Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
File: EeWvTHKGkglTmxGUWXsD-jpKVUo.mft (raw, json)
Hash identifier: xrQPVOsUdlXDTFPSU379LdbPDn/nyhOgokeyBmSylGY=
Subject key identifier: 54:BC:A3:8C:EC:D7:49:C4:26:AF:47:6B:ED:F2:E8:43:AD:68:B2:85
Authority key identifier: 11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
Certificate issuer: /CN=11e5af4c72869209539b1194597b03fa3a4a554a
Certificate serial: 01A0CB59853FE17ED4FA0521D395396A92B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
Manifest number: 1368
Signing time: Tue 22 Sep 2026 23:00:36 +0000
Manifest this update: Tue 22 Sep 2026 23:00:36 +0000
Manifest next update: Wed 23 Sep 2026 23:00:36 +0000
Files and hashes: 1: EeWvTHKGkglTmxGUWXsD-jpKVUo.crl (hash: UPcSNQ8li3Sv+SWXIHf3bM80ebPC/w4C4yXmWwLUW6E=)
2: WF-zTcv0SSwFqssAuBLS2p_bL9I.roa (hash: l4mNR1FXgT0HOl3cKSL3WOvdMxH31IZ3vfxu50tZ0OU=)
3: avu8Q3Omr--tF4tpRu9jq83ydCc.roa (hash: QpRUqaU18HNyF42VH945x7YyAx6ix+RRAhRlCjxO5Gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:85:3f:e1:7e:d4:fa:05:21:d3:95:39:6a:92:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e5af4c72869209539b1194597b03fa3a4a554a
Validity
Not Before: Sep 22 23:00:36 2026 GMT
Not After : Sep 23 23:00:36 2026 GMT
Subject: CN=54bca38cecd749c426af476bedf2e843ad68b285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:da:c9:56:d9:28:31:2a:a3:10:bd:d6:f2:de:
33:68:cf:c2:d8:9b:27:f1:4f:44:12:fc:49:54:24:
be:3c:19:5b:50:3c:e6:20:4e:ac:93:a0:79:41:f2:
9d:de:51:a4:27:35:d0:bb:51:9d:b5:cb:35:23:35:
9b:c5:af:46:46:f1:8e:74:3a:8d:ce:37:d4:48:cd:
11:8c:e1:58:79:37:36:de:87:f0:34:10:46:f3:76:
fd:12:c7:8d:4b:54:05:4b:09:df:49:bd:5c:8a:0b:
6d:88:a7:6d:6a:bc:80:b3:34:37:53:e2:3d:16:54:
40:75:43:19:e0:9d:eb:34:37:c4:b8:9d:01:6c:08:
1d:e7:94:7b:0f:97:87:24:08:14:bb:5a:19:d1:e2:
43:39:22:27:ae:ad:e3:52:d6:14:fc:58:f2:0f:ec:
24:b5:4e:2c:91:3b:66:d5:5d:31:9d:cf:93:8e:7f:
5e:1d:de:9c:93:10:d3:28:8d:5d:2a:36:af:db:82:
8a:e6:50:96:03:6d:d4:ff:5b:ea:45:c6:a9:76:8e:
d8:ed:fb:9f:77:5a:f4:86:d6:82:2b:4d:fe:c4:f4:
cf:ba:5d:0a:f2:63:a6:aa:4c:ac:7e:f2:bd:07:79:
f9:0c:52:a7:c7:0f:f4:74:0b:83:16:7b:a8:d6:02:
30:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BC:A3:8C:EC:D7:49:C4:26:AF:47:6B:ED:F2:E8:43:AD:68:B2:85
X509v3 Authority Key Identifier:
keyid:11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:cc:81:3c:5b:59:74:8f:78:2a:38:89:e5:14:bf:16:f3:86:
f0:34:ab:88:e2:21:cf:ad:ac:19:dd:d4:ca:87:bb:86:10:42:
61:90:9d:29:c2:ca:c8:b8:e3:dc:00:0a:46:92:9b:0b:cd:2e:
70:25:6c:2d:fe:ba:e3:de:52:9c:1a:5d:65:42:93:95:e1:93:
42:a6:34:e3:05:43:ca:aa:2c:9a:da:1f:2e:07:7c:e2:dc:79:
d7:ea:75:60:d8:b2:c6:99:66:55:0c:7d:f9:1b:c9:67:3e:df:
e2:e1:7d:3e:4a:48:92:81:82:34:63:f7:fc:e8:7f:4f:4f:ec:
48:b5:b3:44:ba:94:69:3b:9c:9b:ea:ac:29:ef:5f:8a:c1:c8:
ab:35:16:1f:2e:1c:fc:59:74:c7:49:07:1b:5a:6f:56:82:02:
a0:3f:20:df:63:49:33:d9:43:da:c1:88:0b:5e:dd:ae:d9:49:
af:70:93:50:70:25:9b:45:57:17:05:24:c3:7c:8c:c0:ac:66:
8c:5d:5a:d7:6c:42:9a:b4:21:90:2d:63:f1:31:cc:90:fa:fd:
ec:fd:41:99:ed:cc:92:3f:cd:06:e4:46:f8:33:91:02:b2:ec:
85:94:43:86:dc:5d:33:18:8e:06:fe:af:56:05:c4:66:e0:7c:
75:df:96:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:19:32 2026 by rpki-client