Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
File: E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft (raw, json)
Hash identifier: 1osDuXTEiMXsiOQNIX99wV9oYd8UTrmF+3dZAjpvewg=
Subject key identifier: 6C:DC:AA:24:21:CF:7C:8E:80:C0:96:26:15:1A:28:65:37:95:48:07
Authority key identifier: 13:FF:8A:93:4A:EB:59:AA:45:A1:E5:54:88:E3:B8:8B:E1:E0:13:5B
Certificate issuer: /CN=13ff8a934aeb59aa45a1e55488e3b88be1e0135b
Certificate serial: 019D9B87ABFBE0A7C88452A8AB7B9170CF46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
Manifest number: 0CE3
Signing time: Fri 17 Apr 2026 13:00:52 +0000
Manifest this update: Fri 17 Apr 2026 13:00:52 +0000
Manifest next update: Sat 18 Apr 2026 13:00:52 +0000
Files and hashes: 1: E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl (hash: pNM+GW1BmNWtod3O8ayw894JQ93emx27gjgTdvViu6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:ab:fb:e0:a7:c8:84:52:a8:ab:7b:91:70:cf:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ff8a934aeb59aa45a1e55488e3b88be1e0135b
Validity
Not Before: Apr 17 13:00:52 2026 GMT
Not After : Apr 18 13:00:52 2026 GMT
Subject: CN=6cdcaa2421cf7c8e80c09626151a286537954807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c6:d2:74:40:cc:18:42:4c:06:6d:39:74:42:
4f:96:f7:85:39:85:0b:6a:1a:8b:97:60:14:f5:3c:
52:5d:c5:6f:e5:76:b8:a6:d4:b4:b4:4b:68:22:44:
13:2e:36:9d:e7:35:44:74:48:08:af:23:aa:83:7d:
81:1a:67:cd:d2:fd:ef:f9:05:aa:63:57:d4:a5:83:
63:ab:2d:17:57:f7:77:c0:f6:3d:8d:4f:db:61:3b:
3c:48:99:56:28:9f:69:55:98:5d:54:5b:ce:65:b5:
1d:13:08:00:cf:e9:50:be:21:75:0e:26:cb:f3:ac:
a1:c6:a5:3f:91:6b:81:a1:25:85:a9:43:da:16:91:
49:26:f5:e1:1d:c2:4a:45:1e:ae:71:63:04:f0:9a:
01:36:4f:93:76:0e:3d:02:b9:67:6c:42:f9:93:94:
31:52:b3:aa:b3:fb:70:a3:bf:53:04:44:29:e6:b2:
16:c2:94:d7:51:b9:6b:10:2d:71:6b:cb:b2:47:3c:
5e:4a:4c:d8:0d:83:18:24:e8:8f:a3:9b:be:78:02:
82:13:d7:a8:a6:53:88:58:a4:78:63:ce:e5:7a:ab:
76:79:b4:43:9d:32:43:fb:8b:bd:66:53:9d:f4:7e:
b1:2c:9e:51:68:66:be:03:8e:da:e8:31:c7:58:c5:
ec:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DC:AA:24:21:CF:7C:8E:80:C0:96:26:15:1A:28:65:37:95:48:07
X509v3 Authority Key Identifier:
keyid:13:FF:8A:93:4A:EB:59:AA:45:A1:E5:54:88:E3:B8:8B:E1:E0:13:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:d4:f8:c9:e7:a0:50:5b:bd:12:bd:38:3b:1e:75:68:ee:4f:
b9:2f:9e:cf:07:dc:d1:a9:b3:d3:05:d2:fb:32:64:9c:7b:b8:
02:99:e0:9f:9d:f9:77:8d:96:ad:13:cc:0c:7b:7a:4d:0c:22:
d7:1b:a4:7c:10:ee:da:42:1b:e1:99:39:5d:14:e7:13:54:3b:
f1:e8:b8:a3:88:cc:11:28:bf:2f:33:05:97:ed:45:ac:a1:5b:
09:85:71:25:ea:52:9b:2e:34:d3:3d:52:31:43:d9:22:f6:8b:
89:67:ca:9f:4e:20:fc:68:17:be:10:75:8e:d3:ed:18:9a:b6:
26:a7:e6:67:79:db:6e:40:85:94:62:4c:04:bc:14:90:84:1d:
1a:cc:0f:8d:f9:8b:82:5b:6c:74:7b:14:f0:ad:f1:39:8e:df:
12:75:cd:d0:c4:41:39:fa:fd:d4:b7:b1:8a:82:3d:e7:b6:0e:
27:81:46:f7:13:5e:ad:0a:ba:48:a1:9e:af:fe:6c:ae:4a:a7:
0d:0a:a1:37:81:8e:c7:c4:da:e7:7e:71:20:26:e0:c5:28:de:
ea:c4:a2:ca:d3:4d:6b:2a:7d:06:b3:fb:28:f7:f5:46:36:5e:
f7:84:6e:be:d3:fb:1b:5c:d0:7c:d1:35:ef:34:84:87:76:c4:
6d:ca:fb:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh6v74KfIhFKoq3uRcM9GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZmY4YTkzNGFlYjU5YWE0NWExZTU1NDg4ZTNiODhiZTFl
MDEzNWIwHhcNMjYwNDE3MTMwMDUyWhcNMjYwNDE4MTMwMDUyWjAzMTEwLwYDVQQD
Eyg2Y2RjYWEyNDIxY2Y3YzhlODBjMDk2MjYxNTFhMjg2NTM3OTU0ODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8bSdEDMGEJMBm05dEJPlveFOYUL
ahqLl2AU9TxSXcVv5Xa4ptS0tEtoIkQTLjad5zVEdEgIryOqg32BGmfN0v3v+QWq
Y1fUpYNjqy0XV/d3wPY9jU/bYTs8SJlWKJ9pVZhdVFvOZbUdEwgAz+lQviF1DibL
86yhxqU/kWuBoSWFqUPaFpFJJvXhHcJKRR6ucWME8JoBNk+Tdg49ArlnbEL5k5Qx
UrOqs/two79TBEQp5rIWwpTXUblrEC1xa8uyRzxeSkzYDYMYJOiPo5u+eAKCE9eo
plOIWKR4Y87leqt2ebRDnTJD+4u9ZlOd9H6xLJ5RaGa+A47a6DHHWMXsUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGzcqiQhz3yOgMCWJhUaKGU3lUgHMB8GA1UdIwQY
MBaAFBP/ipNK61mqRaHlVIjjuIvh4BNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV8tS2swcnJXYXBGb2VWVWlPTzRpLUhnRTFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jOTJjNTgtYzcyNy00ZGUwLTg0YTYt
N2NmNGRjNjdhYTcwLzEvRV8tS2swcnJXYXBGb2VWVWlPTzRpLUhnRTFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jOTJjNTgtYzcyNy00ZGUwLTg0YTYtN2NmNGRjNjdhYTcw
LzEvRV8tS2swcnJXYXBGb2VWVWlPTzRpLUhnRTFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzNT4yeeg
UFu9Er04Ox51aO5PuS+ezwfc0amz0wXS+zJknHu4Apngn535d42WrRPMDHt6TQwi
1xukfBDu2kIb4Zk5XRTnE1Q78ei4o4jMESi/LzMFl+1FrKFbCYVxJepSmy400z1S
MUPZIvaLiWfKn04g/GgXvhB1jtPtGJq2JqfmZ3nbbkCFlGJMBLwUkIQdGswPjfmL
gltsdHsU8K3xOY7fEnXN0MRBOfr91LexioI957YOJ4FG9xNerQq6SKGer/5srkqn
DQqhN4GOx8Ta535xICbgxSje6sSiytNNayp9BrP7KPf1RjZe94RuvtP7G1zQfNE1
7zSEh3bEbcr7lw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:03:12 2026 by rpki-client