
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
File: Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft (raw, json)
Hash identifier: ppOb7fc4jhrv6JgXGddtfMTN9qv9VlCHjzTdx/sHlPI=
Subject key identifier: 1C:A6:F4:B3:50:AA:42:E0:53:73:32:BA:6F:6D:6F:49:59:08:3D:06
Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
Certificate issuer: /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Certificate serial: 019D98BD6925F8519A045AE4A29944E96443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
Manifest number: 1711
Signing time: Fri 17 Apr 2026 00:00:43 +0000
Manifest this update: Fri 17 Apr 2026 00:00:43 +0000
Manifest next update: Sat 18 Apr 2026 00:00:43 +0000
Files and hashes: 1: Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl (hash: uax8Ivd9wGbwQOKO4f48Qn2cDUrEhtqAQruZSqSxThU=)
2: KAZZmnJNcc3J8hdxVQCO2YzAFOk.roa (hash: Tn9EAPhePmRvkHGL8zdRZCb2aqgnTcgDWpOmWf8X5WU=)
3: WNNX0VNsYOnOt7_5Ye8MxMHFMuU.roa (hash: ieYhP55/ISwvI2Q5dlwCNbQyWY0xH0nyLmu75b3vMPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:69:25:f8:51:9a:04:5a:e4:a2:99:44:e9:64:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Validity
Not Before: Apr 17 00:00:43 2026 GMT
Not After : Apr 18 00:00:43 2026 GMT
Subject: CN=1ca6f4b350aa42e0537332ba6f6d6f4959083d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7a:2a:83:1f:3f:5d:e8:9e:17:3f:74:8f:6f:
4c:05:fb:80:6b:a1:fd:75:23:b2:a8:80:ce:dd:ae:
e1:50:c4:34:36:f0:f1:59:7f:a7:03:23:6e:59:f7:
b4:f5:a0:81:e8:a8:28:25:bd:fc:c1:e8:eb:42:70:
ab:d2:75:19:0a:b9:14:c7:30:53:c9:d5:54:46:4e:
81:7e:56:f2:a6:7c:3e:67:c9:6b:38:79:ee:b7:3e:
d6:71:4c:0f:13:ff:92:59:60:8d:5a:c5:8c:17:db:
d1:3d:a9:64:e6:12:4d:c9:95:82:e9:c8:71:c9:dc:
3a:d8:43:40:aa:92:96:c2:65:cb:e9:36:91:2e:af:
51:44:47:b7:5b:4d:2a:a8:cf:02:9f:e9:30:7b:1e:
2b:1c:75:f9:ef:d2:85:b6:29:ce:27:7c:63:ed:f6:
43:3f:27:0d:d6:0c:0f:a6:1b:4d:69:94:c9:3a:6d:
b3:7a:14:ef:99:18:ba:87:ef:d1:83:0f:25:83:23:
82:bf:b2:6e:40:7e:9f:c5:a7:c4:1c:ed:86:1e:c6:
46:e1:c0:fa:72:f2:84:df:10:56:8b:40:3b:5c:22:
6a:e5:31:c3:bc:4b:f8:2a:a1:f7:e7:19:a2:3b:6d:
08:ec:ca:28:8f:b1:84:57:c5:a2:e5:10:4d:be:53:
4b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A6:F4:B3:50:AA:42:E0:53:73:32:BA:6F:6D:6F:49:59:08:3D:06
X509v3 Authority Key Identifier:
keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:81:61:03:ab:66:43:78:b8:2e:fc:d9:c8:32:01:fe:87:21:
9a:ea:01:7e:6d:b1:a4:01:70:b0:aa:c5:77:d4:25:d1:2a:01:
cd:31:fd:bd:0c:7a:8c:56:a3:5e:35:b7:d0:29:67:be:0b:a3:
8e:78:ab:8b:b0:8c:9a:94:4d:3f:9a:49:e6:93:1a:58:41:4e:
94:b6:a6:7e:f5:12:09:ce:6e:3c:1f:ca:c4:5c:b5:d6:3f:3d:
6c:ad:44:ca:72:82:2d:ad:be:55:57:16:63:22:9a:32:7d:ef:
d0:8d:0e:45:22:68:de:f3:66:1e:e6:39:5b:45:c0:ce:e0:0a:
e4:32:d2:94:4b:3a:f2:9c:f3:74:13:52:fd:32:27:59:a6:e3:
f8:f2:bb:f0:ce:11:6a:43:de:e1:85:97:b6:c0:b6:44:59:b4:
09:bc:ae:25:9f:6d:6e:0a:cf:1d:4c:ed:4a:25:5b:95:5b:33:
62:ee:33:8e:6b:88:cd:ab:b8:40:2f:ef:ea:17:d8:a3:d7:2f:
11:6e:91:02:e8:2a:5d:b0:e4:a4:39:d0:bd:a4:1e:30:17:3b:
cd:99:18:b0:42:83:b6:ac:1e:ac:ac:f4:34:93:d9:8c:84:42:
3c:79:c5:cb:01:82:8c:83:ed:2f:64:c3:33:e7:fc:7c:95:1b:
e7:d9:db:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:10:16 2026 by rpki-client