Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
File: EeWvTHKGkglTmxGUWXsD-jpKVUo.mft (raw, json)
Hash identifier: w3hN7X+p7No1955WNmqa0ErUtLu+0p0ocWigoFSKRuA=
Subject key identifier: 56:0E:F8:15:BE:95:74:36:07:FB:99:33:69:D8:EC:A2:71:0A:5D:D0
Authority key identifier: 11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
Certificate issuer: /CN=11e5af4c72869209539b1194597b03fa3a4a554a
Certificate serial: 019DED7FEECCCC7D13246D4F45B6D1B140BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
Manifest number: 11EC
Signing time: Sun 03 May 2026 11:01:17 +0000
Manifest this update: Sun 03 May 2026 11:01:17 +0000
Manifest next update: Mon 04 May 2026 11:01:17 +0000
Files and hashes: 1: EeWvTHKGkglTmxGUWXsD-jpKVUo.crl (hash: 4QTU9laahyfMTp/o9oyEBeo2TfKKeFsEZ7zmFuP3N0A=)
2: WF-zTcv0SSwFqssAuBLS2p_bL9I.roa (hash: l4mNR1FXgT0HOl3cKSL3WOvdMxH31IZ3vfxu50tZ0OU=)
3: avu8Q3Omr--tF4tpRu9jq83ydCc.roa (hash: QpRUqaU18HNyF42VH945x7YyAx6ix+RRAhRlCjxO5Gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:7f:ee:cc:cc:7d:13:24:6d:4f:45:b6:d1:b1:40:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e5af4c72869209539b1194597b03fa3a4a554a
Validity
Not Before: May 3 11:01:17 2026 GMT
Not After : May 4 11:01:17 2026 GMT
Subject: CN=560ef815be95743607fb993369d8eca2710a5dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:c7:b6:8a:3a:b2:21:d9:ec:f8:25:48:1a:
fb:43:e1:93:2c:a4:7e:47:77:c9:f4:3f:06:eb:0f:
b4:51:e1:44:19:b3:83:0a:09:d2:88:99:66:49:c7:
f0:af:cc:4f:8f:34:65:07:0e:2a:83:08:4f:3b:7d:
f6:a4:31:01:b1:67:72:db:bd:12:14:d8:92:7d:b5:
05:70:ea:e2:04:bd:a9:91:9e:12:01:7f:30:0b:c2:
28:f9:dd:cf:70:9c:26:d3:ac:bf:e0:f1:f8:04:59:
0a:f6:67:25:f9:6e:b1:59:42:b6:43:9a:bf:eb:94:
de:27:1f:7f:c3:ca:ff:54:d7:21:1a:a0:e4:d3:00:
62:42:c5:2b:60:3b:98:71:75:19:df:92:63:a9:39:
4d:82:73:26:9a:38:06:1b:37:77:b2:f0:fd:e1:c5:
fb:e6:7c:35:3f:b6:34:b2:e4:ef:7d:b2:00:dc:7e:
12:41:8e:41:a2:00:36:98:6f:f1:ef:38:63:c0:e3:
67:34:67:81:d0:9d:4f:34:1b:cb:14:61:21:2f:a3:
95:2e:67:8e:51:6f:18:57:33:7a:3c:fa:d3:49:73:
1a:1f:91:08:63:1f:b4:d9:59:e7:b2:e6:02:c4:26:
be:bc:50:5a:93:80:18:f6:93:69:0a:57:c1:ab:d3:
a5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0E:F8:15:BE:95:74:36:07:FB:99:33:69:D8:EC:A2:71:0A:5D:D0
X509v3 Authority Key Identifier:
keyid:11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ed:61:b1:b6:76:21:a7:e5:df:db:88:93:fa:17:5a:7f:f2:
c5:9b:98:93:66:ca:25:85:9e:a2:80:28:2d:58:ab:7d:42:83:
63:95:90:8c:a0:e7:40:a8:cf:09:50:8f:d6:b1:78:43:39:f6:
55:d2:2f:53:a0:b0:49:8c:f0:67:6d:e4:13:81:97:50:ce:13:
6d:cd:f0:3a:58:1f:78:c0:45:fc:7a:8c:6c:97:f3:3e:99:9b:
db:57:0b:d9:a5:36:9e:aa:1a:f7:52:00:12:b2:27:5d:00:9c:
25:f1:57:6e:82:37:4c:3e:65:3a:7a:73:5c:65:ff:a6:f0:b9:
90:c1:05:d7:64:92:08:f2:95:bb:fe:a2:80:77:ea:dd:b1:e7:
15:5b:6a:91:2c:60:c1:67:6c:87:de:ae:20:f8:bd:c0:f4:f0:
c6:c0:1d:1a:db:b1:4e:0a:48:ae:9e:d6:b0:9b:71:d9:75:0a:
5e:62:05:b1:d7:7d:8f:15:ca:36:9e:50:0a:64:b6:b3:a7:bb:
bd:e2:dc:92:ce:d8:cf:d6:50:ee:fb:69:96:29:c3:f6:8b:67:
b2:e0:46:3b:a3:f0:59:a2:4b:3a:06:44:d8:95:4f:0d:ab:7d:
6a:98:33:2e:12:57:53:a3:dc:fb:62:af:b6:4b:ad:36:42:6d:
77:f5:8d:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3tf+7MzH0TJG1PRbbRsUC+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZTVhZjRjNzI4NjkyMDk1MzliMTE5NDU5N2IwM2ZhM2E0
YTU1NGEwHhcNMjYwNTAzMTEwMTE3WhcNMjYwNTA0MTEwMTE3WjAzMTEwLwYDVQQD
Eyg1NjBlZjgxNWJlOTU3NDM2MDdmYjk5MzM2OWQ4ZWNhMjcxMGE1ZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2XHtoo6siHZ7PglSBr7Q+GTLKR+
R3fJ9D8G6w+0UeFEGbODCgnSiJlmScfwr8xPjzRlBw4qgwhPO332pDEBsWdy270S
FNiSfbUFcOriBL2pkZ4SAX8wC8Io+d3PcJwm06y/4PH4BFkK9mcl+W6xWUK2Q5q/
65TeJx9/w8r/VNchGqDk0wBiQsUrYDuYcXUZ35JjqTlNgnMmmjgGGzd3svD94cX7
5nw1P7Y0suTvfbIA3H4SQY5BogA2mG/x7zhjwONnNGeB0J1PNBvLFGEhL6OVLmeO
UW8YVzN6PPrTSXMaH5EIYx+02VnnsuYCxCa+vFBak4AY9pNpClfBq9OlJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYO+BW+lXQ2B/uZM2nY7KJxCl3QMB8GA1UdIwQY
MBaAFBHlr0xyhpIJU5sRlFl7A/o6SlVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWVXdlRIS0drZ2xUbXhHVVdYc0QtanBLVlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wNGQ3MDgtZmVlYS00ZTk2LTk0YTEt
ZjQyOGI5OTU0YWIyLzEvRWVXdlRIS0drZ2xUbXhHVVdYc0QtanBLVlVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8wNGQ3MDgtZmVlYS00ZTk2LTk0YTEtZjQyOGI5OTU0YWIy
LzEvRWVXdlRIS0drZ2xUbXhHVVdYc0QtanBLVlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+1hsbZ2
Iafl39uIk/oXWn/yxZuYk2bKJYWeooAoLVirfUKDY5WQjKDnQKjPCVCP1rF4Qzn2
VdIvU6CwSYzwZ23kE4GXUM4Tbc3wOlgfeMBF/HqMbJfzPpmb21cL2aU2nqoa91IA
ErInXQCcJfFXboI3TD5lOnpzXGX/pvC5kMEF12SSCPKVu/6igHfq3bHnFVtqkSxg
wWdsh96uIPi9wPTwxsAdGtuxTgpIrp7WsJtx2XUKXmIFsdd9jxXKNp5QCmS2s6e7
veLcks7Yz9ZQ7vtplinD9otnsuBGO6PwWaJLOgZE2JVPDat9apgzLhJXU6Pc+2Kv
tkutNkJtd/WN5g==
-----END CERTIFICATE-----
Generated at Sun May 3 17:07:57 2026 by rpki-client