Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
File: cEZO_kc3QepObM9sPFo3xm89oXk.mft (raw, json)
Hash identifier: zAp/N8QU8vNYhMB8Qh+NUshIkafB64bsOdX9tqhL3Kg=
Subject key identifier: 2B:F3:AA:B4:60:0D:A2:73:73:8D:8C:E8:65:7A:98:2A:0A:9E:3B:CB
Authority key identifier: 70:46:4E:FE:47:37:41:EA:4E:6C:CF:6C:3C:5A:37:C6:6F:3D:A1:79
Certificate issuer: /CN=70464efe473741ea4e6ccf6c3c5a37c66f3da179
Certificate serial: 01A0C030B304A1F2A4762160C597182AC3E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
Manifest number: 027B
Signing time: Sun 20 Sep 2026 19:00:12 +0000
Manifest this update: Sun 20 Sep 2026 19:00:12 +0000
Manifest next update: Mon 21 Sep 2026 19:00:12 +0000
Files and hashes: 1: ROpNx89soFP8JE-okJDCTVHVXDs.roa (hash: 5HtcGDIbCLb9z7TZql7Z+rs2Xx1sglk4pFTRwXa2X+g=)
2: cEZO_kc3QepObM9sPFo3xm89oXk.crl (hash: ybio9zSQdeWogMzQgC6SwM20kcoFa2uUMXS1nQeWOlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:30:b3:04:a1:f2:a4:76:21:60:c5:97:18:2a:c3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70464efe473741ea4e6ccf6c3c5a37c66f3da179
Validity
Not Before: Sep 20 19:00:12 2026 GMT
Not After : Sep 21 19:00:12 2026 GMT
Subject: CN=2bf3aab4600da273738d8ce8657a982a0a9e3bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:92:a3:d0:78:1e:e6:84:69:70:b1:d1:c8:
75:d7:0a:73:c8:34:af:fb:f2:28:d0:82:7d:a1:8c:
76:37:6a:37:83:f1:e0:b0:b2:e8:fa:f9:89:29:0b:
69:5d:fd:53:78:72:24:ff:24:4e:b3:67:97:36:f0:
89:2b:55:96:24:54:d3:ab:cb:ca:bc:0b:d9:29:22:
23:e4:31:b5:e2:b1:81:09:34:37:82:28:43:91:87:
59:c3:5e:28:ac:19:a3:a4:7d:fa:36:54:0e:10:d1:
27:aa:bf:07:bb:a4:0f:03:88:63:8d:55:79:b0:ad:
55:49:bb:51:a6:8a:48:ea:56:a7:e6:5e:05:5d:4c:
85:fa:f3:2d:c6:84:d1:da:ac:7d:10:66:19:0e:37:
52:63:1a:3c:a4:3a:fe:88:5d:48:5c:15:67:f7:04:
b9:14:d8:9c:0b:5a:7b:e1:fb:9d:74:3e:6a:f5:fc:
99:56:72:e1:4c:9a:96:fb:69:e8:96:5d:5d:f3:f1:
c9:74:e1:17:3a:18:15:1d:f3:4a:17:6d:3c:3f:34:
71:04:ff:e0:4c:1d:64:e8:dd:15:1c:33:5b:e7:d0:
5f:77:55:08:62:75:ac:a5:15:3b:3f:3c:34:b1:54:
f7:81:ca:37:2d:89:45:4a:55:d9:3d:2a:ae:fe:54:
d1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F3:AA:B4:60:0D:A2:73:73:8D:8C:E8:65:7A:98:2A:0A:9E:3B:CB
X509v3 Authority Key Identifier:
keyid:70:46:4E:FE:47:37:41:EA:4E:6C:CF:6C:3C:5A:37:C6:6F:3D:A1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:42:fa:e5:5f:44:4d:0b:0b:9b:87:4f:c8:9c:a4:31:fc:65:
4a:c7:91:62:a3:f2:0c:0b:b5:f1:21:97:23:8a:10:d8:a7:9a:
8b:f1:de:e0:d3:cd:5c:90:01:e7:4e:b1:c6:fe:91:04:93:c3:
29:74:6a:db:c1:b9:08:d7:71:3c:22:f5:8e:2c:41:c3:38:52:
1b:12:c4:ce:38:a2:98:2e:0e:ed:04:6a:97:21:84:d8:a3:2e:
f9:f8:e4:74:c1:75:7f:42:f9:8b:cc:9c:a4:63:08:77:de:67:
91:b9:80:db:c1:53:10:b5:a4:5c:41:ca:55:ee:44:4d:f8:3a:
12:a5:02:09:07:f5:29:24:91:30:cc:8b:c8:a0:19:93:ff:20:
ae:20:07:e3:d8:65:f0:67:d3:20:7e:d7:0d:2e:fb:bf:b4:3d:
14:c3:bc:e1:1b:61:70:cd:b8:a6:f1:fe:52:82:d4:e7:e7:f2:
4e:c4:3d:a3:a9:05:66:4f:30:74:1c:4b:9d:8e:c6:89:06:8c:
63:df:c9:34:65:ef:a6:de:4a:2c:b5:6b:4e:ff:ff:be:17:8e:
7d:6d:4a:47:1b:27:78:af:96:2c:3d:4b:a3:ae:8d:00:ba:3c:
53:d9:89:93:55:b1:cb:67:db:57:79:e7:8e:66:05:61:2c:54:
28:4e:78:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:32:46 2026 by rpki-client