Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
File: EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft (raw, json)
Hash identifier: UOx9bFLKkMX9b4k+YuH1iZjzB+IpWHXTu6XeaUWzQUI=
Subject key identifier: E9:39:B5:18:E7:72:C3:8E:93:8A:C1:75:7B:8C:57:85:38:2B:AF:0C
Authority key identifier: 13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF
Certificate issuer: /CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf
Certificate serial: 019CAC0FABAF6FF90FD557034B053E84B798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
Manifest number: 1840
Signing time: Mon 02 Mar 2026 01:00:33 +0000
Manifest this update: Mon 02 Mar 2026 01:00:33 +0000
Manifest next update: Tue 03 Mar 2026 01:00:33 +0000
Files and hashes: 1: EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl (hash: 4ZPKpY1zlj5Tsjr8kWPm5mLPLM1nYuT2UtGtJJt0z+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:ab:af:6f:f9:0f:d5:57:03:4b:05:3e:84:b7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13323eacd77e5ca5952dd67c28f4fd90d32afadf
Validity
Not Before: Mar 2 01:00:33 2026 GMT
Not After : Mar 3 01:00:33 2026 GMT
Subject: CN=e939b518e772c38e938ac1757b8c5785382baf0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6a:04:3a:9a:da:f5:5f:61:83:db:d4:fb:80:
ee:54:85:a4:11:75:b1:f7:01:d7:ed:80:fe:ce:90:
3d:20:8a:e4:df:47:34:cb:6d:16:17:7c:69:d5:6d:
26:be:4d:d5:87:ac:fd:52:ac:30:1a:ae:83:12:f2:
ca:02:05:64:cd:5a:85:a7:83:76:14:1f:40:a3:5e:
67:34:83:bb:05:1b:0f:9a:b6:0b:88:b2:42:dc:83:
b6:58:6d:3a:cc:9c:09:1a:7f:7f:be:cb:32:22:03:
bd:9b:83:39:a2:aa:0f:64:53:fc:72:5c:69:cb:7d:
aa:eb:5e:54:7c:8e:b9:8e:63:38:9e:9e:35:16:f2:
08:a5:11:f1:bc:97:bf:8a:1c:eb:a8:70:fc:33:65:
0b:53:a0:d7:b7:28:ee:86:a9:5d:91:84:79:56:69:
74:60:aa:f1:57:15:49:e6:a3:78:0e:08:77:c9:3b:
56:26:05:8d:2b:a0:c6:e5:01:d0:9a:89:53:92:bd:
f2:40:4d:b9:b7:b5:15:72:7b:2a:10:4a:9d:83:bb:
06:92:c0:2b:87:f2:5a:c7:58:5d:17:06:9b:89:77:
ef:79:f9:99:a8:b4:34:d1:2f:d0:72:13:9b:41:49:
d2:be:55:c8:3f:3d:fe:33:1e:4e:af:9b:29:2f:6f:
e8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:39:B5:18:E7:72:C3:8E:93:8A:C1:75:7B:8C:57:85:38:2B:AF:0C
X509v3 Authority Key Identifier:
keyid:13:32:3E:AC:D7:7E:5C:A5:95:2D:D6:7C:28:F4:FD:90:D3:2A:FA:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbeac8-ebed-45fb-b724-70b1c69b4232/1/EzI-rNd-XKWVLdZ8KPT9kNMq-t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:9a:5e:77:37:76:11:42:e4:78:bb:ad:55:5e:d4:77:9c:ad:
24:59:f9:ed:ac:dd:7f:49:8d:39:5e:cd:fd:7e:49:dc:24:34:
e2:0c:0e:ac:0a:a3:4b:9d:40:7d:5f:ff:a4:cc:9e:8f:12:ca:
8c:92:08:63:ec:01:26:56:67:a1:16:cc:4e:cd:d1:16:9d:0f:
10:d2:35:68:3c:e9:20:7e:bf:ea:06:ed:65:4e:90:74:2a:aa:
a1:82:d9:74:1d:93:db:2d:fa:e6:57:19:90:b9:33:8f:61:f9:
28:79:28:51:c2:8f:4d:84:38:54:a7:37:5a:42:7b:5f:af:6f:
91:9c:ae:ad:00:4b:aa:60:fc:61:52:52:75:bd:a8:33:f9:96:
76:2d:21:cf:f6:4f:e5:65:54:51:39:9c:03:16:9f:7b:0a:08:
9e:6c:a8:e7:5e:aa:cb:8c:32:28:7e:88:46:22:e2:29:81:b9:
b0:31:e1:7e:4f:dc:06:8d:4e:bc:60:d8:58:8d:46:93:c4:ab:
a9:22:2f:72:fa:93:a7:82:15:02:86:8b:99:f4:d5:e1:60:cf:
36:c1:c6:88:d5:0f:73:ef:1c:46:8a:63:7d:26:19:c8:e1:ac:
21:8b:bd:09:ed:b6:d5:60:1c:1d:82:fd:26:6b:2d:0a:bd:03:
0a:cd:fe:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:15 2026 by rpki-client