Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
File: cEZO_kc3QepObM9sPFo3xm89oXk.mft (raw, json)
Hash identifier: FSj8M37CiYpFmoQTeWTUvyO0DOnDSs4EBZKWbqW0M4g=
Subject key identifier: B1:16:C8:CD:5D:29:AA:8B:9C:0F:FE:35:C3:3E:65:05:2F:E2:4C:60
Authority key identifier: 70:46:4E:FE:47:37:41:EA:4E:6C:CF:6C:3C:5A:37:C6:6F:3D:A1:79
Certificate issuer: /CN=70464efe473741ea4e6ccf6c3c5a37c66f3da179
Certificate serial: 019DD6C1EC599ED339BF6F58653F0D6C72D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
Manifest number: F9
Signing time: Wed 29 Apr 2026 01:02:06 +0000
Manifest this update: Wed 29 Apr 2026 01:02:06 +0000
Manifest next update: Thu 30 Apr 2026 01:02:06 +0000
Files and hashes: 1: ROpNx89soFP8JE-okJDCTVHVXDs.roa (hash: 5HtcGDIbCLb9z7TZql7Z+rs2Xx1sglk4pFTRwXa2X+g=)
2: cEZO_kc3QepObM9sPFo3xm89oXk.crl (hash: TqG3oRKilL1hz6vG9LDeiXcDCHuZmU0AbYX6Ym8Y9jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 01:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d6:c1:ec:59:9e:d3:39:bf:6f:58:65:3f:0d:6c:72:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70464efe473741ea4e6ccf6c3c5a37c66f3da179
Validity
Not Before: Apr 29 01:02:06 2026 GMT
Not After : Apr 30 01:02:06 2026 GMT
Subject: CN=b116c8cd5d29aa8b9c0ffe35c33e65052fe24c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cd:8a:20:a9:1f:c5:1e:f3:03:50:a8:21:8b:
46:89:86:33:48:cb:fd:8c:c6:d8:66:e0:6f:39:22:
15:0d:02:f7:28:20:73:b5:f4:f8:33:bd:2a:94:15:
8c:f0:3f:1c:a7:33:ed:f9:77:01:b0:a4:12:9d:f4:
0f:1d:76:4e:79:de:95:52:5b:23:22:bd:21:8c:68:
62:d4:ac:8f:d5:12:79:25:7e:3e:4c:7a:35:46:0a:
31:31:b2:22:2c:9a:f4:79:88:06:6d:b5:18:b9:31:
85:9a:c8:ab:5a:6b:d1:00:86:97:8a:8e:4b:12:12:
b9:a1:83:1f:5f:4c:0f:d0:3f:8b:1e:a5:a5:8b:4d:
7e:a7:6a:bc:67:b1:38:a4:3b:16:29:84:8e:c1:e4:
e0:67:99:ae:05:c3:04:6f:d0:fb:4d:fd:4e:63:df:
99:2e:8a:80:b0:e5:75:d4:27:d8:0c:b5:6b:3e:0b:
8d:70:35:cf:fc:59:6b:bf:ef:73:f0:a4:26:51:0a:
68:ce:8d:46:2d:54:9b:61:dc:22:74:ab:d2:99:db:
51:fa:89:a6:27:96:34:df:44:ad:64:c0:e2:b2:3c:
18:74:ac:fd:e2:dd:b3:f0:3c:a0:2f:4f:d2:78:7a:
40:a8:26:66:1b:a9:83:43:08:09:19:39:a9:d1:89:
ed:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:16:C8:CD:5D:29:AA:8B:9C:0F:FE:35:C3:3E:65:05:2F:E2:4C:60
X509v3 Authority Key Identifier:
keyid:70:46:4E:FE:47:37:41:EA:4E:6C:CF:6C:3C:5A:37:C6:6F:3D:A1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:80:26:fe:35:24:6e:b5:66:e1:b5:45:04:95:b4:5e:98:2b:
78:95:5c:5f:9b:20:12:87:a1:b6:e8:87:be:01:02:5a:b4:e0:
2f:21:88:88:e8:59:87:d0:dd:46:04:aa:93:5b:1b:d5:1e:66:
e4:7a:65:1d:30:a1:7d:66:ae:92:d7:89:5f:31:3b:eb:6e:81:
94:5c:83:f7:85:05:fe:7d:c5:0e:6b:aa:cc:21:e8:f2:3f:9d:
9a:d0:98:b9:f2:81:50:c0:eb:ed:9e:fd:2d:18:16:11:5e:f9:
60:ec:23:73:bc:65:40:65:ac:9d:3f:e4:09:75:19:16:17:ca:
01:ba:ca:ee:53:0c:a5:48:8c:65:6e:7d:1b:9d:2b:da:8f:19:
81:aa:28:99:37:df:dc:18:91:86:26:df:23:2b:af:58:65:f5:
41:a5:4d:e4:63:6d:d6:d5:71:05:db:a6:2f:84:8d:6e:2c:dd:
9c:be:59:63:8b:d4:03:c0:dd:a9:79:53:dc:c9:e2:67:51:86:
67:74:95:20:a0:2b:e0:30:e4:b5:0f:03:bd:fc:65:61:1e:e8:
17:69:6d:99:84:75:99:bd:de:42:8a:32:fb:8b:20:26:95:e7:
73:bc:60:e1:cb:6c:7c:6a:7b:49:48:6c:40:b4:8c:e4:ae:8f:
1d:94:e4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 08:08:34 2026 by rpki-client