Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
File: cEZO_kc3QepObM9sPFo3xm89oXk.mft (raw, json)
Hash identifier: XNp5tzqyX/AWCQNtvCEF9G6E/uTzamuFJT6fZaFge+s=
Subject key identifier: 65:B2:CA:0B:90:A7:AC:8A:6A:15:9F:B2:A2:00:4F:53:F4:49:CB:FD
Authority key identifier: 70:46:4E:FE:47:37:41:EA:4E:6C:CF:6C:3C:5A:37:C6:6F:3D:A1:79
Certificate issuer: /CN=70464efe473741ea4e6ccf6c3c5a37c66f3da179
Certificate serial: 01A17D731EE018276CCEE8063C2877064F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
Manifest number: 02DD
Signing time: Tue 27 Oct 2026 13:00:58 +0000
Manifest this update: Tue 27 Oct 2026 13:00:58 +0000
Manifest next update: Wed 28 Oct 2026 13:00:58 +0000
Files and hashes: 1: ROpNx89soFP8JE-okJDCTVHVXDs.roa (hash: 5HtcGDIbCLb9z7TZql7Z+rs2Xx1sglk4pFTRwXa2X+g=)
2: cEZO_kc3QepObM9sPFo3xm89oXk.crl (hash: pjDyF1OXSJJJcL8yEIWH4Om2XR4cLkhtiFsC52X8EkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:1e:e0:18:27:6c:ce:e8:06:3c:28:77:06:4f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70464efe473741ea4e6ccf6c3c5a37c66f3da179
Validity
Not Before: Oct 27 13:00:58 2026 GMT
Not After : Oct 28 13:00:58 2026 GMT
Subject: CN=65b2ca0b90a7ac8a6a159fb2a2004f53f449cbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c7:ef:cb:2a:84:11:3c:3f:9c:cd:16:89:b2:
c2:18:fe:a3:56:35:97:c9:cf:bc:cc:a6:93:d5:6b:
be:ab:5f:24:d8:fa:9d:cd:2d:be:45:7a:54:9a:c7:
98:de:7d:26:ee:f0:ea:ec:bb:98:fc:0a:d6:1a:77:
c6:f6:16:2e:10:c7:0f:e6:a0:f8:b7:21:cd:f2:85:
bd:c2:24:bd:6d:b2:48:4b:71:65:9b:d4:46:b5:4a:
f5:86:af:24:2f:85:48:e4:9c:68:04:c0:0f:e9:4d:
50:11:59:cf:70:f3:e3:f7:d4:62:90:9c:0f:9d:3a:
99:d0:c7:fd:ee:a6:57:c1:3e:15:25:12:1b:73:54:
40:c5:8e:45:34:f9:ed:95:04:83:e8:c1:bc:c6:28:
05:aa:5a:e4:3c:f6:22:e6:5f:93:49:b0:1b:e1:1a:
07:c2:7e:14:92:cf:4e:86:32:1d:88:2f:2f:2e:c6:
52:3b:35:13:d3:31:3c:73:2e:22:6b:6f:3d:f6:29:
20:aa:03:ab:0c:ca:77:23:bb:e8:7b:90:4c:43:4f:
41:f5:ac:8f:ff:64:00:ea:bd:e1:6b:e2:c7:67:0c:
4d:08:88:b1:ae:11:fe:38:67:3b:fa:fd:8c:8b:9d:
38:70:f3:58:c6:09:48:b4:26:5b:39:c2:e6:a1:1c:
d5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B2:CA:0B:90:A7:AC:8A:6A:15:9F:B2:A2:00:4F:53:F4:49:CB:FD
X509v3 Authority Key Identifier:
keyid:70:46:4E:FE:47:37:41:EA:4E:6C:CF:6C:3C:5A:37:C6:6F:3D:A1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ad:a1:a5:f3:92:f7:2e:54:03:93:b9:69:2b:5c:18:a8:57:
78:f9:f3:4b:3b:2a:ec:a6:d7:66:4f:f8:ac:63:57:d4:33:18:
e3:3b:f6:a1:21:90:29:fa:f3:47:c3:da:16:e4:5f:0b:c8:28:
b6:da:c2:ab:34:0f:3c:e1:aa:85:b1:b7:dd:53:cd:a7:ad:03:
1f:d9:58:7f:51:10:ee:5e:85:2e:8a:cc:c3:9d:92:c2:7e:35:
85:af:2f:24:76:5d:47:bb:7f:d9:26:e1:17:53:1b:ff:ef:04:
7d:ac:6f:c4:6a:6d:25:65:c5:77:da:22:29:e1:1c:f7:e7:a6:
c1:42:6d:d4:b2:60:37:60:34:30:7e:20:4f:6f:c1:bd:98:0c:
73:62:ee:23:64:b5:d5:25:fd:7c:a9:85:a6:1b:b1:c0:04:56:
7d:9c:49:76:a9:75:51:d9:b0:58:cc:74:c7:0d:d8:93:bb:34:
a7:31:dc:4c:eb:65:f4:73:a7:f2:2a:89:5e:63:64:a3:2f:f1:
4c:24:74:b8:08:c9:2b:60:9d:e7:97:e4:95:6f:b3:19:22:ad:
e4:0d:64:66:e0:b3:5e:f8:82:43:19:2d:01:33:35:c5:ef:f9:
24:a8:9f:38:63:88:38:33:b9:80:f7:8c:e0:b4:d5:74:4b:cc:
6f:06:b4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:49:06 2026 by rpki-client