Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
File: E2elkhpPFIx4qmwh-E8s_I2I6ck.mft (raw, json)
Hash identifier: 4TjxKN4QqgI94Q5cKCX1xBvEspBp+c285WcWzhoCDac=
Subject key identifier: A0:34:9D:99:2B:22:40:5F:83:9A:07:7D:7F:53:9E:82:26:5E:E4:50
Authority key identifier: 13:67:A5:92:1A:4F:14:8C:78:AA:6C:21:F8:4F:2C:FC:8D:88:E9:C9
Certificate issuer: /CN=1367a5921a4f148c78aa6c21f84f2cfc8d88e9c9
Certificate serial: 01A1464DBFA7F441A2EF432553980C67F0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
Manifest number: 1AA6
Signing time: Fri 16 Oct 2026 20:01:02 +0000
Manifest this update: Fri 16 Oct 2026 20:01:02 +0000
Manifest next update: Sat 17 Oct 2026 20:01:02 +0000
Files and hashes: 1: E2elkhpPFIx4qmwh-E8s_I2I6ck.crl (hash: QkLz+IFR3gdChrHi0MCZW+1T9n7NUOmyx7FPv34MQXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:4d:bf:a7:f4:41:a2:ef:43:25:53:98:0c:67:f0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1367a5921a4f148c78aa6c21f84f2cfc8d88e9c9
Validity
Not Before: Oct 16 20:01:02 2026 GMT
Not After : Oct 17 20:01:02 2026 GMT
Subject: CN=a0349d992b22405f839a077d7f539e82265ee450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a2:cf:8b:8a:e1:a6:8e:7c:52:b5:78:bf:54:
dc:12:dd:f3:07:11:16:35:eb:64:7d:06:e8:e2:08:
0b:f7:2b:50:0d:cc:57:71:62:f5:f0:15:c1:4d:fd:
d6:94:e5:57:4f:02:1d:cf:68:b5:8e:50:6a:9e:9b:
5d:d5:2d:39:d3:3d:54:07:ed:3f:dd:0e:2d:f9:a5:
28:17:e3:b5:6e:61:c6:6d:f6:a9:7e:48:cf:dc:42:
f7:51:85:e3:94:b9:0e:7a:7b:ec:a4:cc:90:2c:d7:
02:95:82:61:8f:a7:16:05:5a:05:62:3c:69:2c:d0:
32:37:4f:a3:74:17:91:f2:97:e0:94:5e:48:c7:74:
58:63:25:ba:29:0b:01:c3:75:9d:5c:5c:db:c8:94:
c9:c8:c7:90:bc:1f:db:00:88:16:f3:10:ba:fa:5e:
12:10:99:0b:02:31:9c:88:c9:df:3e:d4:04:22:2d:
d3:0f:e7:25:42:62:83:40:3a:b2:ef:03:33:6f:77:
c3:85:66:ab:06:ab:10:44:00:24:ff:60:35:29:82:
0d:34:0a:72:20:e7:f1:f8:7c:8a:a1:3d:e8:ef:1c:
ae:eb:98:9f:1e:13:15:d1:b5:f4:da:6f:28:ff:71:
8c:54:1e:5b:e1:bb:d8:a5:da:76:80:aa:f8:e6:1a:
5b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:34:9D:99:2B:22:40:5F:83:9A:07:7D:7F:53:9E:82:26:5E:E4:50
X509v3 Authority Key Identifier:
keyid:13:67:A5:92:1A:4F:14:8C:78:AA:6C:21:F8:4F:2C:FC:8D:88:E9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:60:5e:97:97:0a:1a:78:ac:52:d6:fb:fb:76:bb:d2:31:9a:
b7:0f:37:2c:b1:2c:82:39:2f:aa:13:97:ce:f9:74:2f:e1:34:
a7:04:70:bd:5f:a7:ba:bf:61:e5:35:75:e2:7e:e3:aa:de:1e:
fa:d0:fd:74:db:ee:17:f8:a0:2d:e9:55:a6:f1:e4:aa:05:ab:
5c:e7:73:62:84:98:5c:a6:bc:a6:70:1d:a2:46:ff:20:0a:06:
38:5b:6b:d1:1f:0b:2d:2b:74:85:72:f8:bd:77:95:28:22:d0:
1d:90:b6:3f:39:81:e9:1c:c1:c7:f7:9b:5c:e7:3c:22:3b:a7:
9f:d6:f6:29:0d:c9:75:e1:ce:b3:5b:e8:3e:60:64:33:7b:bf:
05:4d:c7:70:f1:c7:2b:a5:0c:78:c1:4e:4c:93:21:8a:a6:0c:
05:bb:ba:15:84:0d:56:5c:aa:73:73:64:eb:d6:ad:2f:bf:56:
da:fb:f4:bd:19:a5:38:81:28:ec:10:d0:d9:55:db:5f:5d:aa:
ef:45:4f:2c:8c:24:37:78:7f:15:8a:73:d3:4c:72:83:df:83:
e6:83:d2:19:77:75:40:f0:b3:50:91:3d:71:bb:88:13:8c:94:
b3:48:65:21:2a:00:bb:83:2e:01:0e:4f:9f:9f:40:c2:ca:6f:
89:f3:40:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFGTb+n9EGi70MlU5gMZ/C0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNjdhNTkyMWE0ZjE0OGM3OGFhNmMyMWY4NGYyY2ZjOGQ4
OGU5YzkwHhcNMjYxMDE2MjAwMTAyWhcNMjYxMDE3MjAwMTAyWjAzMTEwLwYDVQQD
EyhhMDM0OWQ5OTJiMjI0MDVmODM5YTA3N2Q3ZjUzOWU4MjI2NWVlNDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qLPi4rhpo58UrV4v1TcEt3zBxEW
NetkfQbo4ggL9ytQDcxXcWL18BXBTf3WlOVXTwIdz2i1jlBqnptd1S050z1UB+0/
3Q4t+aUoF+O1bmHGbfapfkjP3EL3UYXjlLkOenvspMyQLNcClYJhj6cWBVoFYjxp
LNAyN0+jdBeR8pfglF5Ix3RYYyW6KQsBw3WdXFzbyJTJyMeQvB/bAIgW8xC6+l4S
EJkLAjGciMnfPtQEIi3TD+clQmKDQDqy7wMzb3fDhWarBqsQRAAk/2A1KYINNApy
IOfx+HyKoT3o7xyu65ifHhMV0bX02m8o/3GMVB5b4bvYpdp2gKr45hpbfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKA0nZkrIkBfg5oHfX9TnoImXuRQMB8GA1UdIwQY
MBaAFBNnpZIaTxSMeKpsIfhPLPyNiOnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTJlbGtocFBGSXg0cW13aC1FOHNfSTJJNmNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9kYjc1NWEtMWRiOS00YTY5LWE5YmQt
NGY1ZWIyYzg4YzI4LzEvRTJlbGtocFBGSXg0cW13aC1FOHNfSTJJNmNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9kYjc1NWEtMWRiOS00YTY5LWE5YmQtNGY1ZWIyYzg4YzI4
LzEvRTJlbGtocFBGSXg0cW13aC1FOHNfSTJJNmNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWBel5cK
GnisUtb7+3a70jGatw83LLEsgjkvqhOXzvl0L+E0pwRwvV+nur9h5TV14n7jqt4e
+tD9dNvuF/igLelVpvHkqgWrXOdzYoSYXKa8pnAdokb/IAoGOFtr0R8LLSt0hXL4
vXeVKCLQHZC2PzmB6RzBx/ebXOc8Ijunn9b2KQ3JdeHOs1voPmBkM3u/BU3HcPHH
K6UMeMFOTJMhiqYMBbu6FYQNVlyqc3Nk69atL79W2vv0vRmlOIEo7BDQ2VXbX12q
70VPLIwkN3h/FYpz00xyg9+D5oPSGXd1QPCzUJE9cbuIE4yUs0hlISoAu4MuAQ5P
n59AwspvifNAsw==
-----END CERTIFICATE-----
Generated at Sat Oct 17 05:50:43 2026 by rpki-client