Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
File: cEZO_kc3QepObM9sPFo3xm89oXk.mft (raw, json)
Hash identifier: 5icw+g5CIpvQsOq54Q1ntXvSJXAwPuhoqvNHrl095mE=
Subject key identifier: AC:51:EE:23:99:F9:CD:7E:7B:EF:99:FE:45:A0:0E:8C:9F:48:29:03
Authority key identifier: 70:46:4E:FE:47:37:41:EA:4E:6C:CF:6C:3C:5A:37:C6:6F:3D:A1:79
Certificate issuer: /CN=70464efe473741ea4e6ccf6c3c5a37c66f3da179
Certificate serial: 019F92ED7D26461A30EB1033545DB7C5FC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
Manifest number: 01DF
Signing time: Fri 24 Jul 2026 07:01:05 +0000
Manifest this update: Fri 24 Jul 2026 07:01:05 +0000
Manifest next update: Sat 25 Jul 2026 07:01:05 +0000
Files and hashes: 1: ROpNx89soFP8JE-okJDCTVHVXDs.roa (hash: 5HtcGDIbCLb9z7TZql7Z+rs2Xx1sglk4pFTRwXa2X+g=)
2: cEZO_kc3QepObM9sPFo3xm89oXk.crl (hash: stD/NEaliZzNdJ6KjTNapn3igyMIS4Pj82tHhoJCWdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:7d:26:46:1a:30:eb:10:33:54:5d:b7:c5:fc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70464efe473741ea4e6ccf6c3c5a37c66f3da179
Validity
Not Before: Jul 24 07:01:05 2026 GMT
Not After : Jul 25 07:01:05 2026 GMT
Subject: CN=ac51ee2399f9cd7e7bef99fe45a00e8c9f482903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:39:ef:1c:28:85:4a:83:18:2a:8c:f8:7f:a0:
04:f2:4e:4e:b8:fa:af:38:cb:0c:a8:6c:2d:2c:f2:
9a:b1:58:f9:fc:df:fb:81:ff:93:f7:e7:6c:bd:de:
f4:b2:3f:ee:95:29:14:f2:ef:19:3a:fc:2e:0e:01:
8f:a3:e3:90:f1:0f:5b:80:6a:87:55:ae:d9:dc:06:
66:d4:3c:b4:20:09:61:38:93:c2:6a:1e:48:25:57:
5c:19:d5:39:43:02:f0:ae:9d:45:61:88:02:4f:6b:
95:eb:2a:fe:40:70:c2:17:65:82:16:53:e8:b2:41:
b2:fd:59:77:e3:e9:6d:24:7e:26:3b:a2:25:55:87:
da:bf:a5:63:51:e1:4b:37:33:e6:1d:37:dc:46:87:
7c:36:86:48:37:98:52:57:15:3e:88:7c:ee:c2:01:
cd:39:f0:11:92:91:81:89:73:a0:75:b4:2d:a5:80:
9e:78:a9:de:5f:1c:ae:86:72:14:25:93:09:72:61:
4c:0b:a7:50:49:86:f6:ec:7c:48:ef:b9:bc:eb:c3:
96:1f:e0:a9:e4:1a:87:c8:db:d5:ae:9a:cb:e5:11:
c6:1f:88:35:28:e5:86:fc:9a:16:20:b0:ec:ae:34:
ef:ca:8d:e3:40:43:d2:49:83:5e:aa:0a:27:14:82:
2d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:51:EE:23:99:F9:CD:7E:7B:EF:99:FE:45:A0:0E:8C:9F:48:29:03
X509v3 Authority Key Identifier:
keyid:70:46:4E:FE:47:37:41:EA:4E:6C:CF:6C:3C:5A:37:C6:6F:3D:A1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:fb:8b:25:61:5a:af:d0:e0:e4:c6:ac:59:20:8f:5a:46:30:
1f:88:82:73:ce:37:52:b8:e1:dd:89:85:88:9c:a8:1b:b7:cd:
82:9d:64:7e:6a:bf:f4:9a:4a:14:5e:fe:00:b7:1e:ec:53:54:
9f:a6:f7:0c:eb:8f:0b:37:6c:b1:82:44:54:a2:31:0e:7b:84:
3b:70:80:35:cb:a3:c4:29:d2:a9:49:33:32:88:4f:83:19:18:
eb:e4:34:ad:4a:dd:94:76:d4:6f:9b:e4:2b:b4:27:34:ef:1a:
d3:c1:05:d6:ab:83:fe:4d:b1:6d:12:ac:9f:06:11:28:21:ec:
0f:db:4e:ee:3a:4e:cf:f9:4c:6a:26:5f:5b:4e:f3:51:41:75:
46:d5:59:f9:76:28:63:1a:1c:9c:a0:10:7a:a7:fd:57:13:ca:
e3:38:87:de:9a:0a:1c:dd:70:2b:30:0d:d8:21:75:95:91:4b:
09:08:7a:63:92:5b:16:6e:a4:2e:7c:4c:96:36:e8:a6:67:4d:
2f:f2:ae:fc:a7:8f:74:ff:d9:62:1c:6f:09:e6:d8:27:cd:15:
34:7c:df:fe:68:46:96:b8:c5:d0:7a:8e:86:32:9d:5c:e2:90:
ce:61:55:63:c8:9c:2d:f0:ed:1f:2f:9e:94:36:f5:d8:19:c2:
9d:c4:95:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:03:20 2026 by rpki-client