Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
File: EzGVE_0LkEFwYKIYt21iuOP7zFE.mft (raw, json)
Hash identifier: AJ25EEzOXfLEAD2S9X2uZ4KuyO35DlY3d5qtVGz8pCc=
Subject key identifier: 47:DA:75:24:ED:87:4A:37:1D:AF:A2:AC:C9:D0:FF:B2:62:00:B1:BC
Authority key identifier: 13:31:95:13:FD:0B:90:41:70:60:A2:18:B7:6D:62:B8:E3:FB:CC:51
Certificate issuer: /CN=13319513fd0b90417060a218b76d62b8e3fbcc51
Certificate serial: 01A13522E99D718583353D39125268609FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
Manifest number: 1AA1
Signing time: Tue 13 Oct 2026 12:00:42 +0000
Manifest this update: Tue 13 Oct 2026 12:00:42 +0000
Manifest next update: Wed 14 Oct 2026 12:00:42 +0000
Files and hashes: 1: EzGVE_0LkEFwYKIYt21iuOP7zFE.crl (hash: ToIwIQ1l5mT2m1JQVVEt/oUO+lQL/tEv4ImUW0qJqFU=)
2: QDiPvt15IO2yPU7gbEYowlHPnHc.roa (hash: XLuGWRjPQ5PJivkL0PcxwadQsih1SnROtNnqw3W5Cxs=)
3: os0I0obTgyc71lmMpvWXLb4BXXE.roa (hash: 2LIi3kyj7edFMP0IZp4x5bxYqtPyJL7a+L8zfAyaJUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:22:e9:9d:71:85:83:35:3d:39:12:52:68:60:9f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13319513fd0b90417060a218b76d62b8e3fbcc51
Validity
Not Before: Oct 13 12:00:42 2026 GMT
Not After : Oct 14 12:00:42 2026 GMT
Subject: CN=47da7524ed874a371dafa2acc9d0ffb26200b1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f8:d8:df:14:53:aa:9f:ca:d6:b6:5e:21:2f:
b1:22:24:84:b1:31:eb:ae:ca:19:07:cd:11:7f:f7:
8c:f4:11:7d:c1:12:c6:a1:c2:7e:71:1d:ba:39:a5:
5f:25:08:4c:3c:fd:49:fc:db:5e:c6:3d:df:2d:67:
f1:23:59:10:01:f8:7a:c9:b1:b6:15:84:8c:ac:ca:
67:7c:e8:27:d4:a0:36:bf:fe:f6:17:a6:76:da:58:
8d:50:15:7c:75:b6:52:c5:05:be:07:68:ed:04:64:
a0:d3:b9:ad:f4:ec:2b:91:44:6b:6d:03:0c:99:40:
97:73:b9:48:e7:75:58:ff:aa:84:54:8b:53:1a:68:
64:b1:23:da:6c:be:64:93:c1:3e:8e:11:33:fa:c7:
35:c8:05:5f:24:17:02:2f:e0:70:cc:1e:5e:0c:ca:
9c:55:33:02:72:cb:a8:15:43:71:66:2c:c3:6b:fa:
7a:ba:b3:7e:95:26:b5:97:38:88:08:2f:4f:eb:70:
3b:65:cd:44:c2:a9:c5:e4:20:ac:6a:43:c6:74:05:
79:75:35:50:d2:e8:f5:d6:21:df:8e:dc:32:93:e8:
c8:78:9b:17:c7:95:2a:d1:ab:e2:c1:81:e5:0e:e5:
dd:02:0e:91:7f:ec:f4:2c:c5:5e:2e:85:b0:42:b0:
e1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DA:75:24:ED:87:4A:37:1D:AF:A2:AC:C9:D0:FF:B2:62:00:B1:BC
X509v3 Authority Key Identifier:
keyid:13:31:95:13:FD:0B:90:41:70:60:A2:18:B7:6D:62:B8:E3:FB:CC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:25:1c:7a:df:16:e4:74:41:bf:7a:c0:cb:a1:2b:a3:bc:72:
d3:9f:a7:35:29:ac:13:92:0f:2a:80:1d:ec:4e:e8:b0:08:10:
85:2e:a3:d2:1f:75:a8:e6:4a:bf:2e:2c:b6:6c:3d:1e:21:d9:
9f:d6:4b:26:98:d6:12:a2:0d:0e:8a:48:32:74:0f:f0:be:df:
c6:4d:24:45:00:3c:74:55:af:e0:5d:1d:2a:17:e8:c5:a7:1c:
cb:bf:0b:ca:7f:ff:d7:d1:9c:1a:59:da:bc:e0:74:44:a6:41:
98:43:14:bd:40:a9:6e:ba:61:12:59:27:28:14:a6:6d:9a:4d:
d6:04:06:37:cf:f4:99:78:8a:b8:64:7c:df:9c:7c:a8:23:93:
d7:4a:15:7a:6d:7b:66:ed:db:7e:16:62:7f:52:8d:b7:b6:82:
a4:cf:56:02:7a:4a:aa:3e:95:40:0f:ab:41:3a:ee:62:22:26:
e0:05:13:b6:60:ea:b8:9d:78:24:99:e3:fb:94:f6:a9:c8:ef:
16:d0:ac:49:5b:d8:1f:d1:77:7c:f5:6c:e0:a9:52:3e:69:13:
c9:13:c9:5f:d1:23:b3:f2:37:95:63:e5:9a:a4:7c:4e:b5:a5:
27:f7:77:d2:82:d4:17:bb:5a:8a:87:65:09:4e:0e:df:94:dd:
73:fb:c6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:21:39 2026 by rpki-client