Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
File: M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft (raw, json)
Hash identifier: Kgpuirujs+ltwxYQMXj6Glkg8AcPZy7EeCkNdUA5vhw=
Subject key identifier: 02:45:57:06:58:D3:72:4A:9B:93:83:15:C1:A0:21:E1:B3:8A:77:C4
Authority key identifier: 33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E
Certificate issuer: /CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e
Certificate serial: 019D98F4C1CBCD5EA0EE82C19CD50CC42FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
Manifest number: 0E41
Signing time: Fri 17 Apr 2026 01:01:10 +0000
Manifest this update: Fri 17 Apr 2026 01:01:10 +0000
Manifest next update: Sat 18 Apr 2026 01:01:10 +0000
Files and hashes: 1: M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl (hash: iEAlvSMJHggZMMohEzERjZ1tZ63KeJUMkzeNM27GSYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:c1:cb:cd:5e:a0:ee:82:c1:9c:d5:0c:c4:2f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e
Validity
Not Before: Apr 17 01:01:10 2026 GMT
Not After : Apr 18 01:01:10 2026 GMT
Subject: CN=0245570658d3724a9b938315c1a021e1b38a77c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d0:1e:a2:d9:1a:52:c9:d0:bd:26:03:94:c5:
fc:e7:42:2c:3f:6e:27:c4:29:1a:a7:20:7a:b7:a4:
e1:50:bd:62:ff:c9:32:2b:73:0a:05:76:f7:4f:40:
71:70:9c:f9:55:0b:76:8f:75:ba:98:16:0f:2e:e0:
bf:70:ac:e9:9c:61:90:5d:fb:0d:20:71:0e:6f:59:
1d:47:75:be:18:08:86:6d:8f:8d:8d:5f:e3:ec:e9:
e2:0e:88:aa:53:81:40:42:9c:90:89:86:8b:4e:21:
94:5d:92:1c:54:e9:b2:01:99:ed:cc:6f:44:5a:70:
db:38:18:57:f0:d6:e6:ac:7f:b1:22:83:da:af:c0:
a2:1e:cc:da:69:7c:75:a2:9b:3d:12:08:e1:e0:63:
3b:d7:1a:95:54:1c:2c:51:67:c3:7e:2d:6b:56:cc:
b5:7d:03:d1:4e:54:9c:a2:52:73:9e:45:56:97:85:
9d:fb:bc:9c:92:67:91:91:20:37:10:cb:77:55:4c:
8d:bf:40:05:c6:06:fd:c4:b0:87:89:43:6d:8e:d8:
01:5c:f5:d4:7b:6c:a2:97:04:80:5d:17:92:7b:cf:
ed:4b:e2:10:60:0e:ec:33:68:5f:99:7c:a4:a8:2b:
b9:1a:2a:1e:c9:e7:0d:74:d2:a4:f3:e8:c6:b9:8e:
33:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:45:57:06:58:D3:72:4A:9B:93:83:15:C1:A0:21:E1:B3:8A:77:C4
X509v3 Authority Key Identifier:
keyid:33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:72:57:0a:52:61:db:40:9f:06:5c:c6:c9:fd:e9:85:e2:25:
90:23:3b:a6:20:cd:b0:18:3d:65:1e:fc:c2:04:bf:fa:a8:64:
3e:f6:15:64:be:db:d6:d4:9b:9f:95:6b:48:0b:85:46:72:fc:
9f:2f:e1:54:f9:fc:7c:cb:60:e7:8d:fe:80:c6:0e:3d:26:6d:
7e:d3:49:85:24:9e:e7:cc:12:4d:e2:0b:16:84:57:fe:5c:32:
85:40:6d:56:08:3f:cb:7a:93:f7:c3:fc:54:83:85:81:4f:4f:
b7:a1:c5:be:4d:8b:45:b7:c7:d2:35:ce:36:75:42:71:2b:2a:
33:3a:5c:96:36:f1:47:3d:81:c1:4f:ad:ca:14:80:22:c8:a7:
01:bd:d8:7c:48:a9:d8:98:3d:22:f2:7b:87:73:6b:55:96:65:
2a:ac:f6:0b:03:5c:70:39:48:97:d6:c1:5a:b3:0c:53:a7:26:
28:a7:63:3c:b0:16:67:dc:86:82:ce:68:2f:d3:a4:a8:3e:00:
ae:23:ed:2f:87:03:82:a7:1e:03:66:e0:f0:ad:02:f1:7c:d2:
24:6c:d5:9b:77:6b:c6:12:62:7a:fb:3a:41:61:c5:61:ef:e9:
96:8d:aa:f4:19:2f:a3:d4:80:a2:70:90:6e:a2:1b:9b:89:3a:
5a:33:2d:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9MHLzV6g7oLBnNUMxC+kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNjE3MGE4MmQ1N2ZjYjllNDQwYWFiYzNiZTllYzQwYmQw
MzljNGUwHhcNMjYwNDE3MDEwMTEwWhcNMjYwNDE4MDEwMTEwWjAzMTEwLwYDVQQD
EygwMjQ1NTcwNjU4ZDM3MjRhOWI5MzgzMTVjMWEwMjFlMWIzOGE3N2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dAeotkaUsnQvSYDlMX850IsP24n
xCkapyB6t6ThUL1i/8kyK3MKBXb3T0BxcJz5VQt2j3W6mBYPLuC/cKzpnGGQXfsN
IHEOb1kdR3W+GAiGbY+NjV/j7OniDoiqU4FAQpyQiYaLTiGUXZIcVOmyAZntzG9E
WnDbOBhX8NbmrH+xIoPar8CiHszaaXx1ops9Egjh4GM71xqVVBwsUWfDfi1rVsy1
fQPRTlScolJznkVWl4Wd+7yckmeRkSA3EMt3VUyNv0AFxgb9xLCHiUNtjtgBXPXU
e2yilwSAXReSe8/tS+IQYA7sM2hfmXykqCu5GioeyecNdNKk8+jGuY4zUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJFVwZY03JKm5ODFcGgIeGzinfEMB8GA1UdIwQY
MBaAFDNhcKgtV/y55ECqvDvp7EC9A5xOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTJGd3FDMVhfTG5rUUtxOE8tbnNRTDBEbkU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84ZTQzYjktMWY1MS00YjkzLTliMjct
NzRiNmYwMDVkMTdiLzEvTTJGd3FDMVhfTG5rUUtxOE8tbnNRTDBEbkU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84ZTQzYjktMWY1MS00YjkzLTliMjctNzRiNmYwMDVkMTdi
LzEvTTJGd3FDMVhfTG5rUUtxOE8tbnNRTDBEbkU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnJXClJh
20CfBlzGyf3pheIlkCM7piDNsBg9ZR78wgS/+qhkPvYVZL7b1tSbn5VrSAuFRnL8
ny/hVPn8fMtg543+gMYOPSZtftNJhSSe58wSTeILFoRX/lwyhUBtVgg/y3qT98P8
VIOFgU9Pt6HFvk2LRbfH0jXONnVCcSsqMzpcljbxRz2BwU+tyhSAIsinAb3YfEip
2Jg9IvJ7h3NrVZZlKqz2CwNccDlIl9bBWrMMU6cmKKdjPLAWZ9yGgs5oL9OkqD4A
riPtL4cDgqceA2bg8K0C8XzSJGzVm3drxhJievs6QWHFYe/plo2q9Bkvo9SAonCQ
bqIbm4k6WjMtvg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:30 2026 by rpki-client