Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
File: 9efoeENmtHGmpODICA-PENrmalA.mft (raw, json)
Hash identifier: GpdZcF/h6SdSYkU6mRkbn3OOurFKQsDkmRqcR9NHZI8=
Subject key identifier: FD:CD:4B:7A:48:C4:9D:93:82:2A:B8:E4:BA:77:0E:AD:27:5C:3A:5A
Authority key identifier: F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50
Certificate issuer: /CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
Certificate serial: 019FA906BC16FE80D317D14F5684B67A767F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
Manifest number: 11D7
Signing time: Tue 28 Jul 2026 14:00:18 +0000
Manifest this update: Tue 28 Jul 2026 14:00:18 +0000
Manifest next update: Wed 29 Jul 2026 14:00:18 +0000
Files and hashes: 1: 9efoeENmtHGmpODICA-PENrmalA.crl (hash: SUQJPrHCGKe0WwkKnyh4ekheNw7k5fU9nXysWTNMDhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:bc:16:fe:80:d3:17:d1:4f:56:84:b6:7a:76:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5e7e8784366b471a6a4e0c8080f8f10dae66a50
Validity
Not Before: Jul 28 14:00:18 2026 GMT
Not After : Jul 29 14:00:18 2026 GMT
Subject: CN=fdcd4b7a48c49d93822ab8e4ba770ead275c3a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0b:6c:21:b2:57:ef:a5:87:00:72:e9:d6:7f:
c2:e7:72:11:bd:07:27:1b:e2:5f:84:7a:e2:8d:fd:
2b:d4:f2:a5:04:a3:e2:85:5f:6f:6a:bf:b5:44:d1:
a7:37:94:9e:7c:3d:a5:c7:13:95:17:fa:48:24:26:
70:85:6a:ba:e2:8f:2e:67:4b:ed:fe:2f:cd:f2:65:
d4:c6:b1:c5:8c:03:aa:e6:bf:42:ed:53:c6:29:76:
5e:a1:ae:4c:be:fd:7f:f5:a1:ad:fa:d9:fc:52:56:
be:05:21:35:90:52:c6:95:bf:fd:8e:e4:a5:ac:d5:
7c:6e:49:16:62:36:18:23:da:cb:ed:af:3a:b1:63:
8d:30:81:e6:ef:1c:29:5b:fd:f2:38:cd:f1:ed:17:
e0:4e:46:99:a1:cf:59:22:be:f3:e1:6f:56:95:02:
5a:c0:62:b6:2c:9b:1f:34:1c:87:f0:33:48:7d:ed:
b6:32:52:71:54:52:d3:73:f1:ac:c8:4a:39:8e:b5:
64:c7:ae:f8:d5:ea:f7:c7:a8:71:f7:7f:91:a7:f1:
a8:c9:8a:a0:0d:b3:85:71:b1:8d:95:5d:0f:07:96:
d5:04:1a:91:f6:c8:77:96:36:81:23:05:a8:4b:e9:
22:f0:1a:15:d8:3f:61:21:c7:ee:2e:d2:6b:fa:43:
7a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CD:4B:7A:48:C4:9D:93:82:2A:B8:E4:BA:77:0E:AD:27:5C:3A:5A
X509v3 Authority Key Identifier:
keyid:F5:E7:E8:78:43:66:B4:71:A6:A4:E0:C8:08:0F:8F:10:DA:E6:6A:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9efoeENmtHGmpODICA-PENrmalA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e0201f-8d18-48fd-a677-0d270462b7d7/1/9efoeENmtHGmpODICA-PENrmalA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:39:e6:0b:b5:8c:3b:05:25:ed:f6:45:48:32:77:2b:78:bf:
54:9a:42:96:70:0d:8c:83:49:b0:96:9a:48:85:3c:65:91:d7:
b3:f3:da:76:f5:16:8f:21:bc:96:d2:d5:20:92:b9:17:5d:b5:
d6:91:1a:29:10:e3:7d:05:b9:19:ab:12:25:10:69:f2:ea:1b:
4b:2f:dd:9e:df:0d:f6:26:18:9f:c0:71:eb:3a:d8:c3:d6:92:
01:24:65:38:ea:6b:c3:cd:ad:80:d7:b4:3e:93:e9:77:29:03:
81:e3:85:af:9e:f9:52:7b:0f:2c:ae:88:45:c0:e3:50:a2:b5:
87:92:52:d8:d3:0a:1b:38:9b:cc:e1:c2:61:83:73:11:d9:3a:
d4:ea:14:46:d7:fd:a6:ab:ba:76:1b:18:ef:46:33:d2:3e:5a:
1d:e3:04:99:03:a1:10:28:0c:a0:43:d3:ef:c4:fe:7e:83:b3:
8b:50:10:40:21:51:b1:48:df:2e:f4:50:68:50:aa:e8:e0:f2:
7d:21:1f:8c:b5:fc:90:e5:2a:07:24:0f:62:de:9d:93:3d:ac:
39:e0:46:9f:e9:02:3d:47:9d:fd:e8:4a:49:cf:60:89:61:27:
ef:31:b5:6c:68:0b:63:91:cf:e9:cd:e6:89:41:08:69:a7:4d:
3d:58:f8:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pBrwW/oDTF9FPVoS2enZ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZTdlODc4NDM2NmI0NzFhNmE0ZTBjODA4MGY4ZjEwZGFl
NjZhNTAwHhcNMjYwNzI4MTQwMDE4WhcNMjYwNzI5MTQwMDE4WjAzMTEwLwYDVQQD
EyhmZGNkNGI3YTQ4YzQ5ZDkzODIyYWI4ZTRiYTc3MGVhZDI3NWMzYTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AtsIbJX76WHAHLp1n/C53IRvQcn
G+JfhHrijf0r1PKlBKPihV9var+1RNGnN5SefD2lxxOVF/pIJCZwhWq64o8uZ0vt
/i/N8mXUxrHFjAOq5r9C7VPGKXZeoa5Mvv1/9aGt+tn8Ula+BSE1kFLGlb/9juSl
rNV8bkkWYjYYI9rL7a86sWONMIHm7xwpW/3yOM3x7RfgTkaZoc9ZIr7z4W9WlQJa
wGK2LJsfNByH8DNIfe22MlJxVFLTc/GsyEo5jrVkx6741er3x6hx93+Rp/GoyYqg
DbOFcbGNlV0PB5bVBBqR9sh3ljaBIwWoS+ki8BoV2D9hIcfuLtJr+kN6jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3NS3pIxJ2Tgiq45Lp3Dq0nXDpaMB8GA1UdIwQY
MBaAFPXn6HhDZrRxpqTgyAgPjxDa5mpQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWVmb2VFTm10SEdtcE9ESUNBLVBFTnJtYWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lMDIwMWYtOGQxOC00OGZkLWE2Nzct
MGQyNzA0NjJiN2Q3LzEvOWVmb2VFTm10SEdtcE9ESUNBLVBFTnJtYWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lMDIwMWYtOGQxOC00OGZkLWE2NzctMGQyNzA0NjJiN2Q3
LzEvOWVmb2VFTm10SEdtcE9ESUNBLVBFTnJtYWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjnmC7WM
OwUl7fZFSDJ3K3i/VJpClnANjINJsJaaSIU8ZZHXs/PadvUWjyG8ltLVIJK5F121
1pEaKRDjfQW5GasSJRBp8uobSy/dnt8N9iYYn8Bx6zrYw9aSASRlOOprw82tgNe0
PpPpdykDgeOFr575UnsPLK6IRcDjUKK1h5JS2NMKGzibzOHCYYNzEdk61OoURtf9
pqu6dhsY70Yz0j5aHeMEmQOhECgMoEPT78T+foOzi1AQQCFRsUjfLvRQaFCq6ODy
fSEfjLX8kOUqByQPYt6dkz2sOeBGn+kCPUed/ehKSc9giWEn7zG1bGgLY5HP6c3m
iUEIaadNPVj4Sw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:32:57 2026 by rpki-client