Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
File: E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft (raw, json)
Hash identifier: UaoWz1igw/cTi4LV/fNxRFp3yJwNi/3xeKu24nSm6tQ=
Subject key identifier: 2F:A0:F2:2F:44:65:F1:2D:C0:D3:58:AA:CB:34:6E:3C:1C:73:87:B9
Authority key identifier: 13:FF:8A:93:4A:EB:59:AA:45:A1:E5:54:88:E3:B8:8B:E1:E0:13:5B
Certificate issuer: /CN=13ff8a934aeb59aa45a1e55488e3b88be1e0135b
Certificate serial: 019D3909A90164E7C023CE7263F61270A243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
Manifest number: 0CB0
Signing time: Sun 29 Mar 2026 10:00:27 +0000
Manifest this update: Sun 29 Mar 2026 10:00:27 +0000
Manifest next update: Mon 30 Mar 2026 10:00:27 +0000
Files and hashes: 1: E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl (hash: 7SZBD+k2DjVvxiTMBV7P8cOL/Ot68fHD+0OMDQnHB4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a9:01:64:e7:c0:23:ce:72:63:f6:12:70:a2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ff8a934aeb59aa45a1e55488e3b88be1e0135b
Validity
Not Before: Mar 29 10:00:27 2026 GMT
Not After : Mar 30 10:00:27 2026 GMT
Subject: CN=2fa0f22f4465f12dc0d358aacb346e3c1c7387b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c1:6b:21:12:5c:64:4e:95:d8:fd:a6:3b:cb:
48:22:b8:33:a5:df:f0:1c:05:13:6f:67:f9:14:78:
b9:a1:7a:4f:e9:6d:f3:69:bb:91:d2:3b:3e:5f:f0:
e5:8e:df:2d:16:6a:08:3e:59:1d:8d:61:09:57:ee:
a1:9a:4b:e0:85:bf:ed:ea:29:5f:13:f8:8c:c6:76:
f3:75:75:00:02:06:70:48:87:e2:ee:fa:73:76:d9:
0e:5c:16:4c:92:cf:00:d6:16:9a:3c:f2:7c:74:60:
1a:82:e8:2d:ef:1b:8f:04:06:c7:99:f9:49:8e:15:
9b:b0:6d:a3:b3:15:92:ea:16:a1:3e:75:4f:2e:00:
c4:92:c2:5d:2c:7c:d8:81:77:a5:e1:12:96:58:a2:
56:28:21:6a:89:4b:fb:cd:8a:67:e5:dc:3f:20:2b:
9c:10:4c:d7:98:98:db:e7:d7:75:64:35:7a:6d:da:
b6:bf:d7:55:dc:29:e8:0d:93:d1:9d:7b:d1:fd:5c:
8b:08:86:10:82:f8:a8:6e:b2:af:dc:5a:21:40:b4:
9e:6e:59:87:d6:6c:1d:de:0d:ee:76:cc:a8:70:df:
c5:9a:13:d3:64:b5:25:16:a1:aa:8e:42:05:11:72:
20:45:71:f2:03:fe:fb:98:46:56:aa:40:0e:a9:f5:
76:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A0:F2:2F:44:65:F1:2D:C0:D3:58:AA:CB:34:6E:3C:1C:73:87:B9
X509v3 Authority Key Identifier:
keyid:13:FF:8A:93:4A:EB:59:AA:45:A1:E5:54:88:E3:B8:8B:E1:E0:13:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1a:26:d3:7b:5e:62:f0:45:16:42:39:d3:8f:35:d8:ee:29:
8b:f4:4c:a6:dd:d0:9e:d8:ea:36:49:65:6f:cc:35:9d:16:83:
ff:b5:94:11:42:74:2b:cb:bc:b4:9c:93:25:88:6c:6a:61:c1:
a8:26:64:fb:b6:e3:bd:08:a5:d6:0a:e3:42:79:26:1d:05:6a:
9b:60:26:42:92:16:f0:62:fb:60:e4:61:46:3a:f3:3b:bf:2a:
f7:20:ca:15:a2:fd:c1:53:bb:f8:fd:29:65:b1:98:cc:83:ec:
25:1d:74:df:87:db:f4:06:24:9a:9f:71:2a:17:8e:85:67:20:
ac:7c:fd:75:be:d5:d6:40:7c:02:32:e3:8e:fb:fd:0f:c3:98:
a0:d3:48:8a:db:62:54:f7:77:08:02:10:aa:b9:1f:ae:9c:be:
86:aa:20:98:28:c3:b9:e2:2b:30:e5:6e:34:8c:ea:46:09:dc:
3c:d9:ce:1f:71:bb:30:31:87:1a:ba:bc:49:65:da:08:ba:f5:
a1:ba:ed:73:05:86:6c:14:79:33:fa:84:db:ba:69:b1:77:f1:
4b:a0:73:9b:be:58:60:42:a0:49:ee:67:5d:26:2c:dc:9d:da:
0b:b6:a7:0b:fb:4c:d9:e5:69:f6:9d:49:67:77:f5:ac:96:bb:
73:14:1c:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CakBZOfAI85yY/YScKJDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZmY4YTkzNGFlYjU5YWE0NWExZTU1NDg4ZTNiODhiZTFl
MDEzNWIwHhcNMjYwMzI5MTAwMDI3WhcNMjYwMzMwMTAwMDI3WjAzMTEwLwYDVQQD
EygyZmEwZjIyZjQ0NjVmMTJkYzBkMzU4YWFjYjM0NmUzYzFjNzM4N2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcFrIRJcZE6V2P2mO8tIIrgzpd/w
HAUTb2f5FHi5oXpP6W3zabuR0js+X/Dljt8tFmoIPlkdjWEJV+6hmkvghb/t6ilf
E/iMxnbzdXUAAgZwSIfi7vpzdtkOXBZMks8A1haaPPJ8dGAagugt7xuPBAbHmflJ
jhWbsG2jsxWS6hahPnVPLgDEksJdLHzYgXel4RKWWKJWKCFqiUv7zYpn5dw/ICuc
EEzXmJjb59d1ZDV6bdq2v9dV3CnoDZPRnXvR/VyLCIYQgviobrKv3FohQLSeblmH
1mwd3g3udsyocN/FmhPTZLUlFqGqjkIFEXIgRXHyA/77mEZWqkAOqfV2ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+g8i9EZfEtwNNYqss0bjwcc4e5MB8GA1UdIwQY
MBaAFBP/ipNK61mqRaHlVIjjuIvh4BNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRV8tS2swcnJXYXBGb2VWVWlPTzRpLUhnRTFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jOTJjNTgtYzcyNy00ZGUwLTg0YTYt
N2NmNGRjNjdhYTcwLzEvRV8tS2swcnJXYXBGb2VWVWlPTzRpLUhnRTFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9jOTJjNTgtYzcyNy00ZGUwLTg0YTYtN2NmNGRjNjdhYTcw
LzEvRV8tS2swcnJXYXBGb2VWVWlPTzRpLUhnRTFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahom03te
YvBFFkI504812O4pi/RMpt3QntjqNkllb8w1nRaD/7WUEUJ0K8u8tJyTJYhsamHB
qCZk+7bjvQil1grjQnkmHQVqm2AmQpIW8GL7YORhRjrzO78q9yDKFaL9wVO7+P0p
ZbGYzIPsJR1034fb9AYkmp9xKheOhWcgrHz9db7V1kB8AjLjjvv9D8OYoNNIitti
VPd3CAIQqrkfrpy+hqogmCjDueIrMOVuNIzqRgncPNnOH3G7MDGHGrq8SWXaCLr1
obrtcwWGbBR5M/qE27ppsXfxS6Bzm75YYEKgSe5nXSYs3J3aC7anC/tM2eVp9p1J
Z3f1rJa7cxQc9A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:16 2026 by rpki-client