Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
File: Ez7rn3q6GeA7E2basIg_NlP8A74.mft (raw, json)
Hash identifier: jQiEdbsrPJ0JFvXobJdjDBF+aaz+a6pisE45/j8doUQ=
Subject key identifier: F3:42:04:12:5D:A7:CE:EE:D5:50:73:0F:AF:65:CA:8C:32:E1:C1:19
Authority key identifier: 13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE
Certificate issuer: /CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
Certificate serial: 019D3752EB53BD9250C1F617B0465F09EDDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
Manifest number: 15DF
Signing time: Sun 29 Mar 2026 02:01:14 +0000
Manifest this update: Sun 29 Mar 2026 02:01:14 +0000
Manifest next update: Mon 30 Mar 2026 02:01:14 +0000
Files and hashes: 1: Ez7rn3q6GeA7E2basIg_NlP8A74.crl (hash: Kv0PCGzJXEARVFcLWinmPAIIh0BM0UDH6c+TL5m9HBQ=)
2: zUZH8frHV9LyqR8uuy29ut30zGA.roa (hash: ZtNFrARi4yUhBACRab5+tIfsO4m0wuC3iZpaWR0rbTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:eb:53:bd:92:50:c1:f6:17:b0:46:5f:09:ed:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
Validity
Not Before: Mar 29 02:01:14 2026 GMT
Not After : Mar 30 02:01:14 2026 GMT
Subject: CN=f34204125da7ceeed550730faf65ca8c32e1c119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7b:3d:15:83:95:57:47:fa:d9:87:a7:8f:45:
e2:a2:05:7b:c0:78:64:c8:ff:4a:e2:32:18:d8:19:
33:03:d9:be:69:b6:8b:0f:b2:6c:f2:98:a4:82:77:
21:fe:c5:0b:cc:b4:96:c4:a8:3d:d6:9f:05:a5:e5:
31:12:76:23:79:73:85:b8:0f:78:3f:51:a1:77:8b:
77:7c:63:fc:d1:f2:2c:9f:18:46:66:79:aa:90:7b:
16:7a:e6:65:a7:05:bd:a0:fe:e5:5b:97:c3:51:6e:
79:b1:a5:78:3b:d2:d4:ae:30:17:ed:9d:d9:16:46:
cf:c2:29:d8:31:db:d6:22:d0:09:7b:9c:02:17:50:
b5:91:e0:bf:02:5f:83:de:d8:bb:a4:77:28:c9:9e:
e0:de:f9:f9:4c:54:0d:64:75:72:82:30:10:6f:73:
bd:4b:7e:72:62:3d:ef:9d:cd:4f:79:ed:c9:40:e0:
49:ad:b7:a4:6a:63:25:ec:72:26:3c:8a:36:11:3c:
1e:bf:66:93:16:e9:f3:78:ab:11:c4:44:4e:2c:4f:
41:49:1c:9b:af:ac:b3:6d:d1:c8:77:5c:54:a2:1f:
2c:28:8e:63:12:36:57:25:a7:ce:0a:eb:de:b6:8c:
48:7c:eb:82:51:78:0f:01:57:9d:d1:fd:dd:ee:39:
2d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:42:04:12:5D:A7:CE:EE:D5:50:73:0F:AF:65:CA:8C:32:E1:C1:19
X509v3 Authority Key Identifier:
keyid:13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f0:77:e8:61:d1:85:94:53:7a:64:af:91:ad:26:1d:79:74:
b4:df:c2:d6:a8:25:a5:8d:7e:fe:a7:ac:47:bd:bd:55:b7:5e:
90:b2:5e:4b:4b:ff:33:e7:68:25:a4:ce:8b:54:53:11:08:2d:
01:d3:6f:03:42:23:e9:02:40:d1:2e:a9:0f:6b:36:ef:18:fd:
f3:ba:c2:c2:c4:ed:49:9c:8d:19:f2:8f:d3:f0:9e:79:70:7c:
fc:8c:39:0a:ad:af:60:c1:28:34:00:b3:0f:68:d4:e0:63:49:
53:b4:15:f0:36:57:7c:2e:28:3c:6b:6c:93:f4:18:8d:bd:58:
c3:41:96:e0:d9:55:31:5c:ac:dd:6d:4c:86:ce:7e:cf:4e:57:
2d:d8:21:f3:5e:42:08:1f:bf:8c:94:69:a1:38:5c:e5:c2:bb:
00:0b:4b:d9:bf:f6:37:3e:61:d3:83:8e:a8:dd:f8:2d:ee:e2:
32:34:25:74:e6:98:65:0a:5d:e5:6f:43:4e:5c:11:31:54:07:
24:d5:fd:55:de:c6:70:48:a7:28:18:6f:1e:0d:48:27:d7:d3:
4d:85:2a:4f:c5:1a:15:f3:1b:f2:50:3a:6e:d6:17:25:f4:d6:
7b:28:e9:70:22:dc:0e:b2:ca:ac:9b:cc:a4:b9:01:fa:12:61:
cd:23:39:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UutTvZJQwfYXsEZfCe3eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzM2VlYjlmN2FiYTE5ZTAzYjEzNjZkYWIwODgzZjM2NTNm
YzAzYmUwHhcNMjYwMzI5MDIwMTE0WhcNMjYwMzMwMDIwMTE0WjAzMTEwLwYDVQQD
EyhmMzQyMDQxMjVkYTdjZWVlZDU1MDczMGZhZjY1Y2E4YzMyZTFjMTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3s9FYOVV0f62Yenj0XiogV7wHhk
yP9K4jIY2BkzA9m+abaLD7Js8pikgnch/sULzLSWxKg91p8FpeUxEnYjeXOFuA94
P1Ghd4t3fGP80fIsnxhGZnmqkHsWeuZlpwW9oP7lW5fDUW55saV4O9LUrjAX7Z3Z
FkbPwinYMdvWItAJe5wCF1C1keC/Al+D3ti7pHcoyZ7g3vn5TFQNZHVygjAQb3O9
S35yYj3vnc1Pee3JQOBJrbekamMl7HImPIo2ETwev2aTFunzeKsRxEROLE9BSRyb
r6yzbdHId1xUoh8sKI5jEjZXJafOCuvetoxIfOuCUXgPAVed0f3d7jkt0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNCBBJdp87u1VBzD69lyowy4cEZMB8GA1UdIwQY
MBaAFBM+6596uhngOxNm2rCIPzZT/AO+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXo3cm4zcTZHZUE3RTJiYXNJZ19ObFA4QTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZWY5ZTAtN2EwMC00ZmNhLWJlYWEt
NjZiNjI0ZWFlNzhjLzEvRXo3cm4zcTZHZUE3RTJiYXNJZ19ObFA4QTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS81ZWY5ZTAtN2EwMC00ZmNhLWJlYWEtNjZiNjI0ZWFlNzhj
LzEvRXo3cm4zcTZHZUE3RTJiYXNJZ19ObFA4QTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfB36GHR
hZRTemSvka0mHXl0tN/C1qglpY1+/qesR729VbdekLJeS0v/M+doJaTOi1RTEQgt
AdNvA0Ij6QJA0S6pD2s27xj987rCwsTtSZyNGfKP0/CeeXB8/Iw5Cq2vYMEoNACz
D2jU4GNJU7QV8DZXfC4oPGtsk/QYjb1Yw0GW4NlVMVys3W1Mhs5+z05XLdgh815C
CB+/jJRpoThc5cK7AAtL2b/2Nz5h04OOqN34Le7iMjQldOaYZQpd5W9DTlwRMVQH
JNX9Vd7GcEinKBhvHg1IJ9fTTYUqT8UaFfMb8lA6btYXJfTWeyjpcCLcDrLKrJvM
pLkB+hJhzSM5wQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:28 2026 by rpki-client