Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
File: E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft (raw, json)
Hash identifier: GlYk10kjSVJ2NGb7KPj9Oy6rQ4XdbMNEvvjil04QbSw=
Subject key identifier: 42:00:AF:6B:A9:E3:E6:FA:A7:8A:14:1C:53:18:EB:64:F3:D4:D9:5B
Authority key identifier: 13:B4:21:B8:2A:B7:BB:A6:E2:F5:5E:90:2A:9F:B8:1F:A3:AF:29:8F
Certificate issuer: /CN=13b421b82ab7bba6e2f55e902a9fb81fa3af298f
Certificate serial: 019F183046F41B7E747BB5F482AB3C8E0807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7QhuCq3u6bi9V6QKp-4H6OvKY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
Manifest number: 05D3
Signing time: Tue 30 Jun 2026 11:00:44 +0000
Manifest this update: Tue 30 Jun 2026 11:00:44 +0000
Manifest next update: Wed 01 Jul 2026 11:00:44 +0000
Files and hashes: 1: E7QhuCq3u6bi9V6QKp-4H6OvKY8.crl (hash: +gFc9jAxuh0M2LXmOw+A60dBqmohRd53rvp9YR1Id/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/E7QhuCq3u6bi9V6QKp-4H6OvKY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:46:f4:1b:7e:74:7b:b5:f4:82:ab:3c:8e:08:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b421b82ab7bba6e2f55e902a9fb81fa3af298f
Validity
Not Before: Jun 30 11:00:44 2026 GMT
Not After : Jul 1 11:00:44 2026 GMT
Subject: CN=4200af6ba9e3e6faa78a141c5318eb64f3d4d95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:59:fa:b3:70:79:30:0f:5f:45:31:24:2f:
0a:9e:f1:47:a9:21:ed:4c:06:9c:f6:79:ac:ff:9d:
73:32:7c:f8:3f:08:68:0e:db:4b:38:5c:45:e5:77:
38:9b:e6:85:0a:35:da:6d:ea:05:f0:a3:05:36:fc:
cc:e2:03:74:d3:e3:57:9d:98:6a:0c:de:41:04:7b:
d4:c9:82:4e:04:6f:77:97:24:8f:aa:81:14:58:b7:
bd:69:f5:6d:ca:c6:b9:b0:48:8e:31:98:c3:ec:3d:
40:d9:b3:a1:48:a7:2e:22:4d:41:5b:14:92:85:c1:
5d:bc:fd:8c:88:42:6c:db:8c:f6:7c:e6:11:dc:20:
60:91:7a:4f:38:f5:89:71:bd:cb:da:48:73:35:c7:
9c:c3:dd:4a:73:93:69:6d:9b:b5:61:ae:82:79:7e:
3c:8a:99:ea:75:99:ea:63:ff:11:62:8e:f4:b4:4e:
89:1a:25:c4:5e:0b:c2:8d:30:ea:ad:08:ff:3e:6d:
7b:99:60:a6:19:72:6d:ac:21:94:61:bc:1e:f0:b6:
ae:df:6e:d3:37:3a:6f:85:5e:98:53:27:53:23:4d:
b5:af:3e:85:fd:a5:d3:ec:f5:76:94:a9:df:bb:23:
f1:79:76:2c:d0:13:d1:ae:52:b3:de:af:a2:b1:20:
53:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:00:AF:6B:A9:E3:E6:FA:A7:8A:14:1C:53:18:EB:64:F3:D4:D9:5B
X509v3 Authority Key Identifier:
keyid:13:B4:21:B8:2A:B7:BB:A6:E2:F5:5E:90:2A:9F:B8:1F:A3:AF:29:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7QhuCq3u6bi9V6QKp-4H6OvKY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/053310-03af-4434-8307-dfa707940537/1/E7QhuCq3u6bi9V6QKp-4H6OvKY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ec:db:f0:99:9c:3d:c0:7e:97:8e:c1:ca:d5:46:ba:09:2d:
ff:0f:11:1c:63:32:65:a9:e6:d3:36:99:08:b3:f9:b6:35:e4:
8f:e0:b5:e2:5c:f6:00:cb:9b:05:37:37:49:66:dd:08:84:a8:
b5:af:bb:04:0d:c4:d1:cc:c1:93:7c:57:5f:8e:66:39:f2:93:
f7:7e:8f:16:f7:71:a6:8d:c3:08:21:01:64:74:ba:3c:5e:18:
6f:fe:5d:f5:53:17:b6:6c:1b:16:4c:24:f1:9b:d7:08:30:4b:
3e:20:52:a7:2c:82:18:46:35:dd:45:ee:33:d9:8d:40:1f:11:
33:24:98:4e:a2:b2:f3:56:98:fa:a3:81:10:de:f7:dd:ac:39:
3a:e7:dd:2d:81:94:cf:87:b9:3e:1e:05:9c:80:05:7a:ac:2c:
22:56:fe:f6:6a:cf:83:35:93:06:cb:7a:b8:22:cc:1a:37:75:
a1:41:7d:e8:50:70:cb:65:30:23:3a:27:a8:96:ac:07:94:7e:
3c:e1:19:1f:c2:80:cd:f4:24:3f:a1:16:37:d1:de:52:a1:c2:
01:92:a4:de:71:4b:9d:18:9f:33:e5:c5:48:64:b5:3b:15:ca:
a4:62:5a:39:ce:bd:5a:5c:63:49:14:32:3f:ee:d2:a7:4b:2d:
eb:0c:f5:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YMEb0G350e7X0gqs8jggHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYjQyMWI4MmFiN2JiYTZlMmY1NWU5MDJhOWZiODFmYTNh
ZjI5OGYwHhcNMjYwNjMwMTEwMDQ0WhcNMjYwNzAxMTEwMDQ0WjAzMTEwLwYDVQQD
Eyg0MjAwYWY2YmE5ZTNlNmZhYTc4YTE0MWM1MzE4ZWI2NGYzZDRkOTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKRZ+rNweTAPX0UxJC8KnvFHqSHt
TAac9nms/51zMnz4PwhoDttLOFxF5Xc4m+aFCjXabeoF8KMFNvzM4gN00+NXnZhq
DN5BBHvUyYJOBG93lySPqoEUWLe9afVtysa5sEiOMZjD7D1A2bOhSKcuIk1BWxSS
hcFdvP2MiEJs24z2fOYR3CBgkXpPOPWJcb3L2khzNcecw91Kc5NpbZu1Ya6CeX48
ipnqdZnqY/8RYo70tE6JGiXEXgvCjTDqrQj/Pm17mWCmGXJtrCGUYbwe8Lau327T
NzpvhV6YUydTI021rz6F/aXT7PV2lKnfuyPxeXYs0BPRrlKz3q+isSBTUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIAr2up4+b6p4oUHFMY62Tz1NlbMB8GA1UdIwQY
MBaAFBO0Ibgqt7um4vVekCqfuB+jrymPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTdRaHVDcTN1NmJpOVY2UUtwLTRINk92S1k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wNTMzMTAtMDNhZi00NDM0LTgzMDct
ZGZhNzA3OTQwNTM3LzEvRTdRaHVDcTN1NmJpOVY2UUtwLTRINk92S1k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8wNTMzMTAtMDNhZi00NDM0LTgzMDctZGZhNzA3OTQwNTM3
LzEvRTdRaHVDcTN1NmJpOVY2UUtwLTRINk92S1k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuzb8Jmc
PcB+l47BytVGugkt/w8RHGMyZanm0zaZCLP5tjXkj+C14lz2AMubBTc3SWbdCISo
ta+7BA3E0czBk3xXX45mOfKT936PFvdxpo3DCCEBZHS6PF4Yb/5d9VMXtmwbFkwk
8ZvXCDBLPiBSpyyCGEY13UXuM9mNQB8RMySYTqKy81aY+qOBEN733aw5OufdLYGU
z4e5Ph4FnIAFeqwsIlb+9mrPgzWTBst6uCLMGjd1oUF96FBwy2UwIzonqJasB5R+
POEZH8KAzfQkP6EWN9HeUqHCAZKk3nFLnRifM+XFSGS1OxXKpGJaOc69WlxjSRQy
P+7Sp0st6wz1yA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:06 2026 by rpki-client