Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft
File: EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft (raw, json)
Hash identifier: qrPEaYQi+wI46sG7UtXAUsCmOdKBvvgjFYRTqL2DEQg=
Subject key identifier: D9:41:9A:D9:94:D0:AB:37:AF:4A:3E:48:96:6B:4F:EA:BC:1B:34:04
Authority key identifier: 13:31:33:4C:8A:35:DA:66:B4:4D:90:93:47:A6:43:EE:44:19:1A:AF
Certificate issuer: /CN=1331334c8a35da66b44d909347a643ee44191aaf
Certificate serial: 019FA9AC3600F66B5D2CBA69D2B9BC9357BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft
Manifest number: 0376
Signing time: Tue 28 Jul 2026 17:01:03 +0000
Manifest this update: Tue 28 Jul 2026 17:01:03 +0000
Manifest next update: Wed 29 Jul 2026 17:01:03 +0000
Files and hashes: 1: EzEzTIo12ma0TZCTR6ZD7kQZGq8.crl (hash: DqYZb3HRenCIHfpUR0FMg+AG2A/HK2gvpR/V5rUkpVo=)
2: d3pkWWdmvNQR45OZHT-x9rdGQNs.roa (hash: TDl/0oWRr3l5gDCKGW8colL6v491r+s+27SkHi8/nrc=)
3: drsHyJd54bQmTrK79sYayH7gZU0.asa (hash: PhsvxaQWRgPrAHzHZsRm4M1zdIRNOuacc65APqiAfno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:36:00:f6:6b:5d:2c:ba:69:d2:b9:bc:93:57:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1331334c8a35da66b44d909347a643ee44191aaf
Validity
Not Before: Jul 28 17:01:03 2026 GMT
Not After : Jul 29 17:01:03 2026 GMT
Subject: CN=d9419ad994d0ab37af4a3e48966b4feabc1b3404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ee:b8:30:49:f7:b4:b1:70:e1:05:83:23:96:
a8:1e:bd:22:48:d1:d5:85:41:6d:28:6c:a7:84:d0:
32:c5:45:3f:7a:43:ad:ba:a7:e5:4d:c3:57:55:c3:
8f:fe:c9:d8:95:31:c0:44:83:da:e5:61:00:e8:78:
48:80:b2:d4:72:ae:0a:f9:2a:52:5e:4a:48:cc:9e:
07:01:62:1a:6f:1e:c3:af:c0:a8:58:9e:8b:fa:92:
1f:e6:df:b2:3f:8d:1d:89:5e:40:e6:ea:c9:42:43:
55:ef:ad:f1:d6:26:ca:9f:b7:1a:70:76:d9:c2:9a:
2c:1c:3e:03:d1:bd:b9:a8:d6:0d:7d:28:fb:d0:ae:
5b:01:8d:c1:5b:a9:4a:55:0a:41:a8:1e:77:8f:eb:
f0:3d:75:3b:8a:85:a8:f7:9b:1e:17:b8:8a:6b:7c:
71:b5:28:5e:f8:98:d8:49:a6:4e:b4:52:20:27:36:
c3:3b:6f:1a:11:e0:ea:40:b5:34:4e:91:c8:04:0f:
ba:0b:dd:47:80:b7:ac:4c:13:55:d1:94:4f:1e:49:
6e:12:b4:eb:b2:4e:0f:a6:3a:1a:e4:42:30:6f:22:
d0:ca:b3:e4:70:7d:09:ae:da:d8:d0:54:10:9b:e9:
c3:8d:f2:74:c1:0b:54:98:a4:29:ae:e3:6e:2d:9b:
01:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:41:9A:D9:94:D0:AB:37:AF:4A:3E:48:96:6B:4F:EA:BC:1B:34:04
X509v3 Authority Key Identifier:
keyid:13:31:33:4C:8A:35:DA:66:B4:4D:90:93:47:A6:43:EE:44:19:1A:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzEzTIo12ma0TZCTR6ZD7kQZGq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a4aa47-80ae-4ffd-81de-a7e3e8a5736c/1/EzEzTIo12ma0TZCTR6ZD7kQZGq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ab:d0:ec:c2:f9:e9:ff:65:b3:c8:5d:52:5e:03:63:c3:f0:
c8:9e:ac:7d:2c:7e:30:c7:30:93:c6:18:37:d9:f4:2c:72:1f:
f6:30:8f:43:96:c1:ac:e9:99:9a:3a:2d:ed:df:85:03:b8:cc:
27:c5:b1:c2:81:e1:7e:5f:19:e5:40:29:cd:b3:84:1c:06:67:
1c:2a:b4:be:5b:75:81:c9:43:fe:b8:d1:39:27:e2:23:ea:fc:
32:61:0f:97:2b:43:40:29:e6:28:c4:6b:3e:25:7c:61:4c:d8:
f7:1b:34:86:28:4b:e5:d7:97:9e:59:04:ce:50:89:5f:d9:83:
61:e3:e1:19:2e:97:e0:c8:7f:d3:dd:71:56:60:7c:7f:c1:9c:
1a:a5:54:c6:a7:b8:76:8d:d8:d5:41:21:09:0d:d7:f7:c7:01:
fc:cb:8b:dd:48:43:9a:9a:e1:7c:a7:cd:fb:df:d7:79:7b:be:
5f:52:4a:af:3c:14:c9:a4:44:5c:71:e5:48:e2:4f:6f:b5:e9:
da:8b:10:fb:d6:2a:c8:15:e3:19:85:e6:9b:16:f7:55:7c:55:
39:c9:88:51:4e:18:e8:e6:1b:55:93:8d:26:08:e7:d9:e7:7c:
cb:6d:ce:04:58:b4:06:a0:4e:37:38:ef:9e:97:4d:d5:ce:41:
60:5d:fd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:30:39 2026 by rpki-client