Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft
File: 1-EAlIIyFaM6OWN4a59g--NKydCQ.mft (raw, json)
Hash identifier: SbkYsjCcULpHWCjPukel3b8je4HTTZuKble27eMBIc4=
Subject key identifier: 3E:5F:65:14:5A:52:49:02:CA:6C:C4:AE:FC:F2:B3:8A:98:E4:2B:F0
Authority key identifier: F8:40:25:20:8C:85:68:CE:8E:58:DE:1A:E7:D8:3E:F8:D2:B2:74:24
Certificate issuer: /CN=f84025208c8568ce8e58de1ae7d83ef8d2b27424
Certificate serial: 019EBFC82F412B556DAAF7B2D562E9C16836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EAlIIyFaM6OWN4a59g--NKydCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft
Manifest number: 01BF
Signing time: Sat 13 Jun 2026 07:00:27 +0000
Manifest this update: Sat 13 Jun 2026 07:00:27 +0000
Manifest next update: Sun 14 Jun 2026 07:00:27 +0000
Files and hashes: 1: 1-EAlIIyFaM6OWN4a59g--NKydCQ.crl (hash: sqZCW9WohYeaPRX8saSHarEpZfxp78sNGLNwo8+EzKw=)
2: 5nyyp5bJ6BfhfIdrL4euf6g3prs.asa (hash: g/gn9GfPYPRaS6oGfe8vAdejuU161UnFwUAxOE+MHZQ=)
3: BNbYCTwC4UEQcd5nV0lyvO8_FF4.asa (hash: USr7fzmawFWbiL1qC8bzafm2rT8+Rqoc2eBnCHzxDMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-EAlIIyFaM6OWN4a59g--NKydCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:2f:41:2b:55:6d:aa:f7:b2:d5:62:e9:c1:68:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84025208c8568ce8e58de1ae7d83ef8d2b27424
Validity
Not Before: Jun 13 07:00:27 2026 GMT
Not After : Jun 14 07:00:27 2026 GMT
Subject: CN=3e5f65145a524902ca6cc4aefcf2b38a98e42bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:87:6e:bf:a0:4f:80:c4:59:71:33:f4:f7:b3:
90:00:9e:f0:3b:ba:c0:6a:85:51:d9:64:40:fe:6f:
42:29:22:cc:ac:d8:01:2d:41:97:69:08:4b:0d:81:
0f:75:fd:9e:3d:68:75:18:b6:39:f1:1d:7f:60:d6:
c8:1f:c9:e2:20:9a:f9:10:e2:18:b5:93:39:02:05:
be:13:58:a3:eb:e2:9d:ee:d4:52:99:d1:d3:cf:6a:
c9:c9:a9:0d:51:ff:4e:07:69:68:5e:d3:3f:6c:0a:
ec:58:40:13:1d:96:f0:ae:e0:7e:f3:9d:90:6e:f1:
6d:86:d4:3b:8d:ba:e9:6a:d3:3f:88:e9:ef:a4:45:
cf:f6:59:d3:69:98:ae:cc:36:f4:e0:78:e2:38:f0:
87:ef:bd:2a:1b:e7:ae:59:ad:9f:d0:e9:44:54:7c:
8d:4e:98:8b:9a:d6:ee:98:4a:16:15:e0:aa:4b:0f:
bd:d2:af:b4:d0:ad:f4:72:65:38:78:7b:2f:2b:69:
c8:6b:48:95:18:9d:a8:ac:8f:87:e7:4a:0f:cd:fc:
fd:ed:fb:0b:cb:c6:01:65:ea:0f:d0:fd:a7:18:68:
5e:a0:ad:b3:b9:51:6f:95:e4:0b:aa:ba:ea:58:a7:
f3:6a:19:d7:3d:1e:f6:63:a4:31:7a:ba:be:0e:d5:
12:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5F:65:14:5A:52:49:02:CA:6C:C4:AE:FC:F2:B3:8A:98:E4:2B:F0
X509v3 Authority Key Identifier:
keyid:F8:40:25:20:8C:85:68:CE:8E:58:DE:1A:E7:D8:3E:F8:D2:B2:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EAlIIyFaM6OWN4a59g--NKydCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:02:43:e9:3c:d4:06:25:a9:39:1c:be:56:89:0a:01:93:41:
de:be:a4:56:54:9d:cc:82:12:18:06:08:e2:32:8a:d4:4f:46:
80:ad:cc:c5:ae:82:33:30:62:c8:b6:1e:83:ef:f3:19:05:23:
fa:81:97:37:66:df:87:8c:3c:62:25:79:d4:92:ca:2f:1c:13:
c1:5d:3a:fc:bf:d7:cd:b6:48:22:5f:57:22:8d:bd:4b:fd:ee:
88:05:58:6a:83:9a:46:07:51:15:23:3e:3e:a0:88:66:b3:57:
5a:50:2b:b2:75:ea:e7:0b:f5:bf:0a:53:3a:63:f9:3c:cb:06:
54:2e:f0:2f:43:3f:3e:ca:a8:0e:e0:1e:fa:97:62:3d:a8:64:
ad:a7:30:a8:57:59:ab:ea:f4:0a:33:4e:c2:7f:00:98:5c:58:
2a:f3:d6:f0:de:37:bc:c7:f6:ef:6a:22:6e:8b:4f:27:99:b4:
49:2b:d3:6b:2f:13:22:c1:69:04:09:be:28:ba:02:73:37:92:
03:d8:54:75:46:f9:ca:23:52:de:4e:03:66:fa:d4:b9:18:33:
c7:04:7e:8f:17:75:dd:67:95:0f:da:91:73:d2:4f:71:3c:d7:
97:47:ad:9f:7c:ee:71:b9:51:79:2b:15:54:70:51:de:70:32:
3e:56:77:b5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ6/yC9BK1Vtqvey1WLpwWg2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NDAyNTIwOGM4NTY4Y2U4ZTU4ZGUxYWU3ZDgzZWY4ZDJi
Mjc0MjQwHhcNMjYwNjEzMDcwMDI3WhcNMjYwNjE0MDcwMDI3WjAzMTEwLwYDVQQD
EygzZTVmNjUxNDVhNTI0OTAyY2E2Y2M0YWVmY2YyYjM4YTk4ZTQyYmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4duv6BPgMRZcTP097OQAJ7wO7rA
aoVR2WRA/m9CKSLMrNgBLUGXaQhLDYEPdf2ePWh1GLY58R1/YNbIH8niIJr5EOIY
tZM5AgW+E1ij6+Kd7tRSmdHTz2rJyakNUf9OB2loXtM/bArsWEATHZbwruB+852Q
bvFthtQ7jbrpatM/iOnvpEXP9lnTaZiuzDb04HjiOPCH770qG+euWa2f0OlEVHyN
TpiLmtbumEoWFeCqSw+90q+00K30cmU4eHsvK2nIa0iVGJ2orI+H50oPzfz97fsL
y8YBZeoP0P2nGGheoK2zuVFvleQLqrrqWKfzahnXPR72Y6Qxerq+DtUSzwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFD5fZRRaUkkCymzErvzys4qY5CvwMB8GA1UdIwQY
MBaAFPhAJSCMhWjOjljeGufYPvjSsnQkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1FQWxJSXlGYU02T1dONGE1OWctLU5LeWRDUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvY2FkZDZlLTY1YzYtNDRkYS05ZWU5
LWVmZWE2NWRjMzAyMC8xLzEtRUFsSUl5RmFNNk9XTjRhNTlnLS1OS3lkQ1EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQ2L2NhZGQ2ZS02NWM2LTQ0ZGEtOWVlOS1lZmVhNjVkYzMw
MjAvMS8xLUVBbElJeUZhTTZPV040YTU5Zy0tTkt5ZENRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgJD
6TzUBiWpORy+VokKAZNB3r6kVlSdzIISGAYI4jKK1E9GgK3Mxa6CMzBiyLYeg+/z
GQUj+oGXN2bfh4w8YiV51JLKLxwTwV06/L/XzbZIIl9XIo29S/3uiAVYaoOaRgdR
FSM+PqCIZrNXWlArsnXq5wv1vwpTOmP5PMsGVC7wL0M/PsqoDuAe+pdiPahkracw
qFdZq+r0CjNOwn8AmFxYKvPW8N43vMf272oibotPJ5m0SSvTay8TIsFpBAm+KLoC
czeSA9hUdUb5yiNS3k4DZvrUuRgzxwR+jxd13WeVD9qRc9JPcTzXl0etn3zucblR
eSsVVHBR3nAyPlZ3tQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:13:13 2026 by rpki-client