Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
File: EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft (raw, json)
Hash identifier: SYitaYaPNVRHGWUygjXXw6WVi9ZAVWSLg9aCRY0wnFU=
Subject key identifier: E5:1E:C9:D4:F0:AF:DD:45:A4:45:F9:8C:78:51:B0:59:F3:47:53:72
Authority key identifier: 13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF
Certificate issuer: /CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf
Certificate serial: 019D371BF7D7E3CE0683AF1AD59BD2308B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
Manifest number: 1888
Signing time: Sun 29 Mar 2026 01:01:12 +0000
Manifest this update: Sun 29 Mar 2026 01:01:12 +0000
Manifest next update: Mon 30 Mar 2026 01:01:12 +0000
Files and hashes: 1: EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl (hash: jYJo+BM+ZkIGNcws0vpb4H7haTmrOv/aTUn/Uqk7leM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:f7:d7:e3:ce:06:83:af:1a:d5:9b:d2:30:8b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf
Validity
Not Before: Mar 29 01:01:12 2026 GMT
Not After : Mar 30 01:01:12 2026 GMT
Subject: CN=e51ec9d4f0afdd45a445f98c7851b059f3475372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3e:c1:ba:a6:a5:8e:73:a3:82:70:5a:a8:42:
db:f0:a2:af:e7:fb:11:fc:0f:ff:86:b6:80:05:0d:
24:36:a3:95:50:51:2d:28:ab:43:90:39:45:39:98:
6d:18:54:3b:e2:a7:0d:50:17:26:0f:81:77:80:9e:
3f:44:d8:30:8e:04:3f:5d:f1:97:11:c6:cc:34:1d:
aa:29:26:85:54:0b:9e:6d:54:e8:c3:8c:90:db:5d:
8b:77:cd:c5:43:b9:08:86:30:23:dd:43:94:cd:ed:
f9:17:f6:c8:c6:9b:36:c4:72:f1:83:04:00:85:78:
35:e0:d1:20:a0:2b:25:6c:e0:d6:50:b8:5f:7e:f0:
f4:36:0f:98:6b:68:5e:2a:f0:55:e5:34:6c:e8:2d:
9a:10:68:af:d6:08:b1:f7:df:75:23:1f:40:86:42:
0c:d6:8b:2c:3f:3d:aa:73:74:ad:29:40:d4:35:48:
2a:1f:bf:27:ee:27:29:4e:91:7d:b0:96:45:5d:13:
1d:36:66:c9:dd:34:f1:47:8d:e5:ae:d1:ff:6a:c2:
38:e4:64:6f:b1:2a:52:c3:49:e8:64:9f:43:93:31:
4a:28:68:a8:79:af:18:b5:b7:e7:90:32:ae:e8:62:
2d:ac:87:cd:69:04:0d:3b:61:d2:0f:9d:79:e6:93:
1e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1E:C9:D4:F0:AF:DD:45:A4:45:F9:8C:78:51:B0:59:F3:47:53:72
X509v3 Authority Key Identifier:
keyid:13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:84:fc:e9:0c:f2:38:9e:e8:f9:a4:88:d2:e4:33:8f:97:30:
a4:50:e6:2d:bd:1f:79:7a:1d:82:da:26:30:c7:be:bd:69:16:
80:e0:a6:ac:a3:98:55:da:df:99:3b:a3:ce:0a:e8:15:5c:4d:
9a:9f:43:f3:77:14:b3:61:8f:3f:f9:6f:5b:60:8e:82:61:54:
3b:ae:c2:4e:52:95:01:87:f6:55:d8:8d:1c:b0:41:7c:d5:86:
44:fa:78:d7:53:38:64:e9:82:10:3c:14:4d:79:42:d4:86:8a:
b4:f2:3a:3c:f4:02:9f:29:45:65:5a:e0:74:32:1b:91:76:11:
d8:60:50:e1:20:8d:5d:f8:a4:15:32:8e:c1:65:83:e7:66:14:
b6:92:d6:01:ac:07:e7:e5:50:a8:4b:ad:a6:0a:86:50:83:8c:
e8:a7:ab:44:34:81:d2:87:f7:a4:68:07:16:61:55:80:cc:10:
1d:3d:d9:f3:a1:98:e4:5f:01:1e:da:be:43:90:0e:b9:0a:d8:
c1:a9:83:ac:73:e8:31:05:57:1e:a4:2f:68:0a:46:7c:c7:e2:
e2:14:08:09:f7:f0:69:5c:f7:5f:48:b9:73:6a:53:6e:ba:8b:
c2:e3:42:54:70:fc:73:8f:d0:69:52:c6:7f:d8:88:d1:01:c0:
09:fc:02:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G/fX484Gg68a1ZvSMIuNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMzIzZWFjZDc3ZTVjYTU5NTJkZDY3YzI4ZjRmZDkwZDMy
YWZhZGYwHhcNMjYwMzI5MDEwMTEyWhcNMjYwMzMwMDEwMTEyWjAzMTEwLwYDVQQD
EyhlNTFlYzlkNGYwYWZkZDQ1YTQ0NWY5OGM3ODUxYjA1OWYzNDc1MzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz7BuqaljnOjgnBaqELb8KKv5/sR
/A//hraABQ0kNqOVUFEtKKtDkDlFOZhtGFQ74qcNUBcmD4F3gJ4/RNgwjgQ/XfGX
EcbMNB2qKSaFVAuebVTow4yQ212Ld83FQ7kIhjAj3UOUze35F/bIxps2xHLxgwQA
hXg14NEgoCslbODWULhffvD0Ng+Ya2heKvBV5TRs6C2aEGiv1gix9991Ix9AhkIM
1ossPz2qc3StKUDUNUgqH78n7icpTpF9sJZFXRMdNmbJ3TTxR43lrtH/asI45GRv
sSpSw0noZJ9DkzFKKGioea8YtbfnkDKu6GItrIfNaQQNO2HSD5155pMemQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUeydTwr91FpEX5jHhRsFnzR1NyMB8GA1UdIwQY
MBaAFBMyPqzXflyllS3WfCj0/ZDTKvrfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXpJLXJOZC1YS1dWTGRaOEtQVDlrTk1xLXQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jYmVhYzgtZWJlZC00NWZiLWI3MjQt
NzBiMWM2OWI0MjMyLzEvRXpJLXJOZC1YS1dWTGRaOEtQVDlrTk1xLXQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9jYmVhYzgtZWJlZC00NWZiLWI3MjQtNzBiMWM2OWI0MjMy
LzEvRXpJLXJOZC1YS1dWTGRaOEtQVDlrTk1xLXQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYT86Qzy
OJ7o+aSI0uQzj5cwpFDmLb0feXodgtomMMe+vWkWgOCmrKOYVdrfmTujzgroFVxN
mp9D83cUs2GPP/lvW2COgmFUO67CTlKVAYf2VdiNHLBBfNWGRPp411M4ZOmCEDwU
TXlC1IaKtPI6PPQCnylFZVrgdDIbkXYR2GBQ4SCNXfikFTKOwWWD52YUtpLWAawH
5+VQqEutpgqGUIOM6KerRDSB0of3pGgHFmFVgMwQHT3Z86GY5F8BHtq+Q5AOuQrY
wamDrHPoMQVXHqQvaApGfMfi4hQICffwaVz3X0i5c2pTbrqLwuNCVHD8c4/QaVLG
f9iI0QHACfwCvw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:28 2026 by rpki-client