Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
File: 1EZzVsX7atsuunE8gBkUsvTX860.mft (raw, json)
Hash identifier: hqosc8UidUEcL3c2uug+G31yhiK7BhMZ0es9RsujZoA=
Subject key identifier: 82:59:D5:E1:AF:50:0F:9C:E7:62:67:1E:04:C6:5A:31:A7:65:95:D4
Authority key identifier: D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD
Certificate issuer: /CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
Certificate serial: 019D3A8AC574614971DD4A7A9390CB4B6A69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
Manifest number: 03A2
Signing time: Sun 29 Mar 2026 17:01:06 +0000
Manifest this update: Sun 29 Mar 2026 17:01:06 +0000
Manifest next update: Mon 30 Mar 2026 17:01:06 +0000
Files and hashes: 1: 1EZzVsX7atsuunE8gBkUsvTX860.crl (hash: HDjBSsGqlVaSmxVM4w0lUrZNGdX+eeCHnSRDqOW7Ri8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:c5:74:61:49:71:dd:4a:7a:93:90:cb:4b:6a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
Validity
Not Before: Mar 29 17:01:06 2026 GMT
Not After : Mar 30 17:01:06 2026 GMT
Subject: CN=8259d5e1af500f9ce762671e04c65a31a76595d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:63:39:8a:3d:ee:5b:bd:33:c9:d4:fb:52:9d:
53:70:27:b3:5a:ab:17:f6:62:c3:65:28:86:b7:5f:
72:cf:2b:86:47:b4:37:03:98:26:6a:eb:24:1c:78:
2a:0b:71:00:94:e1:fa:f8:d8:9f:3c:95:12:a1:8a:
a1:0f:36:50:be:31:72:1e:f1:65:be:23:6b:1c:ad:
3a:02:89:d8:4e:73:71:75:e0:f3:79:29:4d:8c:9e:
a1:4c:7c:d6:ce:85:d4:60:7b:07:0d:a3:09:0d:ed:
df:53:e3:8c:c8:f4:c8:11:77:ce:5e:d7:42:26:1d:
cd:4a:f0:b7:a0:a3:51:c9:90:0d:40:1a:b3:6c:30:
43:ad:27:16:70:cf:6b:7e:24:1c:d1:9b:e1:be:68:
2b:48:5e:03:4d:cd:3c:3a:5f:00:b6:21:b0:89:da:
99:ff:95:a4:4f:ec:70:4b:49:64:0f:31:bf:b6:05:
f5:58:5a:b9:b7:57:eb:7f:74:96:f5:19:54:40:06:
ed:b6:9f:61:c4:15:de:f5:f3:6a:64:ac:b2:07:f4:
59:d9:a6:79:70:18:10:9a:b3:9a:45:28:b0:d7:c5:
03:94:a6:0c:58:b7:1f:92:df:9f:15:88:94:4f:dd:
07:25:7b:38:aa:8e:b8:f5:b9:de:25:5d:39:e9:76:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:59:D5:E1:AF:50:0F:9C:E7:62:67:1E:04:C6:5A:31:A7:65:95:D4
X509v3 Authority Key Identifier:
keyid:D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b1:fd:ba:2c:ee:8c:10:bf:e3:11:db:92:07:a5:f4:2d:6d:
05:cd:f8:36:2f:3a:02:34:79:1a:53:39:95:1c:88:ad:19:c9:
09:ad:fa:fe:2d:d6:df:ce:6b:29:f8:a3:92:d4:d0:d7:a6:ae:
4f:7b:08:7b:4f:f9:29:57:b8:45:cb:40:c2:63:19:13:54:dc:
63:10:9d:34:6d:72:8c:eb:a8:82:8b:9b:1c:fa:90:85:fc:de:
a4:2e:46:e0:58:2e:09:c2:4a:7d:63:4a:ff:c9:f0:15:cb:64:
10:e6:4a:36:f7:66:c2:31:f8:5d:38:3c:b8:26:a5:2a:c7:d7:
27:91:09:00:3c:08:19:f8:58:61:3e:4c:18:fb:2c:e6:41:09:
71:4e:98:c3:5f:9b:dd:ec:07:21:13:46:e2:82:10:49:df:41:
ae:19:41:d7:59:a0:08:a9:1c:1b:ee:ca:21:c8:87:73:4f:e6:
1e:11:7e:e8:66:91:bc:8f:15:f2:c5:20:b2:75:7a:52:71:aa:
b6:d8:ab:96:17:b4:55:90:87:60:e4:3e:9d:a9:be:19:94:61:
6d:cc:50:db:2f:12:ce:54:c6:ed:35:60:ee:77:68:c5:02:86:
cd:7c:f5:11:43:8c:4e:e9:6f:e8:be:35:66:06:74:15:4a:9c:
cd:c3:81:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:43 2026 by rpki-client