Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
File: EeB1VsGRhnrdkBAVgOz11bdClnE.mft (raw, json)
Hash identifier: Bt420Ph5RNCxHAhHaztBNH87tsB33372KaRmOYiPT+k=
Subject key identifier: 58:A6:7B:A9:8F:03:F3:56:4C:05:6A:9B:C9:87:BF:F2:10:0A:57:00
Authority key identifier: 11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
Certificate issuer: /CN=11e07556c191867add90101580ecf5d5b7429671
Certificate serial: 019F8568191269A107CC1FA721C1D50B586A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
Manifest number: 14CA
Signing time: Tue 21 Jul 2026 16:00:19 +0000
Manifest this update: Tue 21 Jul 2026 16:00:19 +0000
Manifest next update: Wed 22 Jul 2026 16:00:19 +0000
Files and hashes: 1: EeB1VsGRhnrdkBAVgOz11bdClnE.crl (hash: bBQqwux8vzWj7Wf37pIAqgVgJtbUtf2wv1OfgcdcWjQ=)
2: tfF3LfL45Exv3rDezYwR5oBy1co.roa (hash: ZlVBaULfD37bwKisEYDbxu1CeranIZs3mSsmaYtd9JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:68:19:12:69:a1:07:cc:1f:a7:21:c1:d5:0b:58:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e07556c191867add90101580ecf5d5b7429671
Validity
Not Before: Jul 21 16:00:19 2026 GMT
Not After : Jul 22 16:00:19 2026 GMT
Subject: CN=58a67ba98f03f3564c056a9bc987bff2100a5700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:aa:93:18:12:96:61:25:ee:05:b3:47:11:5c:
f1:f6:bf:a1:68:61:d8:78:9d:c6:33:13:9a:1c:fa:
64:0e:0a:33:8b:5c:63:ef:d8:4a:68:a9:d5:71:49:
60:f2:0e:c9:b8:17:93:0d:dc:78:70:15:3f:ba:2d:
c2:5f:a6:20:77:77:7c:3c:96:be:b8:8e:7c:8c:c6:
64:da:09:9b:e0:9f:ed:de:e9:0f:64:c7:05:19:0f:
35:1d:93:b0:69:b7:90:f7:d8:f7:38:1e:83:0e:fa:
1f:bb:2c:5e:27:dc:13:7c:5b:07:f0:66:9f:cc:85:
34:33:fb:ae:b1:50:12:28:03:0a:82:77:3e:10:ce:
a1:e2:d3:7c:5a:5b:d6:6a:4f:9d:21:d3:f3:dd:20:
da:3d:96:d2:ed:8d:0b:5d:3e:f5:b5:af:b8:d1:aa:
6b:12:32:49:4f:e6:7a:5e:d7:4d:be:6c:ed:ff:a9:
a8:45:6a:58:f0:c0:a3:c5:9c:d5:e4:a7:45:8c:f1:
70:67:df:da:42:cc:47:28:83:f6:56:a8:ff:e1:b2:
88:3c:64:20:53:0e:d2:7e:eb:d0:00:7d:62:50:b3:
a7:2c:6c:5c:da:24:cc:e3:16:d7:c6:f4:f2:e4:43:
f9:83:6f:31:fc:dd:86:10:7a:ac:98:46:4a:5b:b1:
db:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A6:7B:A9:8F:03:F3:56:4C:05:6A:9B:C9:87:BF:F2:10:0A:57:00
X509v3 Authority Key Identifier:
keyid:11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:01:ae:fc:32:49:d7:4a:8a:55:72:34:5f:55:56:5b:f4:ca:
0d:ba:d3:a2:70:9b:0d:26:ab:b6:be:e4:4a:fc:78:45:c8:57:
58:88:5d:83:26:a2:d9:8f:03:de:b5:98:3d:f2:35:e8:ac:a9:
cb:98:9e:94:1d:3f:c2:eb:4e:bc:08:06:aa:75:70:9a:36:d6:
60:fb:f0:9d:94:d7:2b:86:9b:82:01:84:35:a5:0d:3f:44:7a:
18:e1:57:4a:d2:73:50:fe:25:88:08:2b:b4:69:75:f2:a5:9f:
f1:54:40:29:df:48:b8:a1:b6:ec:00:3a:31:72:4d:1c:1c:81:
eb:8c:43:d6:49:c3:15:cc:9b:d2:28:ed:73:f0:49:46:45:40:
c0:24:20:18:d2:a1:a6:cd:c9:97:f7:79:16:ea:4c:00:6f:06:
cc:f7:1c:5b:d1:56:55:ab:ac:3a:02:45:aa:f1:d9:19:75:ca:
06:61:ba:f1:e8:46:6e:36:9c:06:dc:0d:7b:64:4a:49:4d:aa:
93:cb:4a:9d:40:d2:08:b6:fb:56:2a:74:00:04:83:f1:0e:ce:
06:08:40:cb:d9:10:db:5b:4d:1c:ad:06:6c:d7:c3:09:d9:4d:
89:b2:e8:e9:3c:13:3c:8c:89:d3:d8:9d:a2:d0:83:27:23:a8:
a8:81:15:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:40:37 2026 by rpki-client