Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft
File: EzSVRauL_SZSc-jUhDuYvwtBSPI.mft (raw, json)
Hash identifier: O4VGwc6MDWUOSXIhoCagV8rjzt0cSdTSO5klGZKyxLE=
Subject key identifier: D0:B7:FA:2F:9D:25:EC:3B:60:7C:68:56:19:57:74:4B:06:6D:20:89
Authority key identifier: 13:34:95:45:AB:8B:FD:26:52:73:E8:D4:84:3B:98:BF:0B:41:48:F2
Certificate issuer: /CN=13349545ab8bfd265273e8d4843b98bf0b4148f2
Certificate serial: 019EB5E94A370D403B0E10A4F8B29729FC5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzSVRauL_SZSc-jUhDuYvwtBSPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 09:00:25 +0000
Manifest this update: Thu 11 Jun 2026 09:00:25 +0000
Manifest next update: Fri 12 Jun 2026 09:00:25 +0000
Files and hashes: 1: EzSVRauL_SZSc-jUhDuYvwtBSPI.crl (hash: U8FJ0HDschlT/lGhsWzPw+Cpy+rNeCiUORjaxV7cB88=)
2: uynZ3jgCdHPAcePQynfxjEPAeXY.roa (hash: rhvew1e/Vbfk2rGbsdSlPPP6ecsRbphOEm/BmlJmkO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzSVRauL_SZSc-jUhDuYvwtBSPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:e9:4a:37:0d:40:3b:0e:10:a4:f8:b2:97:29:fc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13349545ab8bfd265273e8d4843b98bf0b4148f2
Validity
Not Before: Jun 11 09:00:25 2026 GMT
Not After : Jun 12 09:00:25 2026 GMT
Subject: CN=d0b7fa2f9d25ec3b607c68561957744b066d2089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e4:ba:1d:93:5b:5a:70:9b:97:86:8c:09:a6:
e4:76:db:13:24:9f:fd:49:a0:ca:f0:f1:e2:bd:d9:
49:73:eb:4a:09:43:e1:12:d1:55:d0:6a:d8:97:ee:
62:f3:30:3f:4b:23:2a:0d:ab:d7:78:e8:b4:14:21:
4b:ee:fc:1d:4b:fa:de:68:e2:77:18:ea:33:b9:66:
d0:7f:a4:5f:0c:0c:32:1c:05:77:ab:a7:6c:1a:31:
50:a7:35:6d:fa:91:7a:53:cf:69:f3:d1:36:af:e4:
b3:b6:28:a0:10:04:0c:bd:66:2d:c3:93:e5:16:cb:
ee:2b:e3:77:af:30:de:18:1c:67:77:04:38:dd:2f:
d5:c5:01:5e:12:9d:90:fa:37:62:6c:ea:b2:95:11:
01:8a:ef:ea:d9:be:9a:58:17:e0:d4:7c:85:42:65:
d8:43:40:67:99:33:94:db:f8:d9:ad:74:c3:c5:f1:
9f:44:21:ae:e6:ae:64:58:f9:09:25:a7:95:41:d0:
f3:1c:6d:84:14:60:88:c7:81:1f:36:35:9a:8f:f5:
7b:a3:b6:48:18:01:74:a2:55:3c:75:c5:1b:ae:b6:
28:7e:f0:d4:88:05:8a:8b:08:2f:77:f6:db:be:86:
91:fd:51:14:30:b2:5e:34:7d:99:b4:93:d3:d9:fb:
43:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B7:FA:2F:9D:25:EC:3B:60:7C:68:56:19:57:74:4B:06:6D:20:89
X509v3 Authority Key Identifier:
keyid:13:34:95:45:AB:8B:FD:26:52:73:E8:D4:84:3B:98:BF:0B:41:48:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzSVRauL_SZSc-jUhDuYvwtBSPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b6:f5:dd:49:e9:6c:4a:df:67:d0:5b:0d:c4:ca:01:3e:5e:
3c:cc:b3:c8:83:53:e8:61:7c:25:b6:c8:60:53:12:70:9f:e7:
d5:ef:5a:80:7e:4d:68:d3:05:c0:33:df:1b:e9:68:55:11:fb:
81:7a:04:f0:16:b4:d3:33:95:f6:4e:f5:75:8a:e9:a2:1c:4e:
db:fe:aa:ea:2f:94:47:ba:27:fc:de:c1:b1:f1:52:20:7c:1f:
14:88:5f:d8:75:69:55:b8:65:df:18:fd:f8:a3:e5:20:df:3f:
11:7b:0e:a0:1a:bb:08:5f:c7:4d:bc:e4:6e:9f:49:be:5f:ac:
53:10:06:46:e2:b3:ec:c0:02:a3:13:0e:81:e5:2c:22:85:3c:
cd:76:ae:10:e5:c9:46:9c:dd:0c:0b:7d:e0:80:2e:07:ee:87:
97:f9:71:0d:27:33:96:82:97:8f:4c:56:e9:d4:2b:a1:e5:ed:
e1:ee:31:e0:fd:37:ea:7b:33:50:bc:25:cb:1c:39:0f:db:95:
27:1c:d7:64:ef:52:76:31:f8:08:db:5f:03:cb:a3:10:fe:bf:
5e:fb:b6:0f:53:c5:ba:cb:2b:5f:e3:06:bf:f1:4b:cb:ac:c0:
97:57:ee:d1:a5:5f:4c:c6:bc:3f:7b:4a:42:03:c2:0e:03:23:
26:e8:4e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:51 2026 by rpki-client