Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
File: cEZO_kc3QepObM9sPFo3xm89oXk.mft (raw, json)
Hash identifier: IM0yS4B50yFu+m0A1cM8TadY8tNEGIDsTjN1l5BpXzE=
Subject key identifier: 23:E1:F2:13:C4:F2:3C:2C:77:5F:CF:09:3E:B7:51:91:C1:F0:A0:E7
Authority key identifier: 70:46:4E:FE:47:37:41:EA:4E:6C:CF:6C:3C:5A:37:C6:6F:3D:A1:79
Certificate issuer: /CN=70464efe473741ea4e6ccf6c3c5a37c66f3da179
Certificate serial: 019FAA1954F779677F8465B4D11B021153D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
Manifest number: 01EB
Signing time: Tue 28 Jul 2026 19:00:14 +0000
Manifest this update: Tue 28 Jul 2026 19:00:14 +0000
Manifest next update: Wed 29 Jul 2026 19:00:14 +0000
Files and hashes: 1: ROpNx89soFP8JE-okJDCTVHVXDs.roa (hash: 5HtcGDIbCLb9z7TZql7Z+rs2Xx1sglk4pFTRwXa2X+g=)
2: cEZO_kc3QepObM9sPFo3xm89oXk.crl (hash: ola5XTYbGnpE5eeDdR4qrWTQt8IxDFRZiLERXK9vhao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:54:f7:79:67:7f:84:65:b4:d1:1b:02:11:53:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70464efe473741ea4e6ccf6c3c5a37c66f3da179
Validity
Not Before: Jul 28 19:00:14 2026 GMT
Not After : Jul 29 19:00:14 2026 GMT
Subject: CN=23e1f213c4f23c2c775fcf093eb75191c1f0a0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:82:05:ee:c8:e2:25:7b:b7:25:ac:4d:7e:79:
d0:61:a3:98:a3:f0:ee:e7:b2:02:59:e9:e5:e8:22:
5e:3d:b3:4c:50:6a:3f:dd:53:54:1c:75:26:22:78:
f1:b3:00:a5:d4:cb:5e:a0:bf:af:a4:98:22:df:4a:
dc:37:75:d6:68:bf:4e:5a:42:26:40:7e:76:14:73:
eb:07:42:24:bc:b2:8a:70:a1:b8:44:2d:6b:c9:cd:
9b:20:30:19:c7:c9:b6:e9:e6:41:4c:3f:d6:69:7e:
cb:d4:fa:ce:d6:95:58:7d:a7:96:31:2c:c7:4f:45:
4c:aa:11:21:49:7c:b5:9f:87:be:67:45:f6:00:52:
2d:bd:f5:e3:78:51:09:04:a5:8c:a4:03:3e:ac:37:
7a:71:7a:2c:1d:2d:36:4e:b0:84:a4:b2:17:5d:aa:
91:32:b0:54:da:50:f0:df:6e:2a:27:fb:e6:4e:c3:
f5:38:fd:c5:35:6b:5a:2e:c2:45:60:26:b6:50:f9:
c5:8f:ad:8c:5c:36:b5:aa:98:fc:1d:d8:df:1b:52:
f9:d6:7c:d3:d8:fc:fb:b0:1e:0c:9e:75:f5:9a:0c:
76:63:77:e3:57:26:fb:8e:05:53:b4:fd:38:21:96:
88:a1:19:52:5b:b4:b2:8c:6e:1d:c8:6e:8e:39:50:
1e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E1:F2:13:C4:F2:3C:2C:77:5F:CF:09:3E:B7:51:91:C1:F0:A0:E7
X509v3 Authority Key Identifier:
keyid:70:46:4E:FE:47:37:41:EA:4E:6C:CF:6C:3C:5A:37:C6:6F:3D:A1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:18:2d:6e:0a:5b:15:a1:af:97:b7:f7:5e:de:7a:ba:0a:ca:
84:23:a4:b9:d2:e4:75:b2:eb:4a:ac:b0:cc:8a:9b:5f:85:9d:
41:d1:b0:7b:8f:b1:13:fb:4b:94:d0:fa:41:d6:5e:59:40:b4:
b8:79:d4:85:40:d1:bf:b8:cc:5a:12:34:90:c1:10:ec:b0:4e:
50:d8:c8:77:23:bb:8c:5b:29:9b:27:f0:61:b0:83:e8:b0:92:
2e:89:4b:52:62:1d:ce:26:e7:89:28:a2:0a:89:a6:06:0c:a8:
6d:b8:ff:45:c9:59:57:ae:a1:86:3c:a2:38:c4:e1:4a:c5:5c:
06:1f:00:73:46:69:81:4e:a1:86:95:22:4a:ab:ac:f3:f7:f5:
65:bf:7c:51:fe:53:c3:c1:9f:64:18:40:2a:4e:77:96:df:01:
93:36:96:75:59:84:1a:c3:62:45:0c:81:40:b4:bc:80:1e:84:
20:df:c4:53:38:b1:07:20:c2:84:22:00:af:fe:e6:43:60:24:
65:7c:50:8d:f1:a7:ce:c4:2c:de:7c:6b:62:b0:cf:5c:33:9e:
c1:6b:76:62:1c:63:59:00:59:01:58:df:d6:9e:ff:aa:05:5c:
9a:0a:3c:c0:83:4d:99:0f:39:ef:10:90:21:4c:d0:63:64:d8:
c9:7e:0a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:31:45 2026 by rpki-client