Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
File: 1EZzVsX7atsuunE8gBkUsvTX860.mft (raw, json)
Hash identifier: 18RAXWari6EX7N9XGTtAi1Z4Z25jArffvCWIy8gZcCU=
Subject key identifier: 2F:D2:FB:36:93:98:A6:2C:C9:82:23:D5:9C:58:48:9A:FF:21:4F:E5
Authority key identifier: D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD
Certificate issuer: /CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
Certificate serial: 019E1C7D94D4AB7BFC6291E7B2B17F979691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
Manifest number: 0417
Signing time: Tue 12 May 2026 14:00:52 +0000
Manifest this update: Tue 12 May 2026 14:00:52 +0000
Manifest next update: Wed 13 May 2026 14:00:52 +0000
Files and hashes: 1: 1EZzVsX7atsuunE8gBkUsvTX860.crl (hash: VO2BCq843LBqsxnq4QP3Eju2NuxNz9Cm8l609Fer3hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:94:d4:ab:7b:fc:62:91:e7:b2:b1:7f:97:96:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
Validity
Not Before: May 12 14:00:52 2026 GMT
Not After : May 13 14:00:52 2026 GMT
Subject: CN=2fd2fb369398a62cc98223d59c58489aff214fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:64:63:e8:6d:e6:64:31:9d:2b:1b:c3:65:
26:e0:de:c2:fa:5f:6a:c0:34:ea:b4:bd:0d:ea:14:
2f:ff:37:7a:a6:6d:55:ad:60:10:2f:09:ab:78:a9:
da:93:6c:2b:48:d6:ad:71:6a:6b:fa:15:8b:e2:db:
69:40:03:7d:54:cb:26:f5:c9:f9:c4:51:d3:a4:db:
bf:8e:41:5e:d4:4b:8b:01:e1:fa:d2:c4:11:dc:ba:
4c:76:d4:f1:23:35:a1:51:b6:77:c3:c5:3b:99:8f:
13:60:60:13:85:c0:e4:85:7b:e3:53:6c:bd:98:64:
65:d2:b7:8a:a1:72:67:9c:75:db:25:b7:6f:4a:c8:
bd:b5:5e:9d:c8:cf:a8:e7:7d:1a:e5:2f:42:3b:4f:
42:a1:a7:e5:38:a1:c0:40:56:a1:30:bc:c6:f3:7a:
1f:e8:d5:7a:ca:30:25:4e:ca:9b:dd:95:d0:3e:ef:
16:fb:7f:01:42:2f:71:b8:7e:7a:b7:f6:77:9a:6a:
83:f7:6f:0c:72:be:d2:19:f0:b0:39:8a:5b:f1:24:
34:a0:25:c8:a4:b0:b9:2a:d3:3d:e5:99:0f:12:4d:
95:88:2d:d4:ce:83:3d:25:8f:06:17:6b:f6:71:a4:
6a:2d:c9:85:ae:3b:19:a6:5e:ac:3e:f3:a8:fb:aa:
d0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D2:FB:36:93:98:A6:2C:C9:82:23:D5:9C:58:48:9A:FF:21:4F:E5
X509v3 Authority Key Identifier:
keyid:D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0b:a1:29:fc:1a:0c:0d:97:e8:a7:09:4e:96:15:d1:88:66:
a0:9a:cd:79:4a:53:da:b4:f9:69:03:51:d9:ca:2b:c0:ea:25:
15:08:20:76:69:72:99:14:24:51:0c:c9:4f:c2:0a:ed:11:ed:
6c:77:bb:44:3e:e6:22:7e:d3:25:7b:30:5b:b5:e7:a8:af:5e:
d4:6c:5e:ae:fb:0c:0b:d3:e6:4b:22:3d:b1:aa:36:14:76:20:
66:78:4c:a7:25:a4:84:be:b8:78:5c:56:80:c8:c2:c6:39:9d:
ba:d0:4b:19:d9:bc:2b:f0:ed:02:d9:55:6e:68:b7:ea:78:58:
52:0c:76:1b:74:33:17:2d:cd:30:77:ae:13:80:d7:a9:e2:10:
82:15:57:a4:bc:9c:f7:57:32:16:8c:e1:de:b7:d4:bc:52:ad:
26:72:1c:17:52:b8:72:6c:c1:c9:16:23:08:8c:fe:93:91:e9:
c7:88:60:52:7f:06:7d:a5:55:01:c2:17:7d:a0:36:13:5c:7a:
08:e1:eb:28:b8:ff:a3:dc:f3:94:35:dd:9a:8b:f4:92:87:60:
da:d5:2b:31:55:88:68:f0:1f:c3:79:5f:35:19:b1:3e:1e:d2:
7d:b9:89:a9:11:b5:be:31:6e:ed:96:70:5a:e0:00:75:b4:c3:
59:76:f4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:43 2026 by rpki-client