Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
File: EeB1VsGRhnrdkBAVgOz11bdClnE.mft (raw, json)
Hash identifier: gxGT0AI4BCHiUAiJRc4Q11NerFTwoDJOTlrYnYdfnPU=
Subject key identifier: 1F:C8:47:DB:89:F8:06:1C:A7:26:C7:89:B7:DF:57:04:31:5A:23:F4
Authority key identifier: 11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
Certificate issuer: /CN=11e07556c191867add90101580ecf5d5b7429671
Certificate serial: 019DB3FEB27955A2EAD7DFAA1F4009B200BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
Manifest number: 13D9
Signing time: Wed 22 Apr 2026 07:01:46 +0000
Manifest this update: Wed 22 Apr 2026 07:01:46 +0000
Manifest next update: Thu 23 Apr 2026 07:01:46 +0000
Files and hashes: 1: EeB1VsGRhnrdkBAVgOz11bdClnE.crl (hash: JNQa8sH6N1uMCP/Rb+2kC8YN3I9JzCRmTvRAsP+FX/M=)
2: tfF3LfL45Exv3rDezYwR5oBy1co.roa (hash: ZlVBaULfD37bwKisEYDbxu1CeranIZs3mSsmaYtd9JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:fe:b2:79:55:a2:ea:d7:df:aa:1f:40:09:b2:00:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e07556c191867add90101580ecf5d5b7429671
Validity
Not Before: Apr 22 07:01:46 2026 GMT
Not After : Apr 23 07:01:46 2026 GMT
Subject: CN=1fc847db89f8061ca726c789b7df5704315a23f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b1:3e:22:07:17:46:64:82:7e:47:a4:00:f3:
5d:73:bc:f7:2f:bd:9b:8a:30:6d:4b:6f:c7:c3:c8:
3d:84:1b:f1:f0:00:fe:37:dc:17:c7:41:55:dd:1c:
3e:0c:ad:c0:9e:be:0e:e4:e9:c6:9d:9f:fc:93:35:
b2:c1:f7:dc:bc:74:41:65:3d:46:20:e2:23:e9:aa:
5c:1d:b1:e5:2e:20:d1:c6:e0:db:b7:19:69:df:f4:
c5:b9:de:6c:d0:c2:5b:fe:33:b5:b3:93:b8:4a:71:
8e:4e:f0:e1:70:05:3d:b9:14:51:9b:5c:c8:eb:93:
9f:e9:15:75:d3:34:6f:b7:1c:0e:8e:4b:17:1e:81:
4e:d1:7f:6a:9b:d5:60:8f:0f:85:09:0d:71:96:1e:
d2:7b:73:70:16:04:19:08:a1:ca:ec:46:01:f2:08:
a7:12:a6:06:cb:81:eb:b3:ae:5f:d9:31:40:8f:86:
a8:a4:85:1d:18:d8:ef:01:2e:55:65:bd:e0:85:99:
17:ea:81:ee:f4:10:33:44:84:df:ed:d8:23:e4:df:
a2:ae:c7:9a:5b:b7:bd:fb:86:a1:fd:ae:69:53:38:
28:d5:3b:4b:e8:a8:29:c8:73:12:63:f5:fd:65:75:
cb:29:d0:61:4b:d7:fa:18:45:63:4a:5c:50:85:d5:
a1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C8:47:DB:89:F8:06:1C:A7:26:C7:89:B7:DF:57:04:31:5A:23:F4
X509v3 Authority Key Identifier:
keyid:11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:84:0b:b8:a3:92:d8:9a:b1:d0:95:e3:0a:86:a0:1f:15:06:
62:12:5d:1b:3b:79:c3:b4:9b:f2:a1:05:fc:8b:a6:a0:37:c0:
51:a5:06:bf:5e:c3:a9:ad:f9:25:38:02:fc:a3:55:9b:f0:78:
81:46:d7:48:2f:68:c7:b5:9d:f2:2e:75:3a:20:e4:7b:d3:c3:
d7:72:fd:fb:ab:61:62:6c:88:8f:e9:0b:2a:c8:ce:6a:9b:59:
ea:48:51:6a:91:11:74:79:4d:63:b9:be:22:77:ea:7d:e8:c2:
de:dd:6f:cb:7a:71:ea:6e:57:ba:80:9c:e9:b1:6b:33:7e:22:
f6:44:8b:35:08:91:cc:85:1a:ba:a3:56:84:fd:03:b1:24:f5:
fe:a5:7f:94:6f:86:d5:a2:eb:19:57:cd:16:cb:e8:9f:82:3b:
2d:36:1d:d9:86:ff:e7:a4:9a:16:11:b2:4f:7d:25:10:84:75:
82:19:8d:33:e4:fd:50:41:9b:cf:99:66:2b:cf:0b:43:0a:44:
86:3a:fc:24:75:c6:aa:86:4c:27:c7:be:15:85:0f:b2:06:eb:
68:da:d4:a3:10:8f:a2:7a:7a:1c:72:40:eb:77:26:2a:d5:3c:
47:3a:47:cd:36:16:90:f3:01:13:1f:6a:2d:d0:59:a7:ea:c9:
a5:8d:09:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2z/rJ5VaLq19+qH0AJsgC+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZTA3NTU2YzE5MTg2N2FkZDkwMTAxNTgwZWNmNWQ1Yjc0
Mjk2NzEwHhcNMjYwNDIyMDcwMTQ2WhcNMjYwNDIzMDcwMTQ2WjAzMTEwLwYDVQQD
EygxZmM4NDdkYjg5ZjgwNjFjYTcyNmM3ODliN2RmNTcwNDMxNWEyM2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLE+IgcXRmSCfkekAPNdc7z3L72b
ijBtS2/Hw8g9hBvx8AD+N9wXx0FV3Rw+DK3Anr4O5OnGnZ/8kzWywffcvHRBZT1G
IOIj6apcHbHlLiDRxuDbtxlp3/TFud5s0MJb/jO1s5O4SnGOTvDhcAU9uRRRm1zI
65Of6RV10zRvtxwOjksXHoFO0X9qm9Vgjw+FCQ1xlh7Se3NwFgQZCKHK7EYB8gin
EqYGy4Hrs65f2TFAj4aopIUdGNjvAS5VZb3ghZkX6oHu9BAzRITf7dgj5N+irsea
W7e9+4ah/a5pUzgo1TtL6KgpyHMSY/X9ZXXLKdBhS9f6GEVjSlxQhdWhewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/IR9uJ+AYcpybHibffVwQxWiP0MB8GA1UdIwQY
MBaAFBHgdVbBkYZ63ZAQFYDs9dW3QpZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZTI5MjktNjc0ZC00OTQ2LTgwNTMt
YTQzNjhhMWI1ZjYzLzEvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hZTI5MjktNjc0ZC00OTQ2LTgwNTMtYTQzNjhhMWI1ZjYz
LzEvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4QLuKOS
2Jqx0JXjCoagHxUGYhJdGzt5w7Sb8qEF/IumoDfAUaUGv17Dqa35JTgC/KNVm/B4
gUbXSC9ox7Wd8i51OiDke9PD13L9+6thYmyIj+kLKsjOaptZ6khRapERdHlNY7m+
InfqfejC3t1vy3px6m5XuoCc6bFrM34i9kSLNQiRzIUauqNWhP0DsST1/qV/lG+G
1aLrGVfNFsvon4I7LTYd2Yb/56SaFhGyT30lEIR1ghmNM+T9UEGbz5lmK88LQwpE
hjr8JHXGqoZMJ8e+FYUPsgbraNrUoxCPonp6HHJA63cmKtU8RzpHzTYWkPMBEx9q
LdBZp+rJpY0JCw==
-----END CERTIFICATE-----
Generated at Wed Apr 22 09:44:30 2026 by rpki-client