Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft
File: EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft (raw, json)
Hash identifier: sSmbT5XJm29dv0rrqd3iMGalGgy2KofvHucAWUcAs8I=
Subject key identifier: 0E:46:DA:66:76:94:72:79:8C:19:45:2C:74:F5:00:BD:53:41:60:BD
Authority key identifier: 13:31:33:4C:8A:35:DA:66:B4:4D:90:93:47:A6:43:EE:44:19:1A:AF
Certificate issuer: /CN=1331334c8a35da66b44d909347a643ee44191aaf
Certificate serial: 019D3A1D02105DF21C92375707C5D290418C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft
Manifest number: 022D
Signing time: Sun 29 Mar 2026 15:01:12 +0000
Manifest this update: Sun 29 Mar 2026 15:01:12 +0000
Manifest next update: Mon 30 Mar 2026 15:01:12 +0000
Files and hashes: 1: EzEzTIo12ma0TZCTR6ZD7kQZGq8.crl (hash: EDSXWMQsT0xhIA3tBH/P305asGTkX0FTmQXF/tDSXII=)
2: dnIjUmsEHgp_YFu7qyPBpGHMn1A.asa (hash: /XZO0wlObj4P7b6zWnKA+wOQByUBrhSwjtvumpgT9Js=)
3: yx7n_319ZBwL0eqNMaxxSiyVPTE.roa (hash: DDdO4yg57n9C22JYHfd0ICckYRel7TybusY/aTLncRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1d:02:10:5d:f2:1c:92:37:57:07:c5:d2:90:41:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1331334c8a35da66b44d909347a643ee44191aaf
Validity
Not Before: Mar 29 15:01:12 2026 GMT
Not After : Mar 30 15:01:12 2026 GMT
Subject: CN=0e46da66769472798c19452c74f500bd534160bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:ed:69:5c:1d:d5:25:b1:9c:ff:9e:df:aa:
78:b0:c4:bd:a3:9b:3d:5d:0c:55:84:8e:9a:ea:21:
79:f4:e3:c8:e2:a3:6a:a2:0f:d0:03:48:49:05:98:
8d:89:54:95:0c:5d:be:fa:2d:d8:0f:c9:c6:d2:70:
dd:82:d5:0a:a2:75:89:c3:f2:07:76:5d:c7:57:bd:
31:21:95:1b:bf:5e:55:c4:68:20:7a:83:6d:58:6b:
e5:7d:7d:9a:ac:32:f4:d7:4a:b3:a6:36:75:19:4e:
f1:aa:75:38:58:c2:f3:36:96:a7:c7:36:06:34:d1:
6f:69:8a:c6:2b:0d:d8:76:cc:a0:47:df:7e:59:86:
73:ff:01:88:7b:d9:b1:1c:dc:6e:5e:21:fd:ef:56:
5b:e3:e2:59:b3:8f:36:af:7d:c3:a1:f6:3f:1b:af:
95:d0:71:3c:92:cc:b7:8c:ba:7d:e1:86:87:cc:f4:
d1:4d:b4:a2:50:a9:88:52:de:2b:f6:cd:72:98:f0:
f1:51:31:1d:8c:b7:6a:2d:8b:37:76:b6:e4:b8:2b:
e0:d3:bf:36:ba:6c:fa:e0:52:76:dc:4e:30:00:8f:
75:36:7d:0d:ce:02:89:1e:fe:7a:b8:0e:4d:cf:a5:
5e:0d:8d:4d:5d:42:c3:40:e3:c8:f6:b5:d8:5f:03:
12:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:46:DA:66:76:94:72:79:8C:19:45:2C:74:F5:00:BD:53:41:60:BD
X509v3 Authority Key Identifier:
keyid:13:31:33:4C:8A:35:DA:66:B4:4D:90:93:47:A6:43:EE:44:19:1A:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:98:d3:ac:bb:df:3f:c7:a9:fe:9d:00:36:6e:2e:80:fe:e1:
b8:d6:02:2e:37:cd:a7:3d:5f:14:eb:60:dc:b8:ff:0d:0d:9c:
f7:b2:17:56:4f:3f:ba:2e:e8:38:ab:25:b0:cb:fb:c6:46:79:
f4:67:29:73:01:02:3d:d0:fd:10:3a:54:e6:dc:77:c1:0c:bd:
af:55:3b:be:07:38:14:41:33:7b:7d:45:43:70:91:35:34:42:
e4:d1:f2:1a:28:cb:f3:a4:d0:a9:69:98:98:5b:cb:0f:1e:2d:
1b:5e:57:9e:01:27:b8:53:fc:80:9d:03:36:d2:84:84:7c:53:
6a:76:dd:a7:79:5c:7e:5f:13:38:c5:1c:40:01:1d:1f:2b:0f:
72:07:46:36:fe:a7:b4:2f:bd:ee:bc:45:40:59:2c:3e:5d:79:
ad:5b:44:5f:91:c6:a1:52:d2:05:f2:18:e3:2d:43:2b:a3:be:
14:da:04:73:72:fc:fd:4a:a9:40:04:f6:af:a6:59:26:ea:54:
24:5e:a5:6e:34:95:4f:fa:85:27:5f:f9:15:dd:b4:2e:d7:fc:
67:07:91:0c:cc:6d:20:b2:42:fc:41:0c:27:4d:36:b5:93:80:
fc:fa:39:0f:da:12:4b:95:bc:da:ed:e6:ae:cc:25:2f:e6:00:
6d:96:96:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:49 2026 by rpki-client