Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft
File: EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft (raw, json)
Hash identifier: mh43nVReasGjI7YjCfWfpcC4nUcehOki7OPE5j+XV2Q=
Subject key identifier: 9B:33:6C:5E:B5:B6:F6:03:1F:65:2B:27:7D:94:2F:A1:A6:07:69:A0
Authority key identifier: 13:31:33:4C:8A:35:DA:66:B4:4D:90:93:47:A6:43:EE:44:19:1A:AF
Certificate issuer: /CN=1331334c8a35da66b44d909347a643ee44191aaf
Certificate serial: 019D27A87925B313CFEB96249C224025B790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft
Manifest number: 0223
Signing time: Thu 26 Mar 2026 01:00:45 +0000
Manifest this update: Thu 26 Mar 2026 01:00:45 +0000
Manifest next update: Fri 27 Mar 2026 01:00:45 +0000
Files and hashes: 1: EzEzTIo12ma0TZCTR6ZD7kQZGq8.crl (hash: sGwfb2vSA2gGRFFpWGCWez5Bo2Hk3dZYmxrWjBidycQ=)
2: yx7n_319ZBwL0eqNMaxxSiyVPTE.roa (hash: DDdO4yg57n9C22JYHfd0ICckYRel7TybusY/aTLncRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:79:25:b3:13:cf:eb:96:24:9c:22:40:25:b7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1331334c8a35da66b44d909347a643ee44191aaf
Validity
Not Before: Mar 26 01:00:45 2026 GMT
Not After : Mar 27 01:00:45 2026 GMT
Subject: CN=9b336c5eb5b6f6031f652b277d942fa1a60769a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:76:84:9f:80:fd:71:c4:91:ad:97:07:20:c5:
54:53:bb:94:57:b9:24:c8:61:69:6e:97:84:fa:5a:
29:01:a4:2d:2c:22:d3:8b:51:fe:04:97:d7:49:04:
09:30:94:d1:c6:4c:a8:9b:5a:aa:f0:8b:7a:d9:ce:
71:62:84:e0:a8:82:01:88:f4:2e:65:94:5b:47:12:
a2:07:40:df:e3:c5:56:a4:69:5f:04:15:15:f7:7b:
96:34:ec:09:b2:15:86:96:32:c2:19:96:e9:a4:9d:
cf:95:50:cc:f2:85:e9:2f:46:96:3a:94:f4:ec:40:
54:6c:f2:b3:1e:57:58:9c:d6:e6:34:34:d3:1f:44:
44:ec:ff:f4:fc:53:e8:7b:bb:45:bd:1f:ed:6b:1a:
74:4d:bc:ed:89:fd:ec:7a:85:89:cc:f1:68:32:df:
ee:bd:38:b9:ce:3d:2c:1f:6f:15:91:87:42:79:99:
7b:f9:92:e0:6b:60:b7:3b:44:b4:25:b6:b7:21:2a:
66:1a:f2:eb:7f:3b:d8:46:72:d2:f4:81:6c:12:da:
08:30:bf:7b:2f:c1:60:74:19:e8:b1:ce:d5:9e:50:
71:7c:37:d8:b7:9c:81:9a:b7:f6:5c:b3:a6:ed:07:
4e:2c:2b:28:a7:1a:5b:f8:c2:77:93:50:3e:82:dc:
6e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:33:6C:5E:B5:B6:F6:03:1F:65:2B:27:7D:94:2F:A1:A6:07:69:A0
X509v3 Authority Key Identifier:
keyid:13:31:33:4C:8A:35:DA:66:B4:4D:90:93:47:A6:43:EE:44:19:1A:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:b9:29:fc:d4:d0:f0:7a:bf:0d:5f:0c:8e:ab:4b:21:4d:98:
55:44:3a:67:74:d0:ab:95:ae:e4:58:d6:9d:54:06:54:b0:d3:
c6:c3:4a:a2:c2:47:af:cc:4a:51:b8:28:2c:7e:66:e3:c9:45:
5a:16:68:24:ca:b8:0f:ac:e8:62:6c:54:cb:60:1d:8d:68:db:
de:4d:3c:85:b7:8f:e3:98:cf:7d:84:11:2a:3c:30:8c:c3:d3:
7c:44:c5:e6:ce:8c:37:f5:9e:f8:ce:cf:af:dd:24:a2:44:9c:
cd:17:b0:03:4d:2c:d1:73:56:fb:2c:5a:f7:86:fd:d5:0e:49:
85:83:4e:00:bb:ab:6d:02:06:9e:99:82:0c:17:61:3f:df:3b:
58:7b:1d:d7:83:1c:05:9a:a2:3c:c8:71:50:5f:09:fb:28:63:
8c:f6:61:86:a3:0d:bd:77:5b:d4:82:9a:f9:d0:2b:a3:b1:d4:
49:d2:2d:72:58:b9:45:06:8c:5c:57:ce:e4:79:f5:6e:61:9c:
cb:cd:da:a1:8d:16:06:e2:aa:dd:2c:bb:3f:00:3f:42:66:7b:
1d:38:1c:32:a6:bf:59:6d:64:e0:fa:79:96:ba:51:df:c6:d3:
cd:9d:5a:3f:31:30:0c:1b:2d:f8:ac:26:19:8b:b5:e1:fa:c2:
9c:66:a8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:21 2026 by rpki-client