Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
File: cEZO_kc3QepObM9sPFo3xm89oXk.mft (raw, json)
Hash identifier: kV6EyUBxBOw1beN26ZTwWz9r38I5r5EazLgsIEbak8A=
Subject key identifier: 86:B7:D7:6F:8E:76:B4:ED:76:27:66:B9:E9:A1:0C:26:5B:B4:DA:5C
Authority key identifier: 70:46:4E:FE:47:37:41:EA:4E:6C:CF:6C:3C:5A:37:C6:6F:3D:A1:79
Certificate issuer: /CN=70464efe473741ea4e6ccf6c3c5a37c66f3da179
Certificate serial: 019D2AE0B02A2773268DAC2025E517466083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
Manifest number: A0
Signing time: Thu 26 Mar 2026 16:01:01 +0000
Manifest this update: Thu 26 Mar 2026 16:01:01 +0000
Manifest next update: Fri 27 Mar 2026 16:01:01 +0000
Files and hashes: 1: ROpNx89soFP8JE-okJDCTVHVXDs.roa (hash: 5HtcGDIbCLb9z7TZql7Z+rs2Xx1sglk4pFTRwXa2X+g=)
2: cEZO_kc3QepObM9sPFo3xm89oXk.crl (hash: Y0+c5tNTBJQI8EilNLgv4mUn2DxPCgHVTUP/zg6bJCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:b0:2a:27:73:26:8d:ac:20:25:e5:17:46:60:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70464efe473741ea4e6ccf6c3c5a37c66f3da179
Validity
Not Before: Mar 26 16:01:01 2026 GMT
Not After : Mar 27 16:01:01 2026 GMT
Subject: CN=86b7d76f8e76b4ed762766b9e9a10c265bb4da5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:8b:fa:8f:a5:4c:46:9d:37:b0:15:4d:47:
f4:46:bc:5c:8b:36:f5:f8:6f:c8:91:75:ba:21:d1:
18:97:c8:ae:75:fd:e4:da:1c:11:be:d5:64:35:13:
49:8e:f7:90:86:92:99:db:1c:96:ad:a0:c0:5b:70:
89:83:22:87:9f:97:f9:af:53:51:ff:44:7a:9a:fe:
a2:81:ca:60:9d:e5:1e:af:8f:26:62:2d:c0:46:d3:
99:26:d4:10:42:d9:ff:94:25:76:13:14:c4:46:23:
4c:33:88:b8:5c:4e:3b:f3:38:7d:dd:27:7c:6d:7d:
c6:69:5c:28:63:af:55:da:d3:ad:17:89:7d:11:40:
0d:0e:e3:b4:c4:59:6d:e4:cb:a6:a2:e7:72:8d:bb:
c0:15:e4:79:4a:bd:20:bb:7f:d6:26:dd:28:7d:eb:
68:d1:42:5e:cc:10:ef:42:ac:f2:14:bf:47:a2:f5:
3e:7b:68:43:dc:ea:80:af:90:45:ce:b5:e1:83:2e:
d1:ed:5c:54:97:1a:89:81:99:53:fa:df:14:8b:d7:
be:ce:80:6d:24:8b:8f:2b:0b:2a:b7:6d:26:ae:60:
bb:cf:82:b4:57:7e:63:b8:1c:a2:a2:09:5f:bf:3b:
5e:69:01:cd:b5:01:65:9f:6d:a2:1c:1b:da:81:c1:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B7:D7:6F:8E:76:B4:ED:76:27:66:B9:E9:A1:0C:26:5B:B4:DA:5C
X509v3 Authority Key Identifier:
keyid:70:46:4E:FE:47:37:41:EA:4E:6C:CF:6C:3C:5A:37:C6:6F:3D:A1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:e9:75:c9:a6:1d:c0:ec:ce:c1:cf:d8:1d:72:33:f0:88:f0:
0b:9d:ee:2a:f6:a1:c0:d8:01:ce:df:e0:7b:85:41:8c:f5:41:
00:00:50:51:da:4a:1a:56:ad:ca:5b:f1:6b:25:75:ed:73:77:
f5:a5:9d:54:24:43:32:c6:ef:7b:4c:07:b2:34:ae:d7:79:85:
9f:88:81:4c:b9:98:f2:95:ae:e5:cf:68:2e:41:1e:85:dd:f1:
49:34:1a:86:e1:8d:e8:56:dc:0e:51:03:d4:c1:2d:df:d2:ea:
3f:d1:01:52:72:a0:7d:f6:08:28:cf:e8:ad:bd:6b:55:0c:f6:
86:12:e6:da:ab:fc:6a:6f:bf:2f:36:fe:d7:22:46:42:a6:d5:
d2:e0:28:60:ec:af:c3:b8:c4:5a:cf:00:75:d0:ec:c9:8c:1b:
e9:d6:4e:f5:a9:1a:91:6c:e9:5a:da:2b:2e:67:9d:ac:9f:cc:
a6:19:1a:94:71:48:b3:a5:fe:c2:5b:c6:34:c4:e2:94:12:81:
a0:1d:a0:40:bf:d7:2c:e6:72:7b:f8:e6:a9:59:53:c8:4f:7b:
97:e9:22:5b:e0:ac:7f:62:ce:fe:d5:b3:c5:06:20:03:49:51:
c9:d3:88:80:2e:04:d2:0e:6a:8a:a5:a1:4a:48:b2:6c:68:a2:
ea:2e:bb:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4LAqJ3MmjawgJeUXRmCDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNDY0ZWZlNDczNzQxZWE0ZTZjY2Y2YzNjNWEzN2M2NmYz
ZGExNzkwHhcNMjYwMzI2MTYwMTAxWhcNMjYwMzI3MTYwMTAxWjAzMTEwLwYDVQQD
Eyg4NmI3ZDc2ZjhlNzZiNGVkNzYyNzY2YjllOWExMGMyNjViYjRkYTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0KL+o+lTEadN7AVTUf0Rrxcizb1
+G/IkXW6IdEYl8iudf3k2hwRvtVkNRNJjveQhpKZ2xyWraDAW3CJgyKHn5f5r1NR
/0R6mv6igcpgneUer48mYi3ARtOZJtQQQtn/lCV2ExTERiNMM4i4XE478zh93Sd8
bX3GaVwoY69V2tOtF4l9EUANDuO0xFlt5MumoudyjbvAFeR5Sr0gu3/WJt0ofeto
0UJezBDvQqzyFL9HovU+e2hD3OqAr5BFzrXhgy7R7VxUlxqJgZlT+t8Ui9e+zoBt
JIuPKwsqt20mrmC7z4K0V35juByioglfvzteaQHNtQFln22iHBvagcEDIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIa312+OdrTtdidmuemhDCZbtNpcMB8GA1UdIwQY
MBaAFHBGTv5HN0HqTmzPbDxaN8ZvPaF5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0VaT19rYzNRZXBPYk05c1BGbzN4bTg5b1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9lYzRiODAtNDZlZC00M2I1LTljZmEt
OWI4MDdkZTYwOTAyLzEvY0VaT19rYzNRZXBPYk05c1BGbzN4bTg5b1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9lYzRiODAtNDZlZC00M2I1LTljZmEtOWI4MDdkZTYwOTAy
LzEvY0VaT19rYzNRZXBPYk05c1BGbzN4bTg5b1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvOl1yaYd
wOzOwc/YHXIz8IjwC53uKvahwNgBzt/ge4VBjPVBAABQUdpKGlatylvxayV17XN3
9aWdVCRDMsbve0wHsjSu13mFn4iBTLmY8pWu5c9oLkEehd3xSTQahuGN6FbcDlED
1MEt39LqP9EBUnKgffYIKM/orb1rVQz2hhLm2qv8am+/Lzb+1yJGQqbV0uAoYOyv
w7jEWs8AddDsyYwb6dZO9akakWzpWtorLmedrJ/MphkalHFIs6X+wlvGNMTilBKB
oB2gQL/XLOZye/jmqVlTyE97l+kiW+Csf2LO/tWzxQYgA0lRydOIgC4E0g5qiqWh
SkiybGii6i67BQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:09:29 2026 by rpki-client