Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
File: 1EZzVsX7atsuunE8gBkUsvTX860.mft (raw, json)
Hash identifier: Ptz59dDbuPWK9H2Ej9Cbvcr+6/xjMLNQoYdAfVDXnmc=
Subject key identifier: 22:16:31:83:75:A8:F7:88:28:9D:02:EB:EB:96:95:2A:54:16:30:55
Authority key identifier: D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD
Certificate issuer: /CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
Certificate serial: 019D2929285C9EB63BDE9064B997650DF33F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
Manifest number: 0399
Signing time: Thu 26 Mar 2026 08:00:56 +0000
Manifest this update: Thu 26 Mar 2026 08:00:56 +0000
Manifest next update: Fri 27 Mar 2026 08:00:56 +0000
Files and hashes: 1: 1EZzVsX7atsuunE8gBkUsvTX860.crl (hash: XUI8e0J4pmTMupu9b8ZXR1USKH2JfQKRWsZOsZQRpxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:28:5c:9e:b6:3b:de:90:64:b9:97:65:0d:f3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
Validity
Not Before: Mar 26 08:00:56 2026 GMT
Not After : Mar 27 08:00:56 2026 GMT
Subject: CN=2216318375a8f788289d02ebeb96952a54163055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:40:e4:99:b2:d3:20:c0:00:49:88:1a:b4:
21:89:c9:1a:f0:47:30:5c:da:0d:39:af:b3:52:92:
69:6c:eb:e0:e2:71:84:ae:6a:a2:47:9a:38:6d:45:
13:59:36:c6:fa:10:f4:df:a5:a7:50:9b:0d:82:29:
33:2f:6b:a7:d2:f9:35:88:cb:74:bc:09:8c:94:34:
b7:57:50:f2:7b:c4:d8:51:4c:a6:4a:40:a3:56:06:
2c:b1:bc:4c:9d:16:b8:bd:c2:97:1a:2e:0e:2e:2a:
59:de:4b:4f:04:bc:8b:16:da:d3:f5:2e:db:6a:d1:
a0:b7:b5:86:a6:9e:90:93:a4:b9:7b:59:02:ec:c9:
00:22:85:1f:f1:02:7e:70:64:64:c9:4d:6e:de:14:
9f:6b:f1:d2:2d:60:3c:d4:6b:f8:07:d1:12:a5:b6:
ef:89:f2:9d:18:64:81:b7:f0:b2:b5:21:3b:75:c2:
87:16:75:a2:79:75:96:a4:88:dd:24:b7:c5:3d:e3:
54:07:4c:93:ac:78:82:e2:27:92:84:e6:6e:fd:99:
38:f5:24:20:30:68:04:15:52:b8:65:6c:f9:1c:1e:
34:90:83:0c:84:5e:5a:f1:0f:16:3c:36:84:c9:b7:
c5:06:3d:00:5e:58:e7:2a:f5:79:d9:60:97:c5:05:
bd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:16:31:83:75:A8:F7:88:28:9D:02:EB:EB:96:95:2A:54:16:30:55
X509v3 Authority Key Identifier:
keyid:D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:67:b7:f7:de:0f:cd:02:f1:ea:9a:fb:99:7d:50:fd:7b:8e:
60:ba:53:87:30:00:c3:b3:87:60:33:16:1b:ed:05:54:44:bd:
b6:db:88:a7:60:9a:57:fa:92:fb:06:35:9c:ec:cb:1a:56:53:
23:42:cc:d6:70:80:31:4d:20:e4:1c:c9:f9:3e:cf:49:53:ca:
9b:15:7d:ad:80:b5:52:cc:60:41:ec:9a:f1:0b:23:51:1a:9e:
83:3d:75:bf:3b:90:d3:b9:ed:f0:c0:90:2a:57:ea:2a:32:a2:
1f:07:da:dd:8d:91:06:12:a2:72:ab:bf:7c:5a:48:79:ec:84:
e9:2a:c7:4a:6a:61:fb:84:b1:7b:33:86:76:f6:59:33:91:f1:
b8:34:9f:35:b0:6f:fa:ae:69:f9:26:17:89:16:e0:c3:61:4d:
85:c4:f2:2b:82:6a:5a:2c:88:f4:15:e0:24:1a:f0:c2:b4:b3:
bf:e0:76:a6:e6:d7:b3:a0:40:f2:65:fe:ef:4e:bc:2f:51:1e:
76:5a:c0:39:36:27:7a:29:6b:6b:19:27:1f:5c:37:f1:50:68:
69:bb:71:22:d3:87:37:1c:a1:8b:7d:86:c9:de:68:25:ed:6b:
71:77:5e:37:56:2d:95:15:2e:4a:3d:aa:3f:77:29:20:37:7a:
30:62:42:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKShcnrY73pBkuZdlDfM/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NDY3MzU2YzVmYjZhZGIyZWJhNzEzYzgwMTkxNGIyZjRk
N2YzYWQwHhcNMjYwMzI2MDgwMDU2WhcNMjYwMzI3MDgwMDU2WjAzMTEwLwYDVQQD
EygyMjE2MzE4Mzc1YThmNzg4Mjg5ZDAyZWJlYjk2OTUyYTU0MTYzMDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUBA5Jmy0yDAAEmIGrQhicka8Ecw
XNoNOa+zUpJpbOvg4nGErmqiR5o4bUUTWTbG+hD036WnUJsNgikzL2un0vk1iMt0
vAmMlDS3V1Dye8TYUUymSkCjVgYssbxMnRa4vcKXGi4OLipZ3ktPBLyLFtrT9S7b
atGgt7WGpp6Qk6S5e1kC7MkAIoUf8QJ+cGRkyU1u3hSfa/HSLWA81Gv4B9ESpbbv
ifKdGGSBt/CytSE7dcKHFnWieXWWpIjdJLfFPeNUB0yTrHiC4ieShOZu/Zk49SQg
MGgEFVK4ZWz5HB40kIMMhF5a8Q8WPDaEybfFBj0AXljnKvV52WCXxQW9XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIWMYN1qPeIKJ0C6+uWlSpUFjBVMB8GA1UdIwQY
MBaAFNRGc1bF+2rbLrpxPIAZFLL01/OtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUVaelZzWDdhdHN1dW5FOGdCa1VzdlRYODYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9lN2QyZTItNTZjOS00MDE5LWFmOWUt
NTk3YjQ3ZDQyZGIwLzEvMUVaelZzWDdhdHN1dW5FOGdCa1VzdlRYODYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9lN2QyZTItNTZjOS00MDE5LWFmOWUtNTk3YjQ3ZDQyZGIw
LzEvMUVaelZzWDdhdHN1dW5FOGdCa1VzdlRYODYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvWe3994P
zQLx6pr7mX1Q/XuOYLpThzAAw7OHYDMWG+0FVES9ttuIp2CaV/qS+wY1nOzLGlZT
I0LM1nCAMU0g5BzJ+T7PSVPKmxV9rYC1UsxgQeya8QsjURqegz11vzuQ07nt8MCQ
KlfqKjKiHwfa3Y2RBhKicqu/fFpIeeyE6SrHSmph+4SxezOGdvZZM5HxuDSfNbBv
+q5p+SYXiRbgw2FNhcTyK4JqWiyI9BXgJBrwwrSzv+B2pubXs6BA8mX+7068L1Ee
dlrAOTYneilraxknH1w38VBoabtxItOHNxyhi32Gyd5oJe1rcXdeN1YtlRUuSj2q
P3cpIDd6MGJCcA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:53 2026 by rpki-client