Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft
File: EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft (raw, json)
Hash identifier: RGK/41ACmHIlG50xKIeT4E2FDxVKyb2Rx3Niq2Y8PR4=
Subject key identifier: 70:06:DE:CC:50:9B:80:41:C1:3A:81:C4:2D:68:3A:C2:03:76:4D:C3
Authority key identifier: 13:31:33:4C:8A:35:DA:66:B4:4D:90:93:47:A6:43:EE:44:19:1A:AF
Certificate issuer: /CN=1331334c8a35da66b44d909347a643ee44191aaf
Certificate serial: 01A03E5FC02FBDFFB26B3F00A6F65982FFAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft
Manifest number: 03C3
Signing time: Wed 26 Aug 2026 14:00:57 +0000
Manifest this update: Wed 26 Aug 2026 14:00:57 +0000
Manifest next update: Thu 27 Aug 2026 14:00:57 +0000
Files and hashes: 1: EzEzTIo12ma0TZCTR6ZD7kQZGq8.crl (hash: cZJgRE6b/L620nhBzNu8eseOpJIPqxC11OlVgKBm62g=)
2: d3pkWWdmvNQR45OZHT-x9rdGQNs.roa (hash: TDl/0oWRr3l5gDCKGW8colL6v491r+s+27SkHi8/nrc=)
3: drsHyJd54bQmTrK79sYayH7gZU0.asa (hash: PhsvxaQWRgPrAHzHZsRm4M1zdIRNOuacc65APqiAfno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:5f:c0:2f:bd:ff:b2:6b:3f:00:a6:f6:59:82:ff:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1331334c8a35da66b44d909347a643ee44191aaf
Validity
Not Before: Aug 26 14:00:57 2026 GMT
Not After : Aug 27 14:00:57 2026 GMT
Subject: CN=7006decc509b8041c13a81c42d683ac203764dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:22:56:da:25:71:32:0b:7f:b7:0a:97:9f:a4:
a8:2a:c4:1a:9a:ac:3e:a6:47:3b:58:3d:31:39:93:
f4:77:21:a9:45:eb:3f:01:a0:96:82:b4:bc:c7:18:
13:6a:cd:de:8e:2c:76:13:9a:51:46:b5:6e:c4:fd:
45:c0:18:f6:db:68:e5:89:2e:51:e9:7a:f0:d4:7b:
a3:52:0c:8a:d4:d0:ce:c6:69:59:2d:3b:cc:a5:b5:
d5:41:b4:00:19:a6:51:5f:50:70:17:66:b2:51:4f:
1d:d9:d4:b0:8a:d2:12:57:57:6d:16:fb:49:6d:b5:
b1:03:e8:ac:99:30:0c:0d:b9:d3:4c:22:8a:22:f8:
7f:ad:95:b2:18:40:41:2a:60:a2:04:91:6b:8a:3b:
cf:0d:22:9f:6b:23:8b:b5:6c:bd:80:b3:29:e4:81:
cd:7a:93:9c:7f:52:0e:98:bc:32:91:b2:87:84:12:
db:cb:81:c5:af:68:79:77:d9:ab:ab:b7:b9:a8:6e:
7a:66:bf:75:2e:62:a5:4a:00:71:cb:bc:3d:d2:6a:
e8:52:e5:38:66:5e:de:a9:d4:85:83:82:29:1a:cf:
6c:61:3e:02:1d:32:a4:0f:da:5e:ad:f7:b0:0a:ef:
e8:48:99:d8:26:8a:4a:9f:44:2b:15:5c:92:11:65:
01:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:06:DE:CC:50:9B:80:41:C1:3A:81:C4:2D:68:3A:C2:03:76:4D:C3
X509v3 Authority Key Identifier:
keyid:13:31:33:4C:8A:35:DA:66:B4:4D:90:93:47:A6:43:EE:44:19:1A:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bd:ac:c9:7f:45:72:fa:5a:79:aa:8c:af:93:bd:b4:7a:d3:
c3:a1:c9:ce:e0:7f:f6:b3:28:c3:cc:a7:6d:b8:1c:a4:2b:19:
46:b8:89:29:41:1d:b6:b3:ce:4f:45:bf:ab:98:81:63:18:ea:
ce:6a:2c:b1:62:9b:8f:da:22:85:d6:28:b3:47:7e:36:74:1a:
9c:a7:47:f1:8a:1e:7e:c6:42:06:42:3f:bc:34:b1:95:2c:a7:
81:c1:f0:fb:11:8c:31:47:18:9f:d5:df:2e:ed:95:ec:6a:28:
7c:6c:54:71:58:f6:3e:97:9f:4f:4b:de:14:43:e9:bc:6b:ca:
08:b4:7e:40:31:c8:b4:c0:6b:c8:c5:48:0f:55:89:48:7b:10:
ed:5e:e4:20:28:4d:7d:12:d5:f9:8e:8e:28:ec:d9:f8:d2:f7:
6c:3a:09:3e:a5:0e:96:98:fb:69:69:bb:9a:2f:a4:93:f3:96:
ee:61:74:dd:68:bb:89:ea:d1:af:d2:ae:ed:ba:d0:e2:ed:b5:
55:86:4d:18:f4:38:92:68:71:29:1d:72:55:73:aa:8e:f1:d6:
08:cf:f3:be:21:65:83:1b:30:22:f2:41:87:c6:13:4e:88:ee:
fa:d8:78:60:8f:ae:4a:90:da:21:c3:69:51:f5:86:71:4b:c5:
94:87:29:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:29:43 2026 by rpki-client