Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/801e95-62ba-42cd-b8ba-237b5d41af65/1/Ek9FSJdR7bdg5nMi9lqQykncpB4.mft
File: Ek9FSJdR7bdg5nMi9lqQykncpB4.mft (raw, json)
Hash identifier: VC2WwBmsdeUgxFLfRqlzaG4ef5apwwa5698U5uoOBq4=
Subject key identifier: E1:DE:35:3F:38:1F:07:46:65:4D:5A:41:8F:75:64:5C:9F:54:E4:74
Authority key identifier: 12:4F:45:48:97:51:ED:B7:60:E6:73:22:F6:5A:90:CA:49:DC:A4:1E
Certificate issuer: /CN=124f45489751edb760e67322f65a90ca49dca41e
Certificate serial: 019D3A1CFF1FB67FCCA08E056E720E1B5A0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ek9FSJdR7bdg5nMi9lqQykncpB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/801e95-62ba-42cd-b8ba-237b5d41af65/1/Ek9FSJdR7bdg5nMi9lqQykncpB4.mft
Manifest number: 13
Signing time: Sun 29 Mar 2026 15:01:12 +0000
Manifest this update: Sun 29 Mar 2026 15:01:12 +0000
Manifest next update: Mon 30 Mar 2026 15:01:12 +0000
Files and hashes: 1: Ek9FSJdR7bdg5nMi9lqQykncpB4.crl (hash: mUbWu814DCvZllmcNZm9ASYOGbrHGBU5X9C+WUUoAsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/801e95-62ba-42cd-b8ba-237b5d41af65/1/Ek9FSJdR7bdg5nMi9lqQykncpB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/801e95-62ba-42cd-b8ba-237b5d41af65/1/Ek9FSJdR7bdg5nMi9lqQykncpB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ek9FSJdR7bdg5nMi9lqQykncpB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:ff:1f:b6:7f:cc:a0:8e:05:6e:72:0e:1b:5a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=124f45489751edb760e67322f65a90ca49dca41e
Validity
Not Before: Mar 29 15:01:12 2026 GMT
Not After : Mar 30 15:01:12 2026 GMT
Subject: CN=e1de353f381f0746654d5a418f75645c9f54e474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:9b:28:19:17:51:46:5f:35:9e:1f:50:d4:
52:6b:74:f4:87:85:1a:82:e6:46:be:fb:0b:d3:d9:
5b:bf:f0:8e:1f:72:0d:9f:36:ea:25:cb:0a:ff:f6:
7f:0c:8b:bc:21:e8:f4:ce:64:c2:34:04:a0:9f:d0:
dd:b9:ff:b9:2e:48:d4:49:25:16:02:68:98:af:d2:
2a:f5:fc:54:e0:0e:e9:3f:05:c9:1f:cf:1d:ff:eb:
73:27:aa:84:2e:90:5f:38:8b:e9:3b:a2:f2:03:1e:
53:9d:6f:66:90:b9:60:1c:f9:45:1c:c9:b4:81:15:
c1:f7:b9:11:78:ed:93:ad:90:01:93:4f:85:28:5b:
49:e5:ef:26:b6:15:fa:b5:b6:fc:ac:33:dc:ab:1a:
8a:e6:56:61:5a:0d:13:04:82:ca:a0:9d:27:7c:6d:
bd:e0:6b:9d:7d:b9:00:e4:d2:9a:e1:e7:9d:80:25:
34:e2:c8:b9:b4:61:fd:f1:4f:03:16:2f:ba:f9:bf:
ea:d9:01:3d:75:02:de:10:2f:f4:a8:4c:8c:d1:79:
11:c0:e3:e5:de:da:37:fe:bc:a5:f9:96:b1:2d:bc:
72:6c:7b:c0:74:7d:41:da:37:2d:7b:88:ee:65:17:
3c:7b:e1:f3:dd:96:4c:8d:71:de:6c:85:aa:d7:74:
c0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DE:35:3F:38:1F:07:46:65:4D:5A:41:8F:75:64:5C:9F:54:E4:74
X509v3 Authority Key Identifier:
keyid:12:4F:45:48:97:51:ED:B7:60:E6:73:22:F6:5A:90:CA:49:DC:A4:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ek9FSJdR7bdg5nMi9lqQykncpB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/801e95-62ba-42cd-b8ba-237b5d41af65/1/Ek9FSJdR7bdg5nMi9lqQykncpB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/801e95-62ba-42cd-b8ba-237b5d41af65/1/Ek9FSJdR7bdg5nMi9lqQykncpB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:34:3e:67:54:36:e6:85:77:bd:2f:21:94:7d:b8:26:41:9e:
dd:ff:e5:4d:ca:36:7c:57:3d:29:a6:60:19:58:ee:4a:26:df:
37:01:9d:5d:f1:96:e8:80:c0:4e:28:51:66:74:99:a2:95:7c:
0a:e2:42:6f:c4:a9:6f:02:e7:d5:5b:63:de:39:d4:1d:c1:47:
cb:f1:5e:18:7b:02:99:31:97:cc:5a:12:b3:b1:7d:f5:76:80:
4a:93:ef:4c:cf:f7:12:8c:aa:2c:21:65:61:3b:d6:dd:d0:dd:
82:f6:68:2b:41:0e:36:ca:6d:2d:6a:e2:9f:ae:25:86:c2:a8:
98:cb:1b:d0:3c:49:55:a2:eb:7e:62:76:c4:59:16:4f:ae:a0:
23:fa:40:13:fe:26:07:0d:92:8a:cb:72:fc:44:07:6f:e3:78:
1c:81:cb:f2:6d:a4:47:43:34:7c:30:51:6e:5d:4a:cc:a4:a7:
a2:14:6e:91:9d:03:73:48:08:a7:50:fa:75:eb:d2:eb:bb:a6:
67:8b:a3:48:8f:0d:43:12:f1:dd:e9:b6:0d:87:83:61:55:ec:
4c:90:8f:94:b0:5a:4b:d9:fc:b1:a1:b1:3c:00:73:06:d6:e0:
23:c4:aa:45:06:fd:4d:5d:99:6f:fe:88:62:61:15:3e:38:9e:
74:c7:0a:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HP8ftn/MoI4FbnIOG1oMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNGY0NTQ4OTc1MWVkYjc2MGU2NzMyMmY2NWE5MGNhNDlk
Y2E0MWUwHhcNMjYwMzI5MTUwMTEyWhcNMjYwMzMwMTUwMTEyWjAzMTEwLwYDVQQD
EyhlMWRlMzUzZjM4MWYwNzQ2NjU0ZDVhNDE4Zjc1NjQ1YzlmNTRlNDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfWbKBkXUUZfNZ4fUNRSa3T0h4Ua
guZGvvsL09lbv/COH3INnzbqJcsK//Z/DIu8Iej0zmTCNASgn9Dduf+5LkjUSSUW
AmiYr9Iq9fxU4A7pPwXJH88d/+tzJ6qELpBfOIvpO6LyAx5TnW9mkLlgHPlFHMm0
gRXB97kReO2TrZABk0+FKFtJ5e8mthX6tbb8rDPcqxqK5lZhWg0TBILKoJ0nfG29
4GudfbkA5NKa4eedgCU04si5tGH98U8DFi+6+b/q2QE9dQLeEC/0qEyM0XkRwOPl
3to3/ryl+ZaxLbxybHvAdH1B2jcte4juZRc8e+Hz3ZZMjXHebIWq13TAnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHeNT84HwdGZU1aQY91ZFyfVOR0MB8GA1UdIwQY
MBaAFBJPRUiXUe23YOZzIvZakMpJ3KQeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWs5RlNKZFI3YmRnNW5NaTlscVF5a25jcEI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS84MDFlOTUtNjJiYS00MmNkLWI4YmEt
MjM3YjVkNDFhZjY1LzEvRWs5RlNKZFI3YmRnNW5NaTlscVF5a25jcEI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS84MDFlOTUtNjJiYS00MmNkLWI4YmEtMjM3YjVkNDFhZjY1
LzEvRWs5RlNKZFI3YmRnNW5NaTlscVF5a25jcEI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzQ+Z1Q2
5oV3vS8hlH24JkGe3f/lTco2fFc9KaZgGVjuSibfNwGdXfGW6IDATihRZnSZopV8
CuJCb8SpbwLn1Vtj3jnUHcFHy/FeGHsCmTGXzFoSs7F99XaASpPvTM/3EoyqLCFl
YTvW3dDdgvZoK0EONsptLWrin64lhsKomMsb0DxJVaLrfmJ2xFkWT66gI/pAE/4m
Bw2Sisty/EQHb+N4HIHL8m2kR0M0fDBRbl1KzKSnohRukZ0Dc0gIp1D6devS67um
Z4ujSI8NQxLx3em2DYeDYVXsTJCPlLBaS9n8saGxPABzBtbgI8SqRQb9TV2Zb/6I
YmEVPjiedMcKIg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:28 2026 by rpki-client