Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
File: Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft (raw, json)
Hash identifier: skfIhs+hTwAeah2qoUSOGkUiILo9NGh1QeAdGo2a8LY=
Subject key identifier: 9F:75:45:6A:3B:AC:F4:BA:CE:B2:9F:9C:D9:5D:C0:3C:DE:3A:BC:EB
Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
Certificate issuer: /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Certificate serial: 01A118CFD87E06FDD237386B2ADF9E46CA43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
Manifest number: 18E1
Signing time: Thu 08 Oct 2026 00:00:36 +0000
Manifest this update: Thu 08 Oct 2026 00:00:36 +0000
Manifest next update: Fri 09 Oct 2026 00:00:36 +0000
Files and hashes: 1: Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl (hash: niW2lltpvAv1kv2Opqm8ut4SsYi3OJw0nTzHE8U/WD8=)
2: KAZZmnJNcc3J8hdxVQCO2YzAFOk.roa (hash: Tn9EAPhePmRvkHGL8zdRZCb2aqgnTcgDWpOmWf8X5WU=)
3: WNNX0VNsYOnOt7_5Ye8MxMHFMuU.roa (hash: ieYhP55/ISwvI2Q5dlwCNbQyWY0xH0nyLmu75b3vMPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:cf:d8:7e:06:fd:d2:37:38:6b:2a:df:9e:46:ca:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Validity
Not Before: Oct 8 00:00:36 2026 GMT
Not After : Oct 9 00:00:36 2026 GMT
Subject: CN=9f75456a3bacf4baceb29f9cd95dc03cde3abceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a4:58:78:3f:5a:ba:4f:35:13:25:9a:ae:51:
25:c8:d1:8c:05:71:1e:fa:02:9a:7d:f4:b3:be:cb:
05:e0:17:8c:ed:d4:ed:79:42:2b:a7:7e:dc:8c:35:
1c:13:4c:0d:56:b5:13:2b:1a:2b:a9:a5:47:6d:cf:
64:2f:4a:4c:b7:8f:c1:f2:35:eb:e8:58:7e:38:b2:
06:30:da:c1:7b:b9:f5:53:43:cd:99:70:7b:43:e8:
09:68:83:84:67:0f:bb:38:52:3c:b0:3e:9e:b3:c6:
91:6f:b9:74:98:f6:36:0d:5c:10:4a:1b:4a:6a:04:
60:2c:15:f6:27:1d:a9:2e:98:2a:d4:a7:e0:65:61:
f3:6d:9b:aa:3f:82:cb:0f:5b:40:a1:7c:63:69:e6:
76:6a:2d:59:c8:5c:81:a9:7f:f4:e6:f1:9b:2e:b3:
b9:b8:ba:8c:43:ff:e7:b3:38:d1:0c:6d:46:95:be:
62:77:99:c4:d3:25:a1:cf:f3:8f:f9:d4:33:a2:08:
2d:de:f4:e2:fc:b3:b5:b6:f9:53:42:9f:e3:65:a4:
9b:1e:3a:a5:2a:5a:b8:a5:09:17:b7:a1:06:9f:a7:
a6:3a:d2:d4:2b:f1:e0:81:7c:ef:5b:36:e6:02:d4:
f8:36:0f:02:72:18:9e:b8:a3:fb:76:61:cc:dd:e5:
73:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:75:45:6A:3B:AC:F4:BA:CE:B2:9F:9C:D9:5D:C0:3C:DE:3A:BC:EB
X509v3 Authority Key Identifier:
keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:7c:64:13:cb:e7:3a:d1:e1:a5:71:7b:54:90:46:76:3b:5d:
81:ed:b2:a7:e5:f9:61:4a:5f:f9:04:e9:aa:7c:b8:f4:4c:35:
27:5e:35:76:87:72:4e:9e:59:89:a3:a6:1e:ac:d8:3e:4a:66:
f4:85:0f:0e:1f:37:78:70:46:c0:22:28:fa:e6:2f:02:5c:8c:
df:c4:1f:72:bf:43:66:31:7e:c1:e9:18:12:65:3f:b5:e2:16:
a1:8d:4a:80:4d:ae:12:a8:69:46:d6:c6:09:3f:34:11:69:cf:
cd:3a:0f:70:db:19:28:32:39:51:bb:5f:26:4c:3b:8d:8f:2c:
15:f3:25:0a:0a:23:9f:2a:81:ea:63:ae:f1:c4:16:25:cf:be:
26:83:cf:d5:76:74:e9:24:09:20:f9:49:8b:b0:e6:b8:a3:31:
08:db:fd:2e:aa:8b:2e:b2:78:52:f1:14:9f:05:f7:a7:71:b3:
68:ab:9b:d7:ac:7d:df:8f:23:51:c9:6f:fe:f5:da:a4:2c:f5:
61:ee:fb:3c:d5:f4:1c:fd:5e:04:62:64:23:25:a6:ca:3a:6a:
38:22:7b:39:d2:f1:12:ab:7e:a8:ae:42:3c:91:fa:71:68:7f:
31:3f:3c:33:2b:57:06:20:0b:47:aa:06:20:90:6e:ca:cd:a3:
50:68:be:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEYz9h+Bv3SNzhrKt+eRspDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzM2RlZWQ4ODNjMmE2OTBjZTU0ODI5YjQ4ZjlkNzhjZDdi
MjVmZDcwHhcNMjYxMDA4MDAwMDM2WhcNMjYxMDA5MDAwMDM2WjAzMTEwLwYDVQQD
Eyg5Zjc1NDU2YTNiYWNmNGJhY2ViMjlmOWNkOTVkYzAzY2RlM2FiY2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KRYeD9auk81EyWarlElyNGMBXEe
+gKaffSzvssF4BeM7dTteUIrp37cjDUcE0wNVrUTKxorqaVHbc9kL0pMt4/B8jXr
6Fh+OLIGMNrBe7n1U0PNmXB7Q+gJaIOEZw+7OFI8sD6es8aRb7l0mPY2DVwQShtK
agRgLBX2Jx2pLpgq1KfgZWHzbZuqP4LLD1tAoXxjaeZ2ai1ZyFyBqX/05vGbLrO5
uLqMQ//nszjRDG1Glb5id5nE0yWhz/OP+dQzoggt3vTi/LO1tvlTQp/jZaSbHjql
Klq4pQkXt6EGn6emOtLUK/HggXzvWzbmAtT4Ng8CchieuKP7dmHM3eVzAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ91RWo7rPS6zrKfnNldwDzeOrzrMB8GA1UdIwQY
MBaAFBM97tiDwqaQzlSCm0j514zXsl/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXozdTJJUENwcERPVklLYlNQblhqTmV5WDljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jNDQ0MDktYTY1ZC00YjhhLWJmZWEt
NGJlZGQzYmQ2ZWExLzEvRXozdTJJUENwcERPVklLYlNQblhqTmV5WDljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jNDQ0MDktYTY1ZC00YjhhLWJmZWEtNGJlZGQzYmQ2ZWEx
LzEvRXozdTJJUENwcERPVklLYlNQblhqTmV5WDljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInxkE8vn
OtHhpXF7VJBGdjtdge2yp+X5YUpf+QTpqny49Ew1J141dodyTp5ZiaOmHqzYPkpm
9IUPDh83eHBGwCIo+uYvAlyM38Qfcr9DZjF+wekYEmU/teIWoY1KgE2uEqhpRtbG
CT80EWnPzToPcNsZKDI5UbtfJkw7jY8sFfMlCgojnyqB6mOu8cQWJc++JoPP1XZ0
6SQJIPlJi7DmuKMxCNv9LqqLLrJ4UvEUnwX3p3GzaKub16x9348jUclv/vXapCz1
Ye77PNX0HP1eBGJkIyWmyjpqOCJ7OdLxEqt+qK5CPJH6cWh/MT88MytXBiALR6oG
IJBuys2jUGi+Kg==
-----END CERTIFICATE-----
Generated at Thu Oct 8 08:24:36 2026 by rpki-client