Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
File: ee4R2MQpe-xUvTBUMMpHct-shHo.mft (raw, json)
Hash identifier: mHdUrBRT/Zlv/V/PviTGmWRlFPs3VDsnaFOegGZ3+QU=
Subject key identifier: D4:65:65:53:BD:7F:5B:70:30:C2:58:E7:1A:67:C6:BB:17:10:B0:A6
Authority key identifier: 79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
Certificate issuer: /CN=79ee11d8c4297bec54bd305430ca4772dfac847a
Certificate serial: 019DCF75100AFC2CC0F24C84962EE3FE4011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
Manifest number: 0CEB
Signing time: Mon 27 Apr 2026 15:00:48 +0000
Manifest this update: Mon 27 Apr 2026 15:00:48 +0000
Manifest next update: Tue 28 Apr 2026 15:00:48 +0000
Files and hashes: 1: ee4R2MQpe-xUvTBUMMpHct-shHo.crl (hash: lOMRCb2TDxUTJv02OI+vEH8ye+ZKZq1VqPM0mKsrBvo=)
2: nkXiZoMMW3zafsjty-VJgGg0Xzc.roa (hash: F3sEH4KSkZNHFk1f1SP7LzRoEDV0ahVUx0fynXewv18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:10:0a:fc:2c:c0:f2:4c:84:96:2e:e3:fe:40:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ee11d8c4297bec54bd305430ca4772dfac847a
Validity
Not Before: Apr 27 15:00:48 2026 GMT
Not After : Apr 28 15:00:48 2026 GMT
Subject: CN=d4656553bd7f5b7030c258e71a67c6bb1710b0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:99:2c:bb:ca:2d:9e:26:3f:2b:17:9c:ec:f5:
42:5d:c4:93:47:77:c3:54:da:94:7c:a4:3b:9f:0e:
b8:dd:b7:8c:2b:ff:03:8b:47:8e:6a:3c:99:57:df:
88:61:0c:04:96:9e:a6:fc:62:66:a2:31:52:44:04:
66:46:c8:7b:32:1f:e9:6d:b1:45:00:f8:00:b7:c9:
72:17:cf:62:5d:d1:3e:e5:72:b1:89:66:7b:6b:82:
44:84:d6:a7:4b:87:b8:17:fe:d8:74:f7:13:11:28:
ee:00:2c:13:fd:16:cd:6d:ba:e2:b9:a2:16:a6:55:
0b:25:4c:68:b5:1f:2d:7e:bf:76:4b:20:51:3f:82:
15:db:b5:c6:93:53:dd:35:54:61:ba:54:bd:96:df:
b0:a7:52:42:32:b6:d6:6f:b4:98:5b:fc:22:f2:a0:
d9:03:11:f9:fe:2f:f6:59:b0:c6:f4:c9:75:d9:eb:
1b:7f:47:95:62:3a:05:7c:c6:c2:3c:30:0f:97:ee:
51:10:3d:56:66:4e:9c:b7:c0:14:83:6c:11:cf:28:
50:99:57:a2:34:78:53:f3:de:0b:5a:04:ca:40:15:
00:49:30:70:13:38:85:a7:22:0e:43:a1:b6:89:26:
15:8b:1c:f2:c5:42:41:8f:d4:1a:4d:e1:38:8b:01:
72:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:65:65:53:BD:7F:5B:70:30:C2:58:E7:1A:67:C6:BB:17:10:B0:A6
X509v3 Authority Key Identifier:
keyid:79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:07:fe:6e:d0:e7:48:e0:01:c8:3f:f8:2a:74:ed:0e:16:fc:
df:29:4a:96:12:eb:b1:64:81:be:71:8d:62:c8:c7:c8:79:a1:
58:4f:3b:75:28:6d:ac:ef:56:ac:30:51:b7:fc:3b:51:f9:ee:
a1:fa:ea:7f:0b:bd:d3:b1:9b:0a:95:5c:c3:e8:13:b2:c0:24:
5c:7e:f6:c9:c3:97:cc:7d:e9:db:58:1d:30:4d:0f:5f:60:18:
5b:cb:a4:99:0a:9e:d0:a2:69:be:9b:fb:f6:35:1e:f2:4d:67:
70:ad:60:1e:88:1d:6d:66:7e:27:c6:0d:21:29:17:67:3a:dc:
68:87:a3:ec:03:09:26:7f:f6:2a:ee:59:b8:5b:15:4f:8f:83:
e2:0e:51:73:f2:d0:37:6d:48:fd:00:26:ce:83:41:94:63:fa:
d4:b2:a9:b0:45:2c:d8:02:08:d0:6d:ed:fa:dc:97:7f:16:6b:
fb:c3:2c:10:d6:bc:24:65:7b:50:d1:36:83:ec:4d:a8:f1:44:
01:ff:f7:1b:4c:59:5d:f9:58:cc:c0:ab:54:e2:98:10:6d:19:
37:0e:18:3d:5a:0e:a0:dd:38:98:30:28:a7:36:48:6f:99:aa:
a8:5f:43:aa:e2:e6:8e:bf:3b:23:12:e7:41:fa:5d:08:eb:db:
51:d0:db:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PdRAK/CzA8kyEli7j/kARMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZWUxMWQ4YzQyOTdiZWM1NGJkMzA1NDMwY2E0NzcyZGZh
Yzg0N2EwHhcNMjYwNDI3MTUwMDQ4WhcNMjYwNDI4MTUwMDQ4WjAzMTEwLwYDVQQD
EyhkNDY1NjU1M2JkN2Y1YjcwMzBjMjU4ZTcxYTY3YzZiYjE3MTBiMGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZksu8otniY/Kxec7PVCXcSTR3fD
VNqUfKQ7nw643beMK/8Di0eOajyZV9+IYQwElp6m/GJmojFSRARmRsh7Mh/pbbFF
APgAt8lyF89iXdE+5XKxiWZ7a4JEhNanS4e4F/7YdPcTESjuACwT/RbNbbriuaIW
plULJUxotR8tfr92SyBRP4IV27XGk1PdNVRhulS9lt+wp1JCMrbWb7SYW/wi8qDZ
AxH5/i/2WbDG9Ml12esbf0eVYjoFfMbCPDAPl+5RED1WZk6ct8AUg2wRzyhQmVei
NHhT894LWgTKQBUASTBwEziFpyIOQ6G2iSYVixzyxUJBj9QaTeE4iwFyqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRlZVO9f1twMMJY5xpnxrsXELCmMB8GA1UdIwQY
MBaAFHnuEdjEKXvsVL0wVDDKR3LfrIR6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWU0UjJNUXBlLXhVdlRCVU1NcEhjdC1zaEhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mODViM2QtNjI0ZS00YjFhLWFkMzMt
MTBhMjA2ZGE3YjZiLzEvZWU0UjJNUXBlLXhVdlRCVU1NcEhjdC1zaEhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mODViM2QtNjI0ZS00YjFhLWFkMzMtMTBhMjA2ZGE3YjZi
LzEvZWU0UjJNUXBlLXhVdlRCVU1NcEhjdC1zaEhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawf+btDn
SOAByD/4KnTtDhb83ylKlhLrsWSBvnGNYsjHyHmhWE87dShtrO9WrDBRt/w7Ufnu
ofrqfwu907GbCpVcw+gTssAkXH72ycOXzH3p21gdME0PX2AYW8ukmQqe0KJpvpv7
9jUe8k1ncK1gHogdbWZ+J8YNISkXZzrcaIej7AMJJn/2Ku5ZuFsVT4+D4g5Rc/LQ
N21I/QAmzoNBlGP61LKpsEUs2AII0G3t+tyXfxZr+8MsENa8JGV7UNE2g+xNqPFE
Af/3G0xZXflYzMCrVOKYEG0ZNw4YPVoOoN04mDAopzZIb5mqqF9DquLmjr87IxLn
QfpdCOvbUdDb9A==
-----END CERTIFICATE-----
Generated at Mon Apr 27 21:04:18 2026 by rpki-client