Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
File: EeB1VsGRhnrdkBAVgOz11bdClnE.mft (raw, json)
Hash identifier: XfPpsByF54PtkU1t1ujVBxvZhiFHRnaAw/M9hI4HYmY=
Subject key identifier: A1:C2:77:0D:59:B6:E9:0C:F9:7E:0D:37:AA:F9:EA:5E:07:E6:56:B8
Authority key identifier: 11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
Certificate issuer: /CN=11e07556c191867add90101580ecf5d5b7429671
Certificate serial: 019D2AE0A991A2B6E0693767CB8BD8BAF551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
Manifest number: 1392
Signing time: Thu 26 Mar 2026 16:00:59 +0000
Manifest this update: Thu 26 Mar 2026 16:00:59 +0000
Manifest next update: Fri 27 Mar 2026 16:00:59 +0000
Files and hashes: 1: EeB1VsGRhnrdkBAVgOz11bdClnE.crl (hash: x9rKop1m0OYPiG2wziEjJbAyzUkEHPkWdnv4s6Z0pnM=)
2: tfF3LfL45Exv3rDezYwR5oBy1co.roa (hash: ZlVBaULfD37bwKisEYDbxu1CeranIZs3mSsmaYtd9JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:a9:91:a2:b6:e0:69:37:67:cb:8b:d8:ba:f5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e07556c191867add90101580ecf5d5b7429671
Validity
Not Before: Mar 26 16:00:59 2026 GMT
Not After : Mar 27 16:00:59 2026 GMT
Subject: CN=a1c2770d59b6e90cf97e0d37aaf9ea5e07e656b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8a:6a:17:4d:e3:91:55:c9:5a:d0:e1:95:72:
21:fa:31:d2:d1:7c:63:bf:3f:6e:e8:77:c1:f9:b3:
18:e0:4d:dc:04:c9:d6:80:fd:1c:3b:2f:a4:18:c1:
29:dc:a3:17:1b:00:ec:a7:d9:e1:ca:b2:51:be:6c:
4a:fd:60:b2:b4:b6:dd:7c:06:5b:2d:e9:a1:d8:69:
5a:01:30:bc:e7:6c:8e:c4:f3:f2:c3:12:00:67:7d:
93:f3:49:10:c4:59:c1:81:12:8f:6c:8c:95:54:65:
9a:ab:95:86:3f:8b:fd:17:fa:7c:8e:5b:a0:3f:bd:
a5:c7:af:6c:bd:d6:37:88:e5:30:39:e6:a9:9a:aa:
9c:19:7e:37:b0:2d:02:74:5a:5f:34:f4:17:87:9c:
69:c0:4c:8b:dc:aa:d6:f4:75:28:34:bb:be:2a:a4:
0c:a5:3a:fa:7e:52:24:3c:1a:76:bd:bc:f5:94:bf:
67:40:aa:fb:9a:08:d0:2f:3b:f2:6c:78:e8:4a:8b:
f5:0f:0b:b2:9e:67:38:e4:85:47:8e:a1:8a:1c:96:
c4:ff:4a:d8:be:84:ac:36:75:4a:bb:5f:33:e5:a8:
e4:c7:17:da:44:59:29:f8:c9:11:df:a4:60:37:9b:
de:04:f2:a1:dd:5c:53:59:2f:7b:23:95:e9:3d:8b:
fc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C2:77:0D:59:B6:E9:0C:F9:7E:0D:37:AA:F9:EA:5E:07:E6:56:B8
X509v3 Authority Key Identifier:
keyid:11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:84:f0:5d:93:1e:ec:a1:98:92:29:13:49:57:88:ce:d4:bf:
24:b6:b1:ec:00:56:ab:fc:62:29:a1:d6:c2:38:64:20:44:9d:
53:2a:8e:91:db:1e:5a:43:9b:50:c1:22:10:eb:6b:8c:07:15:
f8:92:f0:ae:2d:11:ff:ef:b5:ae:ba:88:eb:d8:96:55:b2:a0:
f0:92:20:b2:29:97:de:b2:02:80:11:1a:87:25:eb:32:75:80:
29:e7:68:cf:66:90:7f:38:c4:14:b3:13:b5:a2:95:a6:ef:13:
bd:16:e7:0a:79:56:61:54:b0:37:38:cc:5b:eb:7a:f8:30:a8:
c3:44:83:15:7f:c0:07:38:92:a2:86:18:a9:83:fb:4a:4a:0c:
d0:8c:4c:d8:0c:8d:87:bd:9a:d1:0d:a2:37:89:f3:5a:b4:e0:
77:79:9a:bf:04:82:78:8d:79:a7:9d:11:a5:3a:36:c7:7c:e6:
dd:99:ab:87:21:41:97:7d:75:4e:ab:f6:13:0b:ad:ba:fe:be:
86:ff:8d:5d:1b:d1:1c:03:ef:ff:c9:b7:bb:42:db:5b:a6:72:
4e:fe:f1:76:36:37:eb:74:3d:d9:e4:75:4b:1f:c0:34:e4:bf:
5d:80:d9:5e:1a:42:aa:be:60:9f:41:c8:33:2f:f7:0a:52:ce:
90:5b:42:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0q4KmRorbgaTdny4vYuvVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZTA3NTU2YzE5MTg2N2FkZDkwMTAxNTgwZWNmNWQ1Yjc0
Mjk2NzEwHhcNMjYwMzI2MTYwMDU5WhcNMjYwMzI3MTYwMDU5WjAzMTEwLwYDVQQD
EyhhMWMyNzcwZDU5YjZlOTBjZjk3ZTBkMzdhYWY5ZWE1ZTA3ZTY1NmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34pqF03jkVXJWtDhlXIh+jHS0Xxj
vz9u6HfB+bMY4E3cBMnWgP0cOy+kGMEp3KMXGwDsp9nhyrJRvmxK/WCytLbdfAZb
Lemh2GlaATC852yOxPPywxIAZ32T80kQxFnBgRKPbIyVVGWaq5WGP4v9F/p8jlug
P72lx69svdY3iOUwOeapmqqcGX43sC0CdFpfNPQXh5xpwEyL3KrW9HUoNLu+KqQM
pTr6flIkPBp2vbz1lL9nQKr7mgjQLzvybHjoSov1Dwuynmc45IVHjqGKHJbE/0rY
voSsNnVKu18z5ajkxxfaRFkp+MkR36RgN5veBPKh3VxTWS97I5XpPYv8yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHCdw1ZtukM+X4NN6r56l4H5la4MB8GA1UdIwQY
MBaAFBHgdVbBkYZ63ZAQFYDs9dW3QpZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZTI5MjktNjc0ZC00OTQ2LTgwNTMt
YTQzNjhhMWI1ZjYzLzEvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hZTI5MjktNjc0ZC00OTQ2LTgwNTMtYTQzNjhhMWI1ZjYz
LzEvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqoTwXZMe
7KGYkikTSVeIztS/JLax7ABWq/xiKaHWwjhkIESdUyqOkdseWkObUMEiEOtrjAcV
+JLwri0R/++1rrqI69iWVbKg8JIgsimX3rICgBEahyXrMnWAKedoz2aQfzjEFLMT
taKVpu8TvRbnCnlWYVSwNzjMW+t6+DCow0SDFX/ABziSooYYqYP7SkoM0IxM2AyN
h72a0Q2iN4nzWrTgd3mavwSCeI15p50RpTo2x3zm3ZmrhyFBl311Tqv2Ewutuv6+
hv+NXRvRHAPv/8m3u0LbW6ZyTv7xdjY363Q92eR1Sx/ANOS/XYDZXhpCqr5gn0HI
My/3ClLOkFtCJA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:47:58 2026 by rpki-client