Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
File: C86QcAXcPrBHC8PbRpCNoQkXuEo.mft (raw, json)
Hash identifier: KLbSFbNCtWVdRU74SfFNJJJv0BF9+1vewfcsFyzK3+o=
Subject key identifier: 88:EC:F6:FC:72:99:7B:F9:30:23:C0:68:6C:66:DB:C5:F8:47:5A:B3
Authority key identifier: 0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
Certificate issuer: /CN=0bce907005dc3eb0470bc3db46908da10917b84a
Certificate serial: 019D9AE38DFCD16C114CEC906C4EA35BC3C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
Manifest number: 1271
Signing time: Fri 17 Apr 2026 10:01:37 +0000
Manifest this update: Fri 17 Apr 2026 10:01:37 +0000
Manifest next update: Sat 18 Apr 2026 10:01:37 +0000
Files and hashes: 1: C86QcAXcPrBHC8PbRpCNoQkXuEo.crl (hash: 7N7ki6PtUwH96tUXMB8eXlglVDBHme2ja3ijPMLuulc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:8d:fc:d1:6c:11:4c:ec:90:6c:4e:a3:5b:c3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bce907005dc3eb0470bc3db46908da10917b84a
Validity
Not Before: Apr 17 10:01:37 2026 GMT
Not After : Apr 18 10:01:37 2026 GMT
Subject: CN=88ecf6fc72997bf93023c0686c66dbc5f8475ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:47:c5:4b:47:cc:67:fd:cd:5d:a9:86:3a:69:
d9:59:ea:7f:f4:f0:0e:1f:98:be:3d:df:18:74:5e:
d3:ec:55:f5:17:05:52:bb:63:35:73:74:c1:b5:01:
c4:2d:4d:17:6c:89:7e:5c:72:34:aa:e2:9e:04:15:
c7:75:6f:b2:71:ae:94:83:30:ce:eb:91:c8:53:30:
ea:e8:76:33:ee:c3:95:c1:72:7f:19:93:d2:b8:af:
0c:01:62:75:d7:91:72:b0:92:6a:0d:17:01:28:be:
ce:44:a8:bb:ba:1b:7b:be:af:0d:a2:c2:a9:81:15:
90:a0:50:ea:46:0e:0d:cb:8e:97:ee:04:21:a6:6b:
0c:0a:8c:0f:bb:64:d5:0b:cb:6e:b8:9e:be:0a:95:
ec:ae:83:1a:92:9b:a0:7c:28:4a:97:a0:1f:a6:8d:
3a:0d:f4:18:9f:68:5c:a7:bc:72:e0:06:64:10:94:
50:61:34:36:10:73:a2:1e:08:bc:72:39:fc:48:80:
48:c8:be:4a:4e:c0:f0:e6:0c:b9:fe:4d:5c:dc:22:
dc:1b:91:da:42:26:1a:ac:a8:54:cf:9c:eb:de:bb:
f5:42:b0:40:bb:03:41:f0:92:f6:8c:7f:72:fa:73:
8c:f4:88:28:a3:26:a1:75:97:19:ef:78:1a:fa:cc:
dc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EC:F6:FC:72:99:7B:F9:30:23:C0:68:6C:66:DB:C5:F8:47:5A:B3
X509v3 Authority Key Identifier:
keyid:0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e2:d1:c6:05:c8:85:2a:ed:05:ca:04:5d:e2:fb:da:b7:16:
9f:3d:6f:7b:35:f3:75:11:ed:70:db:e7:f6:c2:b6:8c:54:23:
68:7f:dd:b3:98:f6:c3:32:bf:78:57:43:68:eb:fe:97:2d:7f:
e6:2b:d8:73:37:d3:b1:fb:45:27:d9:fd:79:d0:9c:bd:6d:48:
a5:a1:11:49:9c:45:0a:db:db:88:68:11:16:78:cb:fe:f3:15:
24:93:e7:99:58:e7:aa:59:39:bf:bb:b9:34:da:e1:62:47:31:
9c:3e:63:d1:4f:ab:01:6c:b0:ff:e2:e0:3f:e9:a6:8e:a8:4d:
b3:95:92:61:9d:57:38:e7:8d:ae:49:96:3d:41:55:b5:6c:4f:
0a:c5:6e:78:f2:51:3a:bf:aa:ec:48:18:c5:50:4e:0f:5c:b6:
65:b1:f5:38:f0:3e:66:25:7e:ef:f9:72:f3:3c:0f:7c:8a:29:
e1:52:e6:14:9f:8e:69:c8:d3:0b:65:4c:f4:1f:8b:b7:73:9b:
99:20:5e:ef:0f:b5:9f:05:2b:4e:db:d0:4c:47:e4:a8:f2:ee:
a7:db:5b:5c:4d:da:4b:28:cc:36:ea:81:29:5c:73:f4:e5:34:
38:fd:91:60:a1:c7:f0:fb:43:5f:03:f1:f0:bf:93:f6:53:89:
62:d4:5d:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a44380WwRTOyQbE6jW8PIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiY2U5MDcwMDVkYzNlYjA0NzBiYzNkYjQ2OTA4ZGExMDkx
N2I4NGEwHhcNMjYwNDE3MTAwMTM3WhcNMjYwNDE4MTAwMTM3WjAzMTEwLwYDVQQD
Eyg4OGVjZjZmYzcyOTk3YmY5MzAyM2MwNjg2YzY2ZGJjNWY4NDc1YWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikfFS0fMZ/3NXamGOmnZWep/9PAO
H5i+Pd8YdF7T7FX1FwVSu2M1c3TBtQHELU0XbIl+XHI0quKeBBXHdW+yca6UgzDO
65HIUzDq6HYz7sOVwXJ/GZPSuK8MAWJ115FysJJqDRcBKL7ORKi7uht7vq8NosKp
gRWQoFDqRg4Ny46X7gQhpmsMCowPu2TVC8tuuJ6+CpXsroMakpugfChKl6Afpo06
DfQYn2hcp7xy4AZkEJRQYTQ2EHOiHgi8cjn8SIBIyL5KTsDw5gy5/k1c3CLcG5Ha
QiYarKhUz5zr3rv1QrBAuwNB8JL2jH9y+nOM9IgooyahdZcZ73ga+szcjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjs9vxymXv5MCPAaGxm28X4R1qzMB8GA1UdIwQY
MBaAFAvOkHAF3D6wRwvD20aQjaEJF7hKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzg2UWNBWGNQckJIQzhQYlJwQ05vUWtYdUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82MzVmNzUtNjE2Yi00YjkzLWFiNDAt
ZTM3MTg5OThiMTg0LzEvQzg2UWNBWGNQckJIQzhQYlJwQ05vUWtYdUVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82MzVmNzUtNjE2Yi00YjkzLWFiNDAtZTM3MTg5OThiMTg0
LzEvQzg2UWNBWGNQckJIQzhQYlJwQ05vUWtYdUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+LRxgXI
hSrtBcoEXeL72rcWnz1vezXzdRHtcNvn9sK2jFQjaH/ds5j2wzK/eFdDaOv+ly1/
5ivYczfTsftFJ9n9edCcvW1IpaERSZxFCtvbiGgRFnjL/vMVJJPnmVjnqlk5v7u5
NNrhYkcxnD5j0U+rAWyw/+LgP+mmjqhNs5WSYZ1XOOeNrkmWPUFVtWxPCsVuePJR
Or+q7EgYxVBOD1y2ZbH1OPA+ZiV+7/ly8zwPfIop4VLmFJ+OacjTC2VM9B+Lt3Ob
mSBe7w+1nwUrTtvQTEfkqPLup9tbXE3aSyjMNuqBKVxz9OU0OP2RYKHH8PtDXwPx
8L+T9lOJYtRd1w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:50:07 2026 by rpki-client