Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
File: EeB1VsGRhnrdkBAVgOz11bdClnE.mft (raw, json)
Hash identifier: wlZcwlOKO4Jl3BWAlADV2mG9b5SPBQkCJSDqMSra6ow=
Subject key identifier: 48:9B:52:DF:BC:85:DB:EE:10:A3:61:89:4C:DA:57:3A:E5:83:CE:6A
Authority key identifier: 11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
Certificate issuer: /CN=11e07556c191867add90101580ecf5d5b7429671
Certificate serial: 019CAB6BEFC5A0DB70D6D5149754EF713B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
Manifest number: 1350
Signing time: Sun 01 Mar 2026 22:01:43 +0000
Manifest this update: Sun 01 Mar 2026 22:01:43 +0000
Manifest next update: Mon 02 Mar 2026 22:01:43 +0000
Files and hashes: 1: EeB1VsGRhnrdkBAVgOz11bdClnE.crl (hash: qR+96Z1czOkpBwrKQ/h8DDo8JnkBEE/c2UQN7XW0Whg=)
2: tfF3LfL45Exv3rDezYwR5oBy1co.roa (hash: ZlVBaULfD37bwKisEYDbxu1CeranIZs3mSsmaYtd9JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ef:c5:a0:db:70:d6:d5:14:97:54:ef:71:3b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11e07556c191867add90101580ecf5d5b7429671
Validity
Not Before: Mar 1 22:01:43 2026 GMT
Not After : Mar 2 22:01:43 2026 GMT
Subject: CN=489b52dfbc85dbee10a361894cda573ae583ce6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bd:76:05:39:5b:fe:a5:9a:4e:bf:f7:fb:5e:
b7:68:64:0e:65:0b:bb:93:89:9b:6c:6f:b2:30:22:
21:5d:6d:64:36:99:e2:9e:61:4b:04:dc:10:cf:1f:
ba:0f:d7:83:c7:d4:24:82:fb:10:56:0d:b7:75:7b:
b0:33:7a:d4:24:20:76:e1:0b:d2:ee:de:cb:b1:3f:
ad:27:5d:f4:f7:63:a5:53:71:e8:9a:cb:aa:f1:33:
73:62:5e:77:1b:6a:e6:b0:c3:dc:0b:1c:4f:46:b9:
51:26:0e:8f:1f:35:41:5a:c0:a7:72:9b:5a:ec:67:
01:ae:ba:87:27:ed:fa:4f:26:5a:da:93:8d:6f:1a:
56:b9:5f:f8:12:89:63:e4:2d:4c:7b:37:16:a9:5a:
4c:94:1a:0a:8b:bc:54:54:aa:b4:c0:a6:a8:72:10:
9b:72:af:d8:4b:32:ab:f4:af:1c:3a:4e:00:1b:35:
43:ce:fa:f9:94:13:d6:59:a6:e7:84:69:a1:be:2b:
8e:fc:e5:32:50:34:fb:7f:4c:bc:4a:d9:ec:3c:13:
e5:8b:04:67:48:ba:ac:8d:03:77:69:a7:d8:68:be:
ce:d2:4d:6f:ec:df:9b:0b:b5:45:6a:e9:e9:ae:e9:
4e:44:c2:e5:d5:c7:ac:6a:25:65:0e:98:05:c4:61:
39:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9B:52:DF:BC:85:DB:EE:10:A3:61:89:4C:DA:57:3A:E5:83:CE:6A
X509v3 Authority Key Identifier:
keyid:11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:10:99:2b:8c:91:38:0a:15:4e:44:43:fc:90:6c:73:42:45:
14:5b:81:18:fc:de:0a:e3:b6:16:9b:12:ea:bf:22:50:26:b1:
c4:75:0f:76:e5:f0:0a:c9:64:12:ab:06:e0:87:6e:9e:e4:40:
18:28:66:9f:33:fe:10:97:5c:35:89:40:87:1c:b1:bf:a3:2e:
39:d7:21:0a:6b:ce:f5:a5:5c:7c:f8:ad:57:85:d1:56:7b:58:
ea:cb:da:b8:2c:6e:0e:9c:09:06:9e:61:08:9c:c1:d2:22:e3:
81:58:b9:5d:d2:eb:db:43:43:eb:e7:69:21:ed:cb:8e:ec:4d:
1c:b7:7d:c9:d9:f3:44:cf:da:ca:48:ff:71:b4:db:a7:e1:3f:
07:e1:30:ba:50:1c:c1:a9:8d:60:d4:fe:78:ba:41:fb:2b:93:
6a:d8:96:fd:be:52:2d:d2:9e:8b:e9:ad:5f:95:d4:11:9f:fb:
4c:93:9c:ee:69:eb:32:bf:9c:67:5b:c9:2a:f9:11:be:11:6e:
f1:88:de:7c:52:93:b4:b8:3b:20:8e:bb:25:39:d3:b0:f7:2e:
04:d8:b8:0c:9c:35:86:48:9e:14:d2:94:86:64:0d:c8:3f:cb:
0d:12:6f:d7:2f:2f:2f:89:31:9d:4e:11:57:d2:aa:6c:1a:51:
29:c7:ad:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:52 2026 by rpki-client