Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
File: MEEPXtOG-HkgPLRCil-V_ciZtZE.mft (raw, json)
Hash identifier: eb6oPkSRBB/IpaB09vTo2uhRIDI1Np8M5EQhQhDQOe4=
Subject key identifier: 88:FA:22:A2:5B:80:CC:2B:EB:AE:D5:02:6D:64:BA:D9:E0:6D:EA:26
Authority key identifier: 30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91
Certificate issuer: /CN=30410f5ed386f879203cb4428a5f95fdc899b591
Certificate serial: 019CAD22BEFD8AA538BD74BCD697B1334A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
Manifest number: 0804
Signing time: Mon 02 Mar 2026 06:01:01 +0000
Manifest this update: Mon 02 Mar 2026 06:01:01 +0000
Manifest next update: Tue 03 Mar 2026 06:01:01 +0000
Files and hashes: 1: MEEPXtOG-HkgPLRCil-V_ciZtZE.crl (hash: y1hc0gBb5sxDz/J7QJWMj11KcQBpoL3CX/tfHg8NZuU=)
2: l1mG5Z4YPNNQqbRLZc6F0hI51zo.roa (hash: 5esmhQSsR8LEDn5Rcs9n39XazWhSwX6C6n46FZAELtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:be:fd:8a:a5:38:bd:74:bc:d6:97:b1:33:4a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30410f5ed386f879203cb4428a5f95fdc899b591
Validity
Not Before: Mar 2 06:01:01 2026 GMT
Not After : Mar 3 06:01:01 2026 GMT
Subject: CN=88fa22a25b80cc2bebaed5026d64bad9e06dea26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:ad:3b:d9:cf:8f:73:b7:65:cb:d9:18:a3:
8d:b1:b1:63:d5:21:7b:fd:90:47:86:d9:94:4d:fe:
dc:c3:63:cc:01:5a:28:20:4d:10:dc:11:47:fb:c8:
6a:f6:58:ff:71:70:27:1b:0b:b0:c1:f5:7a:ab:7a:
89:aa:00:1f:d6:88:3e:9b:fd:9f:e1:ad:8b:ed:28:
f9:d0:b6:ab:9a:16:8d:4d:25:de:88:77:73:56:77:
4a:34:e6:a4:89:e2:94:15:b9:52:6a:64:85:4a:d9:
e8:8d:5c:c0:0b:00:a1:9d:df:04:ac:b5:4f:d5:02:
34:b3:f3:e5:9d:41:3a:bd:22:c6:af:74:18:90:d6:
44:b0:f3:fb:ea:3b:d2:21:74:5d:82:27:33:a0:43:
18:cd:af:d4:d3:48:cc:06:2e:2d:49:67:22:a0:d3:
4a:8a:e5:59:78:fb:a9:93:ab:91:ec:9a:15:63:13:
db:1d:e5:9e:e5:9f:32:02:9b:18:fe:c5:38:51:8a:
96:8e:7f:2f:0f:e4:18:f8:20:4c:06:21:34:40:df:
57:f4:36:e0:df:cf:0a:9d:5c:d1:ee:ae:ee:39:29:
d9:9f:9f:a6:ba:9e:ee:e7:26:9e:d9:94:d7:c9:db:
a8:1c:41:27:bd:17:e8:95:46:9a:1b:44:cb:21:4e:
56:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FA:22:A2:5B:80:CC:2B:EB:AE:D5:02:6D:64:BA:D9:E0:6D:EA:26
X509v3 Authority Key Identifier:
keyid:30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b9:ad:ae:05:09:18:1e:cd:7c:84:e9:67:26:bf:1a:70:20:
86:04:e0:a6:0a:06:6f:41:87:91:9a:f8:90:2e:9f:66:cd:e0:
d6:c7:76:d7:da:fa:5f:a9:16:f9:6b:1e:e7:c2:a5:17:a2:16:
6a:e3:7a:c1:94:78:2c:46:30:bc:d0:63:53:7d:80:5c:f4:73:
34:64:31:9f:95:73:c3:15:ea:d0:77:c0:4a:f4:87:14:90:7a:
0c:37:9e:c4:fb:a3:bf:e6:66:da:cb:f9:14:fb:92:e0:aa:a2:
aa:88:1f:18:94:17:a4:bb:9f:a8:c1:3f:4e:f8:db:02:c5:1b:
6c:12:a5:ab:30:fd:f8:de:be:c9:2a:77:d6:09:1e:64:62:2d:
71:7a:4f:ec:ed:60:a3:78:0a:5f:17:59:ea:a1:fc:36:d3:40:
f7:06:fa:dd:46:2e:f3:cc:46:dc:9c:e6:4e:66:79:89:a4:b1:
2c:04:8d:b6:15:7f:6b:c4:29:cc:c6:ae:c9:18:5a:8a:28:94:
a5:d1:d1:19:85:c6:a2:6f:17:d1:e8:84:b8:63:82:49:f5:38:
0a:f1:77:20:9f:69:77:f3:3c:35:49:60:88:75:03:ce:d6:c5:
84:ff:e5:cb:ff:76:47:15:ab:05:a0:6b:ed:93:e1:e0:6f:69:
00:a0:2f:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIr79iqU4vXS81pexM0ofMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNDEwZjVlZDM4NmY4NzkyMDNjYjQ0MjhhNWY5NWZkYzg5
OWI1OTEwHhcNMjYwMzAyMDYwMTAxWhcNMjYwMzAzMDYwMTAxWjAzMTEwLwYDVQQD
Eyg4OGZhMjJhMjViODBjYzJiZWJhZWQ1MDI2ZDY0YmFkOWUwNmRlYTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIWtO9nPj3O3ZcvZGKONsbFj1SF7
/ZBHhtmUTf7cw2PMAVooIE0Q3BFH+8hq9lj/cXAnGwuwwfV6q3qJqgAf1og+m/2f
4a2L7Sj50LarmhaNTSXeiHdzVndKNOakieKUFblSamSFStnojVzACwChnd8ErLVP
1QI0s/PlnUE6vSLGr3QYkNZEsPP76jvSIXRdgiczoEMYza/U00jMBi4tSWcioNNK
iuVZePupk6uR7JoVYxPbHeWe5Z8yApsY/sU4UYqWjn8vD+QY+CBMBiE0QN9X9Dbg
388KnVzR7q7uOSnZn5+mup7u5yae2ZTXyduoHEEnvRfolUaaG0TLIU5WjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIj6IqJbgMwr667VAm1kutngbeomMB8GA1UdIwQY
MBaAFDBBD17Thvh5IDy0Qopflf3ImbWRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUVFUFh0T0ctSGtnUExSQ2lsLVZfY2ladFpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xMWNlYjAtMDllMi00NzdmLTg3OWQt
ODI2NzM2MGZmOWVkLzEvTUVFUFh0T0ctSGtnUExSQ2lsLVZfY2ladFpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xMWNlYjAtMDllMi00NzdmLTg3OWQtODI2NzM2MGZmOWVk
LzEvTUVFUFh0T0ctSGtnUExSQ2lsLVZfY2ladFpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7mtrgUJ
GB7NfITpZya/GnAghgTgpgoGb0GHkZr4kC6fZs3g1sd219r6X6kW+Wse58KlF6IW
auN6wZR4LEYwvNBjU32AXPRzNGQxn5VzwxXq0HfASvSHFJB6DDeexPujv+Zm2sv5
FPuS4KqiqogfGJQXpLufqME/TvjbAsUbbBKlqzD9+N6+ySp31gkeZGItcXpP7O1g
o3gKXxdZ6qH8NtNA9wb63UYu88xG3JzmTmZ5iaSxLASNthV/a8QpzMauyRhaiiiU
pdHRGYXGom8X0eiEuGOCSfU4CvF3IJ9pd/M8NUlgiHUDztbFhP/ly/92RxWrBaBr
7ZPh4G9pAKAvmQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:58:23 2026 by rpki-client