Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
File: cEZO_kc3QepObM9sPFo3xm89oXk.mft (raw, json)
Hash identifier: FpUPH91PcPriuETZYuYp1+G0O6nPJDvSDFshKwyCTI8=
Subject key identifier: 99:FB:85:87:F6:1C:EF:C5:21:72:E0:E5:E7:E9:CB:27:55:19:AA:60
Authority key identifier: 70:46:4E:FE:47:37:41:EA:4E:6C:CF:6C:3C:5A:37:C6:6F:3D:A1:79
Certificate issuer: /CN=70464efe473741ea4e6ccf6c3c5a37c66f3da179
Certificate serial: 01A1871A81AC5A7C1DDFA635D7385AC86D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
Manifest number: 02E2
Signing time: Thu 29 Oct 2026 10:00:23 +0000
Manifest this update: Thu 29 Oct 2026 10:00:23 +0000
Manifest next update: Fri 30 Oct 2026 10:00:23 +0000
Files and hashes: 1: ROpNx89soFP8JE-okJDCTVHVXDs.roa (hash: 5HtcGDIbCLb9z7TZql7Z+rs2Xx1sglk4pFTRwXa2X+g=)
2: cEZO_kc3QepObM9sPFo3xm89oXk.crl (hash: x17TW78Q4LDh8HxOUOhLw0xQmN9ya9cJej8S0OMF1Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:1a:81:ac:5a:7c:1d:df:a6:35:d7:38:5a:c8:6d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70464efe473741ea4e6ccf6c3c5a37c66f3da179
Validity
Not Before: Oct 29 10:00:23 2026 GMT
Not After : Oct 30 10:00:23 2026 GMT
Subject: CN=99fb8587f61cefc52172e0e5e7e9cb275519aa60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:d0:db:f9:67:97:75:a7:bc:44:5b:02:be:
34:e7:fc:1e:56:0d:44:8c:22:1b:a3:4e:49:8d:f8:
b5:3e:5a:90:c9:f8:20:6e:d3:10:53:74:d8:57:d0:
99:47:a7:89:29:2a:68:52:17:a3:a8:c8:ad:cd:b3:
71:e0:60:46:07:09:f8:5b:c2:c1:a1:bb:79:11:40:
1e:31:83:0c:84:7b:0a:38:52:65:5e:0d:eb:8a:9e:
3e:17:a5:64:40:06:6f:53:10:be:51:75:3a:e5:50:
93:3f:b7:55:8f:3e:ea:4a:49:e5:aa:0f:4d:e9:71:
94:a5:cb:72:7c:2e:41:f1:ed:4a:52:9c:36:26:d7:
2b:41:ca:0e:0b:41:d7:f2:7b:1c:3c:3b:60:06:81:
f2:f6:5f:58:a0:5a:05:37:f0:13:e5:4a:2d:55:20:
43:fd:82:7b:15:06:d5:53:3f:a5:81:07:c6:0b:b9:
cf:63:46:e9:9c:95:a7:c7:e5:f4:18:c7:fd:fb:24:
55:56:0d:11:00:6a:b6:52:09:51:b0:d7:9f:98:23:
d1:08:6d:46:77:05:18:e2:68:92:ba:65:77:1f:d2:
04:62:b5:7b:6c:84:3f:c3:8f:d8:6a:4c:ca:09:d4:
46:ea:cf:db:46:8b:94:6d:60:da:cd:23:ff:6d:0e:
93:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FB:85:87:F6:1C:EF:C5:21:72:E0:E5:E7:E9:CB:27:55:19:AA:60
X509v3 Authority Key Identifier:
keyid:70:46:4E:FE:47:37:41:EA:4E:6C:CF:6C:3C:5A:37:C6:6F:3D:A1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9b:9c:67:95:ea:51:9b:e5:cf:1b:08:bc:46:57:2c:c1:fe:
7a:ec:15:58:2d:1c:9f:41:31:ab:b7:3d:76:a1:12:48:2c:a7:
ef:8e:b8:95:5c:e4:4e:fb:bb:e1:f4:66:4f:89:3a:80:3b:97:
d7:a7:0a:14:e5:e8:b8:a4:48:de:a8:48:7d:a3:22:69:5b:cd:
27:36:e3:3b:62:54:05:c6:7e:20:02:4f:33:58:5a:2c:7d:8d:
84:cf:af:06:9e:dc:5a:d0:6d:13:a9:fa:5c:e2:fa:ba:c9:e5:
46:76:f3:13:4e:c5:b0:73:cb:be:2b:7c:d3:db:ed:02:16:63:
84:a0:69:ff:db:0d:7b:8e:65:0c:b5:03:b8:47:7f:40:36:a4:
c8:7a:85:66:6d:b6:4b:66:d7:35:9e:99:13:31:c7:45:3f:68:
8f:1c:0b:4f:7c:d0:ed:f0:67:1a:cf:3b:ca:c6:6e:7a:5b:73:
07:45:80:5a:96:02:f4:7b:dd:03:07:4e:d6:4c:6a:ac:2b:26:
b2:0c:c2:2d:88:73:13:90:96:b1:2a:03:05:cc:38:77:48:59:
f5:24:bd:c2:b3:69:3f:0c:7e:84:3a:ba:16:d1:26:16:5d:1c:
1e:59:ec:8b:16:b5:e0:2f:62:9c:fc:52:81:04:56:75:da:d4:
97:8e:33:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGHGoGsWnwd36Y11zhayG1nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNDY0ZWZlNDczNzQxZWE0ZTZjY2Y2YzNjNWEzN2M2NmYz
ZGExNzkwHhcNMjYxMDI5MTAwMDIzWhcNMjYxMDMwMTAwMDIzWjAzMTEwLwYDVQQD
Eyg5OWZiODU4N2Y2MWNlZmM1MjE3MmUwZTVlN2U5Y2IyNzU1MTlhYTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWDQ2/lnl3WnvERbAr405/weVg1E
jCIbo05Jjfi1PlqQyfggbtMQU3TYV9CZR6eJKSpoUhejqMitzbNx4GBGBwn4W8LB
obt5EUAeMYMMhHsKOFJlXg3rip4+F6VkQAZvUxC+UXU65VCTP7dVjz7qSknlqg9N
6XGUpctyfC5B8e1KUpw2JtcrQcoOC0HX8nscPDtgBoHy9l9YoFoFN/AT5UotVSBD
/YJ7FQbVUz+lgQfGC7nPY0bpnJWnx+X0GMf9+yRVVg0RAGq2UglRsNefmCPRCG1G
dwUY4miSumV3H9IEYrV7bIQ/w4/YakzKCdRG6s/bRouUbWDazSP/bQ6TbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJn7hYf2HO/FIXLg5efpyydVGapgMB8GA1UdIwQY
MBaAFHBGTv5HN0HqTmzPbDxaN8ZvPaF5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0VaT19rYzNRZXBPYk05c1BGbzN4bTg5b1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9lYzRiODAtNDZlZC00M2I1LTljZmEt
OWI4MDdkZTYwOTAyLzEvY0VaT19rYzNRZXBPYk05c1BGbzN4bTg5b1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9lYzRiODAtNDZlZC00M2I1LTljZmEtOWI4MDdkZTYwOTAy
LzEvY0VaT19rYzNRZXBPYk05c1BGbzN4bTg5b1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe5ucZ5Xq
UZvlzxsIvEZXLMH+euwVWC0cn0Exq7c9dqESSCyn7464lVzkTvu74fRmT4k6gDuX
16cKFOXouKRI3qhIfaMiaVvNJzbjO2JUBcZ+IAJPM1haLH2NhM+vBp7cWtBtE6n6
XOL6usnlRnbzE07FsHPLvit809vtAhZjhKBp/9sNe45lDLUDuEd/QDakyHqFZm22
S2bXNZ6ZEzHHRT9ojxwLT3zQ7fBnGs87ysZueltzB0WAWpYC9HvdAwdO1kxqrCsm
sgzCLYhzE5CWsSoDBcw4d0hZ9SS9wrNpPwx+hDq6FtEmFl0cHlnsixa14C9inPxS
gQRWddrUl44z9w==
-----END CERTIFICATE-----
Generated at Thu Oct 29 15:59:26 2026 by rpki-client