Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
File: EeWvTHKGkglTmxGUWXsD-jpKVUo.mft (raw, json)
Hash identifier: 2TVC5g6tqfZ9aN/JGYK16S0IFXASn9x9VkIniykNlEU=
Subject key identifier: 04:B9:4F:14:F6:D3:2B:76:EB:67:6F:60:23:79:F9:0B:59:A3:44:E8
Authority key identifier: 11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
Certificate issuer: /CN=11e5af4c72869209539b1194597b03fa3a4a554a
Certificate serial: 019D05C12E2DCD83FDEC3CFF3667C20F9BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
Manifest number: 1174
Signing time: Thu 19 Mar 2026 11:00:39 +0000
Manifest this update: Thu 19 Mar 2026 11:00:39 +0000
Manifest next update: Fri 20 Mar 2026 11:00:39 +0000
Files and hashes: 1: EeWvTHKGkglTmxGUWXsD-jpKVUo.crl (hash: HEnNH4ZgLZtIWm8Scq/eHIPYt/C8WLw5oK0G6H4CxMs=)
2: WF-zTcv0SSwFqssAuBLS2p_bL9I.roa (hash: l4mNR1FXgT0HOl3cKSL3WOvdMxH31IZ3vfxu50tZ0OU=)
3: avu8Q3Omr--tF4tpRu9jq83ydCc.roa (hash: QpRUqaU18HNyF42VH945x7YyAx6ix+RRAhRlCjxO5Gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:c1:2e:2d:cd:83:fd:ec:3c:ff:36:67:c2:0f:9b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e5af4c72869209539b1194597b03fa3a4a554a
Validity
Not Before: Mar 19 11:00:39 2026 GMT
Not After : Mar 20 11:00:39 2026 GMT
Subject: CN=04b94f14f6d32b76eb676f602379f90b59a344e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4d:1b:37:40:0d:4d:49:d9:e4:3b:78:60:e5:
7c:e1:fc:36:27:a6:56:ab:bd:04:92:50:de:a8:fd:
83:17:19:5f:38:c4:0c:1e:61:5d:af:59:11:10:9d:
83:de:94:c5:bd:75:c6:2e:08:92:db:b5:e9:4d:1d:
a2:08:f0:bc:bc:e1:03:f2:99:8d:4d:54:49:77:9c:
dd:a7:fd:87:be:58:99:75:db:4f:72:be:78:7b:19:
ed:03:28:ec:69:db:fc:26:09:d2:53:ee:b3:48:d4:
c7:15:37:80:6b:db:c7:aa:0d:ca:aa:f7:95:81:d0:
a2:7b:72:3f:c1:5a:9f:44:84:c8:bd:9c:f1:dd:85:
ec:b9:a4:02:46:21:bb:8b:03:66:4e:ac:e6:07:37:
a2:cd:4c:13:3c:24:04:37:2f:97:1d:66:42:85:68:
30:10:20:8b:b7:c0:40:63:66:96:01:47:d7:ed:54:
64:6e:4f:f6:8b:57:93:b5:dc:3f:2c:02:4d:24:fc:
6b:0e:56:35:94:13:65:7a:67:14:ce:5d:d3:fe:d0:
8d:dc:e1:ad:ac:29:b8:5b:09:62:f0:a0:91:c4:72:
c4:5a:ca:89:bd:6a:ca:b4:76:30:74:36:7d:71:4c:
37:15:08:fd:58:fe:8e:3d:35:13:c0:85:25:4a:de:
3a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B9:4F:14:F6:D3:2B:76:EB:67:6F:60:23:79:F9:0B:59:A3:44:E8
X509v3 Authority Key Identifier:
keyid:11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ba:dd:99:30:23:02:3c:5a:88:40:25:05:67:51:48:fb:63:
61:b8:41:20:ff:0b:9d:6e:e4:28:c8:63:4f:68:f9:7f:2f:05:
fc:b6:89:0e:30:1c:a7:24:e3:af:3d:52:38:ac:23:e0:4c:d1:
e9:70:0f:a6:af:5b:84:5a:7b:bc:1a:6f:6f:75:b0:9b:c9:e2:
c3:1f:12:6e:3c:ce:fe:e2:3e:37:67:5c:14:be:e2:6e:e2:e8:
b2:76:76:bc:c6:cb:b8:15:40:79:98:ff:b0:b9:d4:d8:1c:77:
56:86:89:17:44:16:5c:ce:cc:73:e5:a5:92:0a:9a:62:23:d9:
48:9e:ec:3d:30:98:12:26:d0:29:3b:9b:27:02:ba:17:8e:7f:
42:0c:0a:34:0a:1e:10:28:8a:c3:1b:c7:ed:94:36:88:3e:06:
42:b1:a8:49:57:7c:94:d2:2b:92:5b:41:f1:4d:a4:fc:af:a0:
c1:13:29:24:0a:03:3e:49:72:32:9a:da:a6:eb:c3:b2:d5:87:
ef:a6:57:a4:d8:87:4a:f1:37:65:34:57:cb:d6:6d:29:91:0f:
a8:b0:df:2c:42:13:ae:38:50:1a:9b:20:7f:fb:63:15:81:4d:
02:35:47:d2:3f:11:53:c2:2a:62:71:37:61:6f:df:6c:43:bb:
37:db:ac:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:03:20 2026 by rpki-client