Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
File: Ez7rn3q6GeA7E2basIg_NlP8A74.mft (raw, json)
Hash identifier: F91RPVHyI/BmKUGqeHqhoeLtmLdEA81iPWxS+rNanVI=
Subject key identifier: E2:53:AE:BE:90:8D:E9:0B:6E:B0:8C:ED:68:84:8D:50:86:FC:AF:81
Authority key identifier: 13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE
Certificate issuer: /CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
Certificate serial: 019CAC470AC0E3FB4B46442970A18982397C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
Manifest number: 1597
Signing time: Mon 02 Mar 2026 02:01:02 +0000
Manifest this update: Mon 02 Mar 2026 02:01:02 +0000
Manifest next update: Tue 03 Mar 2026 02:01:02 +0000
Files and hashes: 1: Ez7rn3q6GeA7E2basIg_NlP8A74.crl (hash: f0YcaBCsXt+ZUu6GaqHhH1U0EMFy1jIqjQ4EPsezSY0=)
2: zUZH8frHV9LyqR8uuy29ut30zGA.roa (hash: ZtNFrARi4yUhBACRab5+tIfsO4m0wuC3iZpaWR0rbTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:0a:c0:e3:fb:4b:46:44:29:70:a1:89:82:39:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
Validity
Not Before: Mar 2 02:01:02 2026 GMT
Not After : Mar 3 02:01:02 2026 GMT
Subject: CN=e253aebe908de90b6eb08ced68848d5086fcaf81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:56:bb:ff:ff:2a:f4:1e:6a:0c:ba:49:a2:2b:
ac:43:8a:ed:c8:75:75:17:b5:46:c5:5d:0a:c3:bd:
9d:9d:22:80:15:be:4a:71:2c:f3:f7:8e:76:55:05:
5b:19:be:fa:05:a1:ee:8f:40:19:7e:bb:84:64:46:
7d:c0:f6:4e:7b:9f:ca:99:3e:94:ae:c3:1f:e7:21:
14:a5:35:50:18:a8:88:26:f3:db:8b:71:61:35:3e:
11:79:b5:31:66:27:f5:2d:26:09:1f:a3:89:c2:e2:
8c:8e:e9:35:4c:99:1d:c0:cc:ef:41:ed:02:6e:7f:
57:e0:6c:47:40:c4:cb:65:a3:bc:2e:7e:5f:13:3e:
7f:5c:87:c3:e3:1a:81:d7:b3:c5:61:e5:d9:1c:b6:
66:ee:e7:cf:11:77:9e:1b:2a:4f:ba:66:65:e9:72:
19:6d:e9:59:38:e5:43:9f:7a:68:6a:de:71:7a:c7:
17:7c:39:53:88:93:4c:b0:c0:c7:a9:8a:a5:a4:eb:
6c:f7:d6:2b:aa:17:9b:d8:a8:30:bf:c8:2e:6b:77:
5b:dc:86:39:c1:a3:c9:6e:0e:6b:db:18:f6:91:00:
95:95:67:f7:c3:20:06:06:cc:77:68:96:55:2a:26:
e4:b9:47:01:4c:bd:c1:af:65:35:1d:ed:8d:d7:06:
24:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:53:AE:BE:90:8D:E9:0B:6E:B0:8C:ED:68:84:8D:50:86:FC:AF:81
X509v3 Authority Key Identifier:
keyid:13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:33:98:ac:55:76:46:4c:4f:93:ff:a4:27:b1:3d:84:83:01:
09:12:e7:ee:b9:e6:3e:27:37:be:44:87:f2:06:26:f1:7d:d7:
af:54:b1:da:76:10:7f:9b:fe:24:b5:40:4d:79:92:30:fb:a9:
76:59:85:22:d0:6f:5c:30:6d:2e:69:27:ff:cd:c6:0c:b4:20:
f2:b6:23:d6:89:56:31:32:f3:c5:54:b2:83:85:45:6d:94:87:
dc:00:a3:2f:f4:7f:d9:ae:43:62:7c:22:83:fb:31:b2:cb:96:
36:4f:76:56:88:61:ad:de:8f:a1:eb:6e:5c:13:e2:3d:a6:ee:
a9:b6:45:0a:1f:41:87:dd:9b:ce:27:0a:30:4c:bc:66:d8:84:
86:94:c3:1d:a6:5c:1b:e9:f8:a8:b9:02:da:3f:ee:d7:6e:77:
0b:b2:b1:62:9f:47:41:18:20:49:97:d7:ef:e2:66:61:f3:20:
4b:80:3a:6b:81:28:6b:9a:4d:ff:10:95:c5:96:7c:09:e7:7f:
9c:b1:bf:3f:8f:5c:88:a4:63:5a:11:5c:a1:4b:fd:54:a6:2e:
8f:d2:7f:8d:a9:6d:18:e7:86:ab:15:62:9f:19:7e:d7:75:df:
6f:67:a0:28:77:37:bc:a3:3d:f8:f5:3f:39:29:ed:f7:ab:60:
03:b3:85:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRwrA4/tLRkQpcKGJgjl8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzM2VlYjlmN2FiYTE5ZTAzYjEzNjZkYWIwODgzZjM2NTNm
YzAzYmUwHhcNMjYwMzAyMDIwMTAyWhcNMjYwMzAzMDIwMTAyWjAzMTEwLwYDVQQD
EyhlMjUzYWViZTkwOGRlOTBiNmViMDhjZWQ2ODg0OGQ1MDg2ZmNhZjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAola7//8q9B5qDLpJoiusQ4rtyHV1
F7VGxV0Kw72dnSKAFb5KcSzz9452VQVbGb76BaHuj0AZfruEZEZ9wPZOe5/KmT6U
rsMf5yEUpTVQGKiIJvPbi3FhNT4RebUxZif1LSYJH6OJwuKMjuk1TJkdwMzvQe0C
bn9X4GxHQMTLZaO8Ln5fEz5/XIfD4xqB17PFYeXZHLZm7ufPEXeeGypPumZl6XIZ
belZOOVDn3poat5xescXfDlTiJNMsMDHqYqlpOts99Yrqheb2Kgwv8gua3db3IY5
waPJbg5r2xj2kQCVlWf3wyAGBsx3aJZVKibkuUcBTL3Br2U1He2N1wYksQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJTrr6QjekLbrCM7WiEjVCG/K+BMB8GA1UdIwQY
MBaAFBM+6596uhngOxNm2rCIPzZT/AO+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXo3cm4zcTZHZUE3RTJiYXNJZ19ObFA4QTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZWY5ZTAtN2EwMC00ZmNhLWJlYWEt
NjZiNjI0ZWFlNzhjLzEvRXo3cm4zcTZHZUE3RTJiYXNJZ19ObFA4QTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS81ZWY5ZTAtN2EwMC00ZmNhLWJlYWEtNjZiNjI0ZWFlNzhj
LzEvRXo3cm4zcTZHZUE3RTJiYXNJZ19ObFA4QTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDOYrFV2
RkxPk/+kJ7E9hIMBCRLn7rnmPic3vkSH8gYm8X3Xr1Sx2nYQf5v+JLVATXmSMPup
dlmFItBvXDBtLmkn/83GDLQg8rYj1olWMTLzxVSyg4VFbZSH3ACjL/R/2a5DYnwi
g/sxssuWNk92Vohhrd6PoetuXBPiPabuqbZFCh9Bh92bzicKMEy8ZtiEhpTDHaZc
G+n4qLkC2j/u1253C7KxYp9HQRggSZfX7+JmYfMgS4A6a4Eoa5pN/xCVxZZ8Ced/
nLG/P49ciKRjWhFcoUv9VKYuj9J/jaltGOeGqxVinxl+13Xfb2egKHc3vKM9+PU/
OSnt96tgA7OF1w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:00:29 2026 by rpki-client