Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
File: 13yGmob-yDN5Pu7azNSx98pEM-k.mft (raw, json)
Hash identifier: fhcyJh7u439z1jQLzkUCSAoGU2IAZ+MECnltPhDLU+k=
Subject key identifier: 25:AD:2B:EB:98:53:5D:29:9C:F0:D8:CC:22:45:56:EE:35:F5:4D:0F
Authority key identifier: D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
Certificate issuer: /CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Certificate serial: 01A1DFBA5751374CA6BED265B406B41FB534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
Manifest number: 18DF
Signing time: Sun 15 Nov 2026 15:01:33 +0000
Manifest this update: Sun 15 Nov 2026 15:01:33 +0000
Manifest next update: Mon 16 Nov 2026 15:01:33 +0000
Files and hashes: 1: 13yGmob-yDN5Pu7azNSx98pEM-k.crl (hash: gy1tQCd/POduJYOtGrrOJXB57vYFCjXVSMda7CiZonc=)
2: H3UZwuAp9rSpSKUa2W4mA_Q1udI.roa (hash: 1AEX5MF9asrj6WNrnWzO3bQ5bregGi6ctVtR6cHklb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:57:51:37:4c:a6:be:d2:65:b4:06:b4:1f:b5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Validity
Not Before: Nov 15 15:01:33 2026 GMT
Not After : Nov 16 15:01:33 2026 GMT
Subject: CN=25ad2beb98535d299cf0d8cc224556ee35f54d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:16:81:62:b4:93:ca:49:fd:6b:41:50:0d:
dc:ba:f7:26:d0:61:0c:5a:f3:87:77:3d:df:1f:d4:
2d:4a:b8:f2:88:94:a9:a7:17:81:42:48:dd:52:d8:
87:bd:d7:f9:4b:bb:3d:52:33:23:c1:73:ec:88:6c:
75:fe:a0:71:61:b2:e6:b8:02:21:3f:70:3a:09:e2:
ca:df:20:39:aa:7c:50:7b:04:67:f6:54:05:64:96:
b5:02:ae:ee:4d:5f:c0:39:64:65:b5:68:ed:cf:20:
38:41:17:84:a6:cc:84:71:e9:34:c9:a4:3c:be:96:
01:f4:09:f1:5b:f1:7c:09:33:5c:42:aa:88:d5:f4:
0c:5c:28:a5:db:ba:92:20:9a:d2:1b:d5:d4:5e:09:
9e:88:fb:cb:06:d3:e9:f9:a4:53:0e:cc:93:c4:3a:
1c:57:16:9c:79:98:79:51:65:82:e9:5b:89:07:1a:
97:ee:88:6b:eb:d2:0a:7e:d0:11:3b:27:59:28:4e:
86:2c:19:ee:78:53:e7:6e:df:4d:26:08:80:02:49:
ec:d8:e5:2a:e6:44:9e:6e:84:d1:40:d6:82:c9:01:
9f:00:0a:4d:be:8a:06:05:2d:df:74:dd:b5:bf:38:
6b:b5:4d:04:d1:02:74:52:52:bc:78:ba:2b:5c:69:
1d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AD:2B:EB:98:53:5D:29:9C:F0:D8:CC:22:45:56:EE:35:F5:4D:0F
X509v3 Authority Key Identifier:
keyid:D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:bd:70:b6:52:9a:8b:02:e7:f0:9d:e5:fe:82:60:7f:32:ef:
59:3a:5b:a1:60:3c:e8:99:5a:af:dc:ca:a9:2f:94:f9:2f:14:
51:27:c7:4b:c4:88:40:26:d2:10:e0:ec:72:42:a1:04:5b:37:
b8:2f:bf:62:0a:0d:12:db:5c:c7:56:9d:97:3d:1a:85:b5:7d:
91:f7:13:89:b4:bd:bc:a7:d9:06:31:83:3a:dd:e6:27:b0:dd:
01:0a:c3:67:02:c2:7a:cd:b6:65:23:6f:b7:da:50:a3:a3:2e:
4a:2b:3e:a7:ed:24:7a:95:4c:8c:01:97:df:00:0f:e8:74:a5:
90:18:31:ee:ec:44:31:a9:a0:08:47:e9:29:e4:03:e5:49:07:
cd:09:9a:36:2b:a8:db:62:aa:54:ab:14:dd:e7:07:69:59:69:
8a:0f:c3:f3:3c:37:71:3d:39:c8:f8:7b:b5:31:24:66:96:7e:
8d:ba:f8:95:9c:ba:b5:ae:90:4e:4e:81:0e:c1:46:c1:ec:da:
80:65:df:18:e1:fe:1a:2d:77:73:21:b9:5c:53:3d:9c:5b:b2:
40:e6:6d:da:da:b7:fe:11:1d:74:c8:49:ee:03:c2:4f:49:73:
5a:a0:ac:06:f7:12:0d:bb:4b:d8:d6:b8:cc:71:6f:41:3e:46:
cc:27:9a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:08:42 2026 by rpki-client