Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
File: cEZO_kc3QepObM9sPFo3xm89oXk.mft (raw, json)
Hash identifier: GdV03IbU6o420LqIaDb1q++YdzgaKipcLi59EgDUN4Q=
Subject key identifier: F4:27:3E:32:C5:44:41:1A:82:A6:17:6E:3C:30:B5:A3:D1:F3:B6:94
Authority key identifier: 70:46:4E:FE:47:37:41:EA:4E:6C:CF:6C:3C:5A:37:C6:6F:3D:A1:79
Certificate issuer: /CN=70464efe473741ea4e6ccf6c3c5a37c66f3da179
Certificate serial: 01A0D56FA65C086D188C61CBAC3DC636A14C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
Manifest number: 0286
Signing time: Thu 24 Sep 2026 22:00:59 +0000
Manifest this update: Thu 24 Sep 2026 22:00:59 +0000
Manifest next update: Fri 25 Sep 2026 22:00:59 +0000
Files and hashes: 1: ROpNx89soFP8JE-okJDCTVHVXDs.roa (hash: 5HtcGDIbCLb9z7TZql7Z+rs2Xx1sglk4pFTRwXa2X+g=)
2: cEZO_kc3QepObM9sPFo3xm89oXk.crl (hash: DGWFpp39KNeq55K/3jCNYgm0JHBRg3bN4cmzdEjek6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:6f:a6:5c:08:6d:18:8c:61:cb:ac:3d:c6:36:a1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70464efe473741ea4e6ccf6c3c5a37c66f3da179
Validity
Not Before: Sep 24 22:00:59 2026 GMT
Not After : Sep 25 22:00:59 2026 GMT
Subject: CN=f4273e32c544411a82a6176e3c30b5a3d1f3b694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e9:0c:9f:12:a0:99:35:3b:31:35:d2:ef:9d:
90:b8:76:30:88:e1:60:0f:28:67:98:75:01:0e:a5:
59:e7:df:06:ea:ba:eb:df:1a:c9:63:87:51:da:7d:
d9:5c:6f:77:c0:ba:70:36:05:83:d3:57:be:7b:4e:
12:cb:76:0a:81:c9:29:b1:09:32:bd:53:a0:5c:4c:
27:e7:8f:51:0b:e4:6a:75:e9:75:7e:b4:5e:99:97:
e9:32:9f:64:98:4b:9a:0c:4f:47:53:33:ba:75:9e:
c4:31:24:e7:1b:3c:2e:06:30:2c:c5:27:9e:88:89:
19:e3:2c:00:53:35:fe:d2:db:76:61:32:fb:ba:d5:
c8:2b:45:3f:f7:d4:cc:e7:a6:d8:0a:ad:27:43:47:
3e:1b:b3:b1:e9:10:f9:30:1b:4f:f6:c8:59:11:26:
6c:9b:df:c7:ee:30:08:d7:44:c4:75:5d:f1:07:53:
00:39:2a:82:85:9c:12:b0:f9:40:a6:5d:77:ee:65:
ec:06:e3:c3:3d:13:9e:8e:af:50:05:d3:48:e2:b5:
19:aa:b5:e9:96:ed:72:d1:cf:ce:13:c9:10:b1:9f:
af:97:3a:1c:6f:36:f6:04:36:39:23:fe:e4:25:7e:
5b:00:f2:2c:75:71:a3:fa:37:e6:fa:e6:71:13:fe:
d9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:27:3E:32:C5:44:41:1A:82:A6:17:6E:3C:30:B5:A3:D1:F3:B6:94
X509v3 Authority Key Identifier:
keyid:70:46:4E:FE:47:37:41:EA:4E:6C:CF:6C:3C:5A:37:C6:6F:3D:A1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:e9:b9:ad:85:85:65:3b:3a:67:b3:d6:af:49:13:ef:27:33:
6a:5f:96:95:02:dc:58:df:14:d1:89:99:c8:33:3f:86:70:db:
ac:ae:09:34:2d:0d:e6:5b:99:0e:81:40:e4:40:c7:ee:2d:ee:
bc:80:c5:cb:dc:28:f6:66:92:32:73:cb:db:9b:8e:46:e4:cb:
d0:24:d9:c4:fc:82:af:63:47:cd:74:80:a7:cc:cd:6c:86:4f:
8d:f4:27:f6:cc:e0:f0:77:c0:e0:f8:63:d8:98:5c:d9:33:7f:
d2:4c:b2:d4:a4:e5:f5:96:ea:49:8d:2d:0f:f4:f0:f8:ff:42:
99:6a:1f:13:cf:60:85:8a:e4:d4:92:98:d7:7f:0e:a9:23:c6:
f4:58:b6:8a:42:6b:6e:b8:ca:52:06:8e:db:33:53:9b:4d:c8:
d5:36:a0:79:4a:61:ab:79:08:41:a6:54:aa:54:e8:c8:1a:4c:
7b:80:d7:97:de:f6:56:56:07:3a:bd:4d:42:83:52:26:9b:ff:
7f:38:2b:e8:c3:43:cd:f9:72:3e:ac:b4:c9:24:6b:04:77:ed:
61:4d:8a:a8:55:04:ca:ad:64:45:fc:46:42:10:2c:ac:ea:3c:
ec:ac:ff:a6:64:95:3a:21:e4:15:69:e2:69:6d:9a:f8:91:86:
f2:5a:77:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVb6ZcCG0YjGHLrD3GNqFMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNDY0ZWZlNDczNzQxZWE0ZTZjY2Y2YzNjNWEzN2M2NmYz
ZGExNzkwHhcNMjYwOTI0MjIwMDU5WhcNMjYwOTI1MjIwMDU5WjAzMTEwLwYDVQQD
EyhmNDI3M2UzMmM1NDQ0MTFhODJhNjE3NmUzYzMwYjVhM2QxZjNiNjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyekMnxKgmTU7MTXS752QuHYwiOFg
DyhnmHUBDqVZ598G6rrr3xrJY4dR2n3ZXG93wLpwNgWD01e+e04Sy3YKgckpsQky
vVOgXEwn549RC+Rqdel1frRemZfpMp9kmEuaDE9HUzO6dZ7EMSTnGzwuBjAsxSee
iIkZ4ywAUzX+0tt2YTL7utXIK0U/99TM56bYCq0nQ0c+G7Ox6RD5MBtP9shZESZs
m9/H7jAI10TEdV3xB1MAOSqChZwSsPlApl137mXsBuPDPROejq9QBdNI4rUZqrXp
lu1y0c/OE8kQsZ+vlzocbzb2BDY5I/7kJX5bAPIsdXGj+jfm+uZxE/7ZbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQnPjLFREEagqYXbjwwtaPR87aUMB8GA1UdIwQY
MBaAFHBGTv5HN0HqTmzPbDxaN8ZvPaF5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0VaT19rYzNRZXBPYk05c1BGbzN4bTg5b1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9lYzRiODAtNDZlZC00M2I1LTljZmEt
OWI4MDdkZTYwOTAyLzEvY0VaT19rYzNRZXBPYk05c1BGbzN4bTg5b1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9lYzRiODAtNDZlZC00M2I1LTljZmEtOWI4MDdkZTYwOTAy
LzEvY0VaT19rYzNRZXBPYk05c1BGbzN4bTg5b1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv+m5rYWF
ZTs6Z7PWr0kT7yczal+WlQLcWN8U0YmZyDM/hnDbrK4JNC0N5luZDoFA5EDH7i3u
vIDFy9wo9maSMnPL25uORuTL0CTZxPyCr2NHzXSAp8zNbIZPjfQn9szg8HfA4Phj
2Jhc2TN/0kyy1KTl9ZbqSY0tD/Tw+P9CmWofE89ghYrk1JKY138OqSPG9Fi2ikJr
brjKUgaO2zNTm03I1TageUphq3kIQaZUqlToyBpMe4DXl972VlYHOr1NQoNSJpv/
fzgr6MNDzflyPqy0ySRrBHftYU2KqFUEyq1kRfxGQhAsrOo87Kz/pmSVOiHkFWni
aW2a+JGG8lp3TA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:42:15 2026 by rpki-client