Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
File: Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft (raw, json)
Hash identifier: 1A6U4NAhge6PoRnp4L/rd2Ju51S89kYwxgSjstmFoo4=
Subject key identifier: 42:84:E0:EA:8F:21:25:1A:CE:E4:A4:1E:8E:70:19:EC:9C:89:E1:BF
Authority key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
Certificate issuer: /CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Certificate serial: 019CAB343B2D34AED544759C876C3B372160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
Manifest number: 1696
Signing time: Sun 01 Mar 2026 21:00:52 +0000
Manifest this update: Sun 01 Mar 2026 21:00:52 +0000
Manifest next update: Mon 02 Mar 2026 21:00:52 +0000
Files and hashes: 1: Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl (hash: BtNqNGRzb0yrb12zzrlyjyLJ5x858cDnAvOQwDKlAPg=)
2: KAZZmnJNcc3J8hdxVQCO2YzAFOk.roa (hash: Tn9EAPhePmRvkHGL8zdRZCb2aqgnTcgDWpOmWf8X5WU=)
3: WNNX0VNsYOnOt7_5Ye8MxMHFMuU.roa (hash: ieYhP55/ISwvI2Q5dlwCNbQyWY0xH0nyLmu75b3vMPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:3b:2d:34:ae:d5:44:75:9c:87:6c:3b:37:21:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Validity
Not Before: Mar 1 21:00:52 2026 GMT
Not After : Mar 2 21:00:52 2026 GMT
Subject: CN=4284e0ea8f21251acee4a41e8e7019ec9c89e1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4c:fe:08:90:85:da:7d:0c:60:26:62:f5:e8:
66:e6:68:93:a1:0e:84:67:9f:25:9c:46:db:81:d3:
a2:70:7a:59:f6:24:49:84:40:06:97:b1:f5:f6:93:
c5:8e:d9:90:d6:09:b2:91:8d:07:3c:d6:c3:f0:4e:
3b:f5:e3:72:ba:de:3f:84:58:85:9b:1f:3d:58:a5:
43:ac:60:2f:e9:5b:81:97:48:cf:38:36:93:4a:03:
12:fb:de:62:5e:be:01:74:94:45:3e:26:25:15:7d:
8a:98:53:38:5e:fd:a0:fc:30:48:f9:0a:89:ac:81:
31:9b:3c:d5:22:8d:fb:b2:22:fc:cd:f7:73:a5:c2:
d5:26:bb:ed:d7:cf:94:ce:65:e4:23:69:c7:c7:2d:
78:2c:e4:36:bd:e5:df:f4:a7:f0:d8:2d:9c:be:ad:
d0:4b:02:c5:e0:5e:f2:51:20:af:9e:33:07:29:69:
e6:d9:af:11:37:b9:13:9b:3f:f8:f6:b9:6d:d0:0c:
23:d3:65:34:11:2a:c7:32:e3:48:3f:35:2d:f4:6e:
6f:10:c0:0e:af:64:3d:78:5f:9a:0e:88:81:39:4e:
6a:5b:c9:2b:01:dc:e0:e5:f2:cb:97:66:6b:b2:df:
6f:97:a3:4a:ad:09:48:13:14:dc:fa:55:69:ed:e6:
8d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:84:E0:EA:8F:21:25:1A:CE:E4:A4:1E:8E:70:19:EC:9C:89:E1:BF
X509v3 Authority Key Identifier:
keyid:13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:33:30:3c:88:61:2f:0d:6e:8c:e9:23:61:f7:20:03:63:bd:
af:8c:38:c8:ec:c0:a4:60:b7:74:b6:04:6d:08:20:98:75:f6:
91:e7:2b:67:e3:43:45:dc:84:13:99:12:e9:33:09:d3:f8:14:
fc:28:72:9e:79:ed:2c:aa:f9:dc:d2:02:14:38:d1:2a:c9:2e:
b1:0e:81:76:26:3d:a2:a8:92:dd:da:3d:45:5b:a6:70:d1:65:
46:16:9d:d3:84:bf:ae:e7:b2:09:1e:22:11:27:08:ee:fb:fe:
a1:44:b1:77:30:c2:d0:32:ec:fc:91:06:cb:3a:24:46:db:c8:
ef:b5:e7:35:32:77:32:99:33:36:7c:61:db:13:1a:9f:7f:71:
ba:a3:50:e3:1e:31:76:84:5a:e7:ac:cb:38:e6:23:d8:b0:79:
d5:25:0f:09:23:6f:26:fe:a0:d2:97:19:13:d9:48:8d:54:87:
bf:0f:84:92:a8:47:85:c4:cb:9f:80:57:28:18:80:a0:71:74:
aa:8f:93:28:2b:63:ac:3a:2a:11:23:ed:89:b6:49:2e:9f:05:
31:88:22:ef:93:65:6a:0f:8b:a8:59:95:04:17:14:9f:5b:17:
9b:7b:ea:16:ae:e4:6b:14:dd:a9:60:e4:fc:c1:c2:c9:51:bb:
98:f1:e3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:27 2026 by rpki-client