Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
File: cEZO_kc3QepObM9sPFo3xm89oXk.mft (raw, json)
Hash identifier: xfwdygY/5xz2J+jr3vsKR9f9oN6jWIcLRhC8hT/bh7A=
Subject key identifier: 21:3E:3A:10:2F:C4:76:C1:2A:64:FE:FD:28:F5:5F:8E:FB:61:33:CD
Authority key identifier: 70:46:4E:FE:47:37:41:EA:4E:6C:CF:6C:3C:5A:37:C6:6F:3D:A1:79
Certificate issuer: /CN=70464efe473741ea4e6ccf6c3c5a37c66f3da179
Certificate serial: 01A08DFB401583DDE2C3BE4DBBB8536AFBAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
Manifest number: 0261
Signing time: Fri 11 Sep 2026 01:00:48 +0000
Manifest this update: Fri 11 Sep 2026 01:00:48 +0000
Manifest next update: Sat 12 Sep 2026 01:00:48 +0000
Files and hashes: 1: ROpNx89soFP8JE-okJDCTVHVXDs.roa (hash: 5HtcGDIbCLb9z7TZql7Z+rs2Xx1sglk4pFTRwXa2X+g=)
2: cEZO_kc3QepObM9sPFo3xm89oXk.crl (hash: s8J7YfwDrMFMSSVPJelU0V8H0j9V28O5m2KqsnmKe9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:fb:40:15:83:dd:e2:c3:be:4d:bb:b8:53:6a:fb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70464efe473741ea4e6ccf6c3c5a37c66f3da179
Validity
Not Before: Sep 11 01:00:48 2026 GMT
Not After : Sep 12 01:00:48 2026 GMT
Subject: CN=213e3a102fc476c12a64fefd28f55f8efb6133cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1c:04:cf:cb:f3:2e:fb:09:01:12:28:f1:72:
37:bc:cd:62:a2:36:fe:1e:b2:09:e1:d9:ba:a3:de:
73:24:3e:50:f1:72:07:3a:cd:0b:75:c1:57:63:10:
10:c1:27:cf:60:98:ba:74:d0:c0:67:12:f7:e5:71:
62:c4:6d:22:92:e8:09:c4:ba:c3:95:1e:22:fc:5e:
e1:72:21:9f:c2:d2:af:94:54:f8:8f:4b:d0:1f:3d:
77:3b:c4:4e:fc:5c:59:c4:9f:a4:61:d6:9d:3e:18:
d5:db:9a:7d:25:b9:0f:40:db:24:9a:c4:08:8c:6f:
1b:b0:9d:a4:a9:2b:77:55:ef:ed:53:cd:86:37:7f:
c9:e4:fa:48:49:a5:34:d1:91:c9:6f:3e:50:b3:d2:
db:83:5d:52:a6:59:d9:ea:7c:cf:e8:de:f8:1c:74:
7a:bd:12:cb:09:2b:7c:f6:79:2e:02:11:b0:2c:8b:
21:4e:14:a8:4b:4f:23:67:f5:20:07:b3:68:7a:a9:
87:e6:db:57:71:9b:4a:86:45:c8:09:e6:1c:07:f2:
e6:92:6e:ea:26:3d:5d:e2:31:7f:38:a5:77:51:8b:
47:90:74:60:9c:e3:30:31:4f:94:7c:9d:0d:05:24:
65:0a:b1:c5:df:1d:51:f3:f6:d4:ec:10:7b:06:7f:
b2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3E:3A:10:2F:C4:76:C1:2A:64:FE:FD:28:F5:5F:8E:FB:61:33:CD
X509v3 Authority Key Identifier:
keyid:70:46:4E:FE:47:37:41:EA:4E:6C:CF:6C:3C:5A:37:C6:6F:3D:A1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:8e:7e:f2:2c:24:3f:01:d1:81:63:fa:59:d1:14:91:32:fe:
c4:38:a4:63:a8:b4:8d:44:5e:7f:26:85:d7:3d:c4:1c:f1:07:
0c:22:56:5f:69:3d:2f:83:c4:4f:4e:b3:f6:52:97:e5:6a:bd:
67:c5:5b:05:05:51:7b:f2:95:f3:6e:3a:7e:74:04:f0:d0:8f:
08:fc:a0:c3:23:23:43:d8:8c:8d:8e:8f:7f:5c:3e:73:61:4a:
1f:18:4e:3f:8e:6e:8b:f5:c5:b4:b7:63:f4:47:dd:b1:24:76:
50:48:23:8a:45:49:90:59:ee:da:83:48:26:66:b7:9d:af:f9:
2d:15:67:65:d4:a7:eb:0e:54:d4:5b:da:96:5a:ac:b9:97:6f:
56:53:4e:61:c0:50:1f:78:40:1d:ff:70:47:45:16:34:90:2a:
05:91:fa:40:98:40:de:75:a4:c0:2a:97:07:38:33:c2:40:81:
4c:4b:8d:aa:82:03:18:84:e5:d7:6d:30:51:46:5b:cc:6d:41:
27:44:e3:73:89:23:61:31:89:3e:f5:0f:e2:04:06:64:30:8d:
31:39:40:a5:ad:54:8d:96:14:f4:fd:90:b3:0b:96:86:02:5a:
33:35:93:c5:2f:74:05:ef:c2:8d:6c:0a:e8:30:5a:40:b7:ca:
2a:ec:6a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:07:13 2026 by rpki-client