
keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:bf:00:6a:34:55:b2:fc:77:ff:83:af:59:61:21:63:51:f1:
57:e5:00:69:f9:67:21:70:36:13:b3:8d:4f:36:01:4c:ba:6f:
a3:32:36:4f:f8:d0:1e:e0:b4:0f:8e:0e:a9:eb:d5:d1:74:b6:
73:fc:15:10:8f:09:cf:4f:d8:f8:8c:21:4a:5c:47:7e:8c:07:
25:1f:a0:ad:b5:88:b9:90:68:e4:c2:d3:eb:2a:bb:2d:b3:5e:
0e:be:8d:31:53:77:26:1a:ed:f5:58:e7:86:35:df:13:36:8f:
7c:de:6b:03:03:36:23:5e:dd:c0:4e:a0:54:e3:74:c0:47:40:
a0:9c:01:30:d1:7c:ae:68:50:fd:7e:a0:7d:11:51:aa:48:dd:
7a:15:72:a8:ee:7d:14:bd:ca:1e:7c:53:fe:2d:82:4e:d6:3d:
44:6d:49:ac:81:cf:02:15:5e:3f:8a:19:c6:d8:77:6a:8e:71:
00:31:42:9e:09:97:81:8f:45:bd:67:b7:b5:58:5a:56:bd:3e:
f1:ac:f5:71:af:80:74:2f:6d:3f:3a:a1:ea:a4:0a:79:e4:07:
ef:42:fc:30:fc:b3:1d:a0:20:47:34:91:a4:e2:03:fe:ea:03:
1a:f5:42:11:d4:20:10:b5:84:c9:78:42:fb:71:4f:7e:ee:b1:
8d:9b:8f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:36:34 2026 by rpki-client