Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
File: Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft (raw, json)
Hash identifier: AaypBgWoi8sx6GnBf2IRwF+QHEn6Zk0qRAduWiz1zPk=
Subject key identifier: 45:D1:AD:A2:5F:A2:F0:A4:46:23:E5:FA:88:F5:6C:05:F7:EC:A3:9B
Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
Certificate issuer: /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Certificate serial: 019D382DDF3E406B7C62865FFFAD8193F884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
Manifest number: 16DF
Signing time: Sun 29 Mar 2026 06:00:23 +0000
Manifest this update: Sun 29 Mar 2026 06:00:23 +0000
Manifest next update: Mon 30 Mar 2026 06:00:23 +0000
Files and hashes: 1: Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl (hash: 1ru30U+TeIodlhg5RKFJpMUSPlJKzQbg3qCLxDPorEA=)
2: KAZZmnJNcc3J8hdxVQCO2YzAFOk.roa (hash: Tn9EAPhePmRvkHGL8zdRZCb2aqgnTcgDWpOmWf8X5WU=)
3: WNNX0VNsYOnOt7_5Ye8MxMHFMuU.roa (hash: ieYhP55/ISwvI2Q5dlwCNbQyWY0xH0nyLmu75b3vMPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:df:3e:40:6b:7c:62:86:5f:ff:ad:81:93:f8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Validity
Not Before: Mar 29 06:00:23 2026 GMT
Not After : Mar 30 06:00:23 2026 GMT
Subject: CN=45d1ada25fa2f0a44623e5fa88f56c05f7eca39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:36:2d:96:71:f4:76:fd:9b:a3:a0:f3:94:
b9:43:d7:1b:88:60:66:c1:68:8e:b4:d6:37:67:e0:
41:e4:7c:f9:46:6a:45:22:d8:77:3d:22:47:9e:a8:
1c:d1:f1:d4:3f:2e:87:91:95:be:33:ae:1c:0b:45:
9b:07:98:b2:63:a2:a8:b9:e7:15:cd:42:53:c9:0a:
bf:66:50:96:59:ac:6b:88:a9:40:36:cb:39:df:bc:
b6:c1:16:28:18:b1:d4:fe:c3:60:c9:70:86:9c:f1:
c8:c1:d4:ac:15:04:70:81:64:de:50:c7:b0:de:64:
77:af:4b:4b:01:09:d0:8b:bb:be:4d:c9:d2:af:2d:
98:cb:c6:74:94:7f:35:b8:d8:e1:d4:11:b2:de:30:
29:03:95:a8:b9:32:66:ad:6f:15:b2:b1:6e:27:75:
b9:81:7d:4a:20:10:a8:f3:c4:f0:37:bf:d5:e5:b3:
ea:70:4a:5e:0c:ba:20:c0:64:ee:05:41:76:31:cb:
8e:b4:d7:39:15:28:9e:e4:63:a1:25:06:14:1b:97:
7e:63:79:b0:31:24:a8:4a:47:31:39:c4:cc:05:77:
05:12:24:64:18:15:d2:a7:48:1f:33:c5:2a:c7:f0:
5a:4b:fa:9c:66:8a:3d:52:5e:5f:bf:6e:38:d7:eb:
42:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D1:AD:A2:5F:A2:F0:A4:46:23:E5:FA:88:F5:6C:05:F7:EC:A3:9B
X509v3 Authority Key Identifier:
keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e3:ce:a8:56:9b:17:b7:0e:58:fe:ea:bf:4b:d9:6f:d6:da:
47:93:0a:44:ec:cb:03:71:be:7c:85:99:77:fe:7b:45:d6:4e:
34:70:85:50:b4:61:55:6a:2c:6e:fb:e4:dd:97:d6:66:1d:d6:
ae:e6:b3:47:72:80:72:35:d0:5f:26:61:87:d0:b2:c6:ca:93:
91:f5:f4:13:44:f1:56:e4:5a:95:2e:fd:1d:68:94:c5:6d:cc:
64:fd:c4:f2:76:d0:42:72:4e:55:fc:83:c4:7e:c2:d6:64:6b:
ec:5d:64:cf:66:bb:7b:47:aa:ea:f5:b7:3e:d1:57:1f:48:cb:
14:bf:3b:4f:c3:ca:5e:60:05:6e:42:93:23:0a:6a:8b:5c:41:
68:9e:49:ba:03:ed:5d:ee:51:74:cd:e4:9b:c9:eb:52:ba:fb:
aa:ff:b5:2a:11:a0:62:59:58:27:04:aa:13:77:f0:86:48:d6:
a3:f8:48:8d:33:89:2a:bc:e2:25:57:14:b9:0a:24:4c:f5:1e:
2b:66:c8:45:db:92:03:1c:a0:c9:15:70:4d:a7:80:ba:03:a4:
28:bd:ba:4a:b6:f4:70:d8:45:36:0a:c3:4d:0c:17:48:2d:b3:
55:ee:45:b0:d3:0a:a7:79:87:a0:26:70:29:a1:e1:da:4f:64:
6d:2d:79:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:43 2026 by rpki-client