Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
File: Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft (raw, json)
Hash identifier: oTm+kQez8PEJLhkhqem40pmiw4tEleU1efQLveAvcXE=
Subject key identifier: 12:FA:3D:6F:AB:0E:A6:50:46:1D:90:C0:FA:F8:E2:F6:E8:CB:D3:18
Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
Certificate issuer: /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Certificate serial: 01A131EAE8B8A9D7E06AD1F733AC7FDE2C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
Manifest number: 18EE
Signing time: Mon 12 Oct 2026 21:00:40 +0000
Manifest this update: Mon 12 Oct 2026 21:00:40 +0000
Manifest next update: Tue 13 Oct 2026 21:00:40 +0000
Files and hashes: 1: Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl (hash: 9hhLnAEejSnRTsmX5VMzmkdkZB+PKYSpUnb40lJWmYs=)
2: KAZZmnJNcc3J8hdxVQCO2YzAFOk.roa (hash: Tn9EAPhePmRvkHGL8zdRZCb2aqgnTcgDWpOmWf8X5WU=)
3: WNNX0VNsYOnOt7_5Ye8MxMHFMuU.roa (hash: ieYhP55/ISwvI2Q5dlwCNbQyWY0xH0nyLmu75b3vMPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:ea:e8:b8:a9:d7:e0:6a:d1:f7:33:ac:7f:de:2c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Validity
Not Before: Oct 12 21:00:40 2026 GMT
Not After : Oct 13 21:00:40 2026 GMT
Subject: CN=12fa3d6fab0ea650461d90c0faf8e2f6e8cbd318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:23:67:60:3c:0e:46:31:8d:f2:a2:2f:8c:
a7:d6:11:e7:07:e4:22:de:77:d6:8b:e4:19:68:4d:
28:f0:3b:87:39:8e:12:9c:8d:df:69:13:68:c9:44:
6d:5c:73:07:e8:db:5f:0c:19:30:a0:ce:c8:8e:59:
9e:3d:96:e0:b2:03:1e:07:8f:42:b2:84:ed:52:47:
5b:27:66:ca:9e:1d:f7:82:ef:b1:09:63:f8:98:c4:
fb:98:d6:e3:23:16:85:70:9e:d3:5e:a9:57:ec:fe:
80:b7:97:96:06:5e:88:a1:d6:60:99:2c:40:d6:5f:
d6:36:25:79:0d:b5:45:cc:20:99:5a:06:86:50:dc:
fc:e4:28:a1:bb:1e:cc:f1:fb:63:30:d7:34:73:90:
30:d8:8a:13:75:cd:0c:2d:ac:6e:14:9b:2d:c5:03:
c8:7f:52:d7:3d:3a:c1:24:7e:e3:37:c0:8b:6b:fa:
d4:ae:0e:90:33:78:ae:b2:a8:ea:46:22:d2:a1:2d:
e7:4e:5a:a9:10:de:dd:4d:8a:92:0d:93:75:56:b2:
c3:48:97:77:d3:c2:71:02:18:94:57:54:e1:de:15:
cb:d1:fc:c0:c5:c5:b5:f4:c0:e6:fe:c1:ec:c6:2d:
44:0a:ec:d9:ee:df:be:52:dd:2d:25:1e:b3:ce:32:
55:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FA:3D:6F:AB:0E:A6:50:46:1D:90:C0:FA:F8:E2:F6:E8:CB:D3:18
X509v3 Authority Key Identifier:
keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5f:32:e8:d5:bc:31:4b:4c:b0:05:e8:a9:a2:33:33:4e:59:
f9:ec:44:b8:ea:4f:c4:08:dc:a8:18:a4:6c:1b:7f:24:b1:79:
dc:f6:e4:99:57:7c:38:f8:29:a1:93:a9:45:b0:09:39:d2:5a:
27:fc:1d:a3:18:16:c2:ec:a3:91:74:bd:ca:22:e8:28:9f:7e:
9e:ad:3a:0e:5f:62:b5:61:90:44:8a:95:88:31:5e:e8:9e:40:
2a:57:3a:c1:4c:61:8f:f4:00:39:4f:ab:99:d2:c7:c7:47:73:
5d:4e:bc:aa:82:9b:be:82:09:31:5d:fe:25:1a:f8:75:37:53:
cf:21:68:7d:88:06:5c:36:12:8b:07:e4:d6:5a:c4:ba:cf:20:
c9:d4:a9:94:9d:55:66:f9:a8:c6:74:94:83:ee:0d:77:a1:8b:
ac:1a:ec:90:af:a6:79:93:24:eb:2f:62:49:1e:84:8c:7a:4a:
f2:b8:0c:60:4c:17:59:91:a9:08:6f:a0:3a:20:b0:90:fb:b0:
82:1a:5e:b5:cc:1b:48:6c:6e:8f:10:de:98:38:32:b2:a4:e8:
e3:2c:b0:9a:8b:b7:92:6b:db:20:b0:90:d7:97:9f:9e:b7:39:
23:67:e0:2b:d6:55:52:71:75:1a:78:6b:4d:19:ba:86:e7:cf:
41:1e:08:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:53:52 2026 by rpki-client