Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
File: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft (raw, json)
Hash identifier: +Nmjndq86JEiSrOZ2Orqsy5SflgtgqiSuBoZGc6R6ZU=
Subject key identifier: B5:28:6B:D5:EF:F6:AB:A7:8A:E9:F8:39:0F:7E:60:8B:3A:99:CC:76
Authority key identifier: 13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
Certificate issuer: /CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Certificate serial: 019EC148BDCF18B0286DCF7318FACED5E220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
Manifest number: 08DC
Signing time: Sat 13 Jun 2026 14:00:30 +0000
Manifest this update: Sat 13 Jun 2026 14:00:30 +0000
Manifest next update: Sun 14 Jun 2026 14:00:30 +0000
Files and hashes: 1: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl (hash: vOivzY1tTttganTomrJg4XuW9wIvoBF3AChPVjMQc40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:bd:cf:18:b0:28:6d:cf:73:18:fa:ce:d5:e2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Validity
Not Before: Jun 13 14:00:30 2026 GMT
Not After : Jun 14 14:00:30 2026 GMT
Subject: CN=b5286bd5eff6aba78ae9f8390f7e608b3a99cc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:c4:ce:b0:54:c8:4e:ec:87:79:0f:7b:83:
92:01:15:30:34:cc:02:ac:0a:36:5f:77:8f:41:db:
4e:9a:72:53:d3:fb:31:0f:1a:55:5e:e8:c6:e4:c4:
a4:6c:35:2d:b4:75:71:16:05:71:05:e7:ad:d8:7e:
5e:22:bf:e8:b6:62:21:3c:9e:7e:a8:79:27:b6:05:
35:b2:9d:6e:cc:65:d8:e6:73:37:92:24:51:61:70:
54:79:a7:a1:31:31:39:1e:e8:72:20:e4:c7:89:96:
1e:39:f7:76:b3:9f:e4:7e:a5:93:72:9e:36:c7:ff:
c3:c3:da:0a:c0:b1:01:1e:1a:86:8f:af:51:00:7e:
59:54:d6:8b:60:bc:49:0b:eb:c4:d2:d8:6b:b4:fe:
98:a6:03:16:5f:98:b7:68:ed:01:1d:45:d1:25:53:
d9:00:d5:99:0d:26:9b:6b:8d:05:d1:c9:f4:e7:d2:
4b:9f:25:e3:9e:4a:93:86:2d:3a:5b:d8:ef:82:59:
9d:b1:1d:d6:65:2f:d2:72:cf:aa:6f:fb:d7:ac:61:
6a:83:18:85:81:0a:79:c8:74:f9:3c:4b:df:39:8c:
f6:d9:f4:ce:b9:6e:1a:cf:fd:26:43:a0:e2:44:f3:
52:f0:ce:ab:0f:84:1e:6f:1d:4a:5d:ff:b8:7c:2f:
fb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:28:6B:D5:EF:F6:AB:A7:8A:E9:F8:39:0F:7E:60:8B:3A:99:CC:76
X509v3 Authority Key Identifier:
keyid:13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f8:2e:7b:b2:f1:48:67:59:da:69:38:91:d7:d3:ac:52:2b:
f9:61:e6:e8:28:12:d8:fd:52:8e:f2:a8:82:dc:23:06:f8:37:
ff:97:e1:71:46:be:08:cc:c6:ea:ce:e2:5d:e7:cb:b1:a2:1c:
8b:23:7d:59:b1:5f:30:95:c4:a1:f2:2b:63:3e:b8:9d:3a:cd:
25:9e:1e:69:0a:76:e2:74:2a:69:8d:9d:fe:50:b5:f3:73:26:
63:23:3c:88:0b:15:32:55:b1:4b:f6:29:0c:0a:12:ed:38:b3:
54:cb:4a:11:9f:78:8e:4a:87:9c:e0:53:48:36:ef:7c:4a:5a:
c9:7e:89:f7:bf:9e:97:d5:3f:79:7b:1a:ba:c6:b9:08:6c:5b:
94:f3:ac:4c:37:1c:cc:19:a3:0d:90:c9:72:25:c3:da:0b:39:
21:f5:de:c0:a0:95:c4:ae:af:04:4f:1e:a9:41:cc:1e:9e:5f:
68:c0:30:af:be:83:30:d2:16:0d:15:c8:02:d2:62:a0:1f:ac:
0f:3c:bc:a9:77:e7:89:5e:b7:8d:46:dc:bb:06:0b:b5:a1:4a:
23:34:54:d7:b0:f1:7f:6a:c6:3a:d7:80:c3:60:ae:03:e2:d6:
38:74:7e:90:be:b0:0b:0f:7e:5d:ce:c6:d3:b5:d5:94:c5:e1:
a9:00:e8:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BSL3PGLAobc9zGPrO1eIgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzQzZDMwN2E4YjcyYWM1MzJmNGNkODgzZjBjOTQyYmFk
MGY0YmUwHhcNMjYwNjEzMTQwMDMwWhcNMjYwNjE0MTQwMDMwWjAzMTEwLwYDVQQD
EyhiNTI4NmJkNWVmZjZhYmE3OGFlOWY4MzkwZjdlNjA4YjNhOTljYzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvPEzrBUyE7sh3kPe4OSARUwNMwC
rAo2X3ePQdtOmnJT0/sxDxpVXujG5MSkbDUttHVxFgVxBeet2H5eIr/otmIhPJ5+
qHkntgU1sp1uzGXY5nM3kiRRYXBUeaehMTE5HuhyIOTHiZYeOfd2s5/kfqWTcp42
x//Dw9oKwLEBHhqGj69RAH5ZVNaLYLxJC+vE0thrtP6YpgMWX5i3aO0BHUXRJVPZ
ANWZDSaba40F0cn059JLnyXjnkqThi06W9jvglmdsR3WZS/Scs+qb/vXrGFqgxiF
gQp5yHT5PEvfOYz22fTOuW4az/0mQ6DiRPNS8M6rD4Qebx1KXf+4fC/7FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUoa9Xv9quniun4OQ9+YIs6mcx2MB8GA1UdIwQY
MBaAFBN0PTB6i3KsUy9M2IPwyUK60PS+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNROU1IcUxjcXhUTDB6WWdfREpRcnJROUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC83ZTE1YzgtOTYzMS00ODM3LWEwNWQt
NDc3ZDFlOWE0MGI4LzEvRTNROU1IcUxjcXhUTDB6WWdfREpRcnJROUw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC83ZTE1YzgtOTYzMS00ODM3LWEwNWQtNDc3ZDFlOWE0MGI4
LzEvRTNROU1IcUxjcXhUTDB6WWdfREpRcnJROUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfgue7Lx
SGdZ2mk4kdfTrFIr+WHm6CgS2P1SjvKogtwjBvg3/5fhcUa+CMzG6s7iXefLsaIc
iyN9WbFfMJXEofIrYz64nTrNJZ4eaQp24nQqaY2d/lC183MmYyM8iAsVMlWxS/Yp
DAoS7TizVMtKEZ94jkqHnOBTSDbvfEpayX6J97+el9U/eXsausa5CGxblPOsTDcc
zBmjDZDJciXD2gs5IfXewKCVxK6vBE8eqUHMHp5faMAwr76DMNIWDRXIAtJioB+s
Dzy8qXfniV63jUbcuwYLtaFKIzRU17Dxf2rGOteAw2CuA+LWOHR+kL6wCw9+Xc7G
07XVlMXhqQDo7w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:50:38 2026 by rpki-client