Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
File: EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft (raw, json)
Hash identifier: a2QqxARn919lr7F1tRAKMpy1dgjx5SyDHaBPlS5/RJM=
Subject key identifier: 47:4B:5F:AD:B9:5B:D1:67:4F:66:F0:00:CB:98:07:AC:A3:4E:52:9D
Authority key identifier: 13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF
Certificate issuer: /CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf
Certificate serial: 019FA7BD5963680969B42EF285DCE272B702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
Manifest number: 19CD
Signing time: Tue 28 Jul 2026 08:00:31 +0000
Manifest this update: Tue 28 Jul 2026 08:00:31 +0000
Manifest next update: Wed 29 Jul 2026 08:00:31 +0000
Files and hashes: 1: EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl (hash: GdJ0A1HwmRekogu8do/p9ERgMUNnih0zpxkbANSBpgg=)
2: oMj78aTacCBXeqQcaP1RLWPvir4.asa (hash: ld6O2406y7G0yRCfAeWkZnfR6BMvRlaLlhep2a0FVaA=)
3: rnG49hfUWRbAaTnEufRtk-EpTgI.roa (hash: m+CLt1je+e7kdBLIdzICI7KIXd8aZuhthtIqMfab938=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:59:63:68:09:69:b4:2e:f2:85:dc:e2:72:b7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf
Validity
Not Before: Jul 28 08:00:31 2026 GMT
Not After : Jul 29 08:00:31 2026 GMT
Subject: CN=474b5fadb95bd1674f66f000cb9807aca34e529d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:29:45:da:e4:ce:7f:c4:f2:7a:06:e3:a8:5e:
23:8d:45:b4:bc:73:fb:8b:5c:e0:3c:39:a4:87:6f:
16:f7:fd:59:7a:8d:5c:fa:53:d5:17:a2:ad:eb:a9:
54:f4:94:97:ed:23:b3:ac:5a:b2:e5:cf:0e:2f:3d:
7f:38:77:2f:22:c6:f2:72:38:c4:17:50:3d:9a:bf:
5b:45:2e:81:c1:76:79:ed:53:2e:2a:a4:5e:21:e9:
51:c4:8c:92:36:44:87:01:c1:21:c4:4c:e2:b5:9c:
68:52:0e:bd:78:83:f5:63:59:cc:66:b9:74:0f:2c:
27:48:f4:f8:23:51:08:cd:7a:35:b1:02:9a:dd:15:
bd:d5:5e:05:c2:26:de:e6:c2:a3:0e:1e:d3:11:44:
71:18:b7:1f:21:e8:04:dc:13:e6:49:01:f7:ce:92:
2c:e9:0b:d3:21:13:bb:f5:e0:12:28:f2:ca:92:1b:
e0:fc:f2:cb:71:8e:0f:76:ea:6f:92:03:a3:ee:5a:
a1:fa:dc:00:22:7e:f2:e0:e1:44:b2:a0:5f:c8:72:
d6:e7:e5:47:cb:5f:a1:92:bf:ba:52:9b:2e:f6:5b:
41:76:5e:74:ca:b1:a4:08:12:46:2e:5c:86:b4:82:
54:71:ac:86:e5:f0:6f:84:21:d5:dc:ef:74:0b:88:
12:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4B:5F:AD:B9:5B:D1:67:4F:66:F0:00:CB:98:07:AC:A3:4E:52:9D
X509v3 Authority Key Identifier:
keyid:13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:84:64:dc:f8:23:b1:0e:3f:83:ac:10:fa:8f:cf:2e:af:5d:
5e:a2:b3:38:9b:9d:73:af:57:d8:ce:06:1b:e3:5d:da:0c:52:
17:6b:23:2d:45:03:db:6a:02:12:f6:c3:df:14:7b:04:90:5a:
7b:aa:0c:7b:ce:e1:aa:6b:c8:cc:34:35:99:f3:81:72:f7:18:
ff:49:b3:f6:36:4d:68:8d:ec:37:16:5a:41:2d:1f:cc:92:47:
cd:1b:a3:6a:63:11:c1:e8:16:61:f8:78:b8:0d:ff:85:36:75:
6b:e2:2d:41:6a:c4:de:90:8f:dc:76:4a:25:b2:61:34:f7:03:
15:ac:8b:0a:a3:4b:49:8d:9c:0d:c8:31:57:fe:23:9d:7f:b9:
ca:42:02:a0:91:d2:7b:a6:82:ce:44:f5:ff:3c:d6:4c:34:64:
6d:1c:56:7c:07:a2:ec:af:98:95:0a:90:ca:7a:a3:98:e0:60:
96:da:be:ec:6b:08:d6:ba:7b:90:41:4f:03:b0:78:71:e3:f4:
cd:75:08:4f:41:78:0e:cd:09:e8:03:2c:be:42:74:32:53:cc:
43:d9:c5:f4:e2:ef:f8:d3:69:36:1a:d5:9a:07:af:e3:b1:71:
b2:90:86:e1:6c:29:0d:c0:d0:86:04:cd:9f:1e:a4:fc:51:54:
81:fa:5f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:46:59 2026 by rpki-client