Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
File: Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft (raw, json)
Hash identifier: 58LRb6aMoOcUC3B7hQPQYJnPNwhKp+ZFf2oY9dk+DQY=
Subject key identifier: D7:56:FE:89:F2:BB:16:8C:48:65:3C:50:90:DF:BA:CF:B5:61:0E:32
Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
Certificate issuer: /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Certificate serial: 019D28BBB6EC7BE50DC24C721CEF19A5FF6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
Manifest number: 16D7
Signing time: Thu 26 Mar 2026 06:01:23 +0000
Manifest this update: Thu 26 Mar 2026 06:01:23 +0000
Manifest next update: Fri 27 Mar 2026 06:01:23 +0000
Files and hashes: 1: Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl (hash: l8kLfiFl561niznqZFbdzA+IsTh59391jemPxJTVnHE=)
2: KAZZmnJNcc3J8hdxVQCO2YzAFOk.roa (hash: Tn9EAPhePmRvkHGL8zdRZCb2aqgnTcgDWpOmWf8X5WU=)
3: WNNX0VNsYOnOt7_5Ye8MxMHFMuU.roa (hash: ieYhP55/ISwvI2Q5dlwCNbQyWY0xH0nyLmu75b3vMPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:b6:ec:7b:e5:0d:c2:4c:72:1c:ef:19:a5:ff:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Validity
Not Before: Mar 26 06:01:23 2026 GMT
Not After : Mar 27 06:01:23 2026 GMT
Subject: CN=d756fe89f2bb168c48653c5090dfbacfb5610e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:00:34:ed:41:07:d5:9f:cc:4a:0e:ff:e4:7a:
cd:84:31:08:9b:0a:ff:2b:42:c4:06:c2:98:2c:f0:
58:cd:9a:cb:d1:14:5c:29:27:2a:f6:4c:b6:c2:3c:
42:4f:a1:25:78:cc:13:c7:4e:b0:11:16:fe:d5:46:
0b:90:27:0a:62:44:38:06:cf:96:b1:19:05:0b:58:
56:84:d7:0f:b5:81:ba:22:4f:e1:0a:c3:a1:bf:13:
f2:9b:d0:f2:dd:7c:66:ff:59:5b:9e:38:f7:0d:d9:
57:e3:54:7f:8b:d6:28:b9:6c:64:4a:25:c7:b3:59:
ae:46:3c:84:8a:30:5f:0e:1a:00:46:a3:c2:f5:5e:
96:67:3b:6e:d6:76:3c:f5:18:06:b6:ec:40:f7:da:
24:33:5f:25:86:6e:1a:8f:4a:e2:c7:43:c0:2b:8c:
ab:d6:7d:91:bc:68:da:1e:c7:0e:39:be:56:58:f3:
e5:99:97:24:ef:11:42:67:30:f9:ed:f4:c0:ca:6f:
55:f5:f7:58:8c:a5:11:49:ec:b5:26:8e:d0:4d:4c:
e9:a4:39:79:78:83:43:08:03:1b:d2:e6:5c:49:af:
9b:ef:44:e9:94:e0:de:ec:8a:13:fe:f7:b6:49:5c:
47:b8:86:40:02:01:d2:41:42:c9:bc:8e:9d:71:b1:
b5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:56:FE:89:F2:BB:16:8C:48:65:3C:50:90:DF:BA:CF:B5:61:0E:32
X509v3 Authority Key Identifier:
keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e9:3d:57:f2:57:43:5b:02:1c:b9:33:e5:81:db:77:85:d5:
59:f6:c5:8a:8e:aa:3d:42:82:8b:c4:63:f9:65:9a:88:1b:3c:
e7:43:ad:1a:1f:8e:6f:be:b7:44:bd:94:6e:e1:f8:81:79:94:
41:54:c1:d9:99:0b:c1:ed:8f:f5:55:3d:08:ca:cd:ab:cf:00:
8d:e9:5f:9f:5e:3e:86:31:5e:b1:be:0f:57:ba:a5:fb:4c:ab:
2b:3f:2a:22:c9:58:3d:50:04:35:28:2d:5f:b2:8f:b8:76:d3:
49:67:34:65:77:54:50:bb:55:03:65:2b:be:64:fc:b5:7c:3b:
37:9f:14:ad:db:09:65:9d:65:d1:8c:c8:99:97:fb:39:fd:fb:
0e:b8:f6:a0:3c:93:0c:e4:85:4b:ce:04:37:49:64:9a:58:52:
e2:5e:96:08:bf:b5:86:6e:2e:7d:c2:fc:83:82:d4:98:57:ee:
84:a1:9c:88:8d:d6:81:9b:20:f4:d3:23:93:e6:68:a1:46:44:
06:15:cc:c5:81:cd:8f:36:66:4a:04:6b:56:e3:33:99:bb:cd:
d4:6b:da:61:62:2d:d8:46:e9:43:54:f4:8d:2b:c1:88:da:42:
0a:43:b5:06:ef:c0:2b:d4:52:d3:19:0c:41:e3:86:39:69:47:
c6:8e:a8:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou7bse+UNwkxyHO8Zpf9tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzM2RlZWQ4ODNjMmE2OTBjZTU0ODI5YjQ4ZjlkNzhjZDdi
MjVmZDcwHhcNMjYwMzI2MDYwMTIzWhcNMjYwMzI3MDYwMTIzWjAzMTEwLwYDVQQD
EyhkNzU2ZmU4OWYyYmIxNjhjNDg2NTNjNTA5MGRmYmFjZmI1NjEwZTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAA07UEH1Z/MSg7/5HrNhDEImwr/
K0LEBsKYLPBYzZrL0RRcKScq9ky2wjxCT6EleMwTx06wERb+1UYLkCcKYkQ4Bs+W
sRkFC1hWhNcPtYG6Ik/hCsOhvxPym9Dy3Xxm/1lbnjj3DdlX41R/i9YouWxkSiXH
s1muRjyEijBfDhoARqPC9V6WZztu1nY89RgGtuxA99okM18lhm4aj0rix0PAK4yr
1n2RvGjaHscOOb5WWPPlmZck7xFCZzD57fTAym9V9fdYjKURSey1Jo7QTUzppDl5
eINDCAMb0uZcSa+b70TplODe7IoT/ve2SVxHuIZAAgHSQULJvI6dcbG1FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdW/onyuxaMSGU8UJDfus+1YQ4yMB8GA1UdIwQY
MBaAFBM97tiDwqaQzlSCm0j514zXsl/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXozdTJJUENwcERPVklLYlNQblhqTmV5WDljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jNDQ0MDktYTY1ZC00YjhhLWJmZWEt
NGJlZGQzYmQ2ZWExLzEvRXozdTJJUENwcERPVklLYlNQblhqTmV5WDljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jNDQ0MDktYTY1ZC00YjhhLWJmZWEtNGJlZGQzYmQ2ZWEx
LzEvRXozdTJJUENwcERPVklLYlNQblhqTmV5WDljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOk9V/JX
Q1sCHLkz5YHbd4XVWfbFio6qPUKCi8Rj+WWaiBs850OtGh+Ob763RL2UbuH4gXmU
QVTB2ZkLwe2P9VU9CMrNq88Ajelfn14+hjFesb4PV7ql+0yrKz8qIslYPVAENSgt
X7KPuHbTSWc0ZXdUULtVA2UrvmT8tXw7N58UrdsJZZ1l0YzImZf7Of37Drj2oDyT
DOSFS84EN0lkmlhS4l6WCL+1hm4ufcL8g4LUmFfuhKGciI3WgZsg9NMjk+ZooUZE
BhXMxYHNjzZmSgRrVuMzmbvN1GvaYWIt2EbpQ1T0jSvBiNpCCkO1Bu/AK9RS0xkM
QeOGOWlHxo6oXg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:09:50 2026 by rpki-client