Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
File: 13mWjmbtvqNy75W6or9okThWekA.mft (raw, json)
Hash identifier: pU17kmeJmHAV6/F95QUx5eN+N+THbskjVhS77FcQFZI=
Subject key identifier: 1C:98:56:64:8A:7F:C3:2A:75:8D:BA:49:22:B6:0D:B6:16:A9:8B:2D
Authority key identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
Certificate issuer: /CN=d779968e66edbea372ef95baa2bf689138567a40
Certificate serial: 01A0E709EB52B16442BB3B58ED8FB9D29B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
Manifest number: 1A7A
Signing time: Mon 28 Sep 2026 08:03:02 +0000
Manifest this update: Mon 28 Sep 2026 08:03:02 +0000
Manifest next update: Tue 29 Sep 2026 08:03:02 +0000
Files and hashes: 1: 13mWjmbtvqNy75W6or9okThWekA.crl (hash: EcWsD8FvxZZ176JxfuXn0jTR3tXCC3mcjX8Tp1sE5zA=)
2: a2dGgMgkDvSFz9UvYkCXlH5tzZU.roa (hash: c2MCuHjIaTWBayfSiKP1qGbzAEWRP5fSSTHUf07P0Kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:09:eb:52:b1:64:42:bb:3b:58:ed:8f:b9:d2:9b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d779968e66edbea372ef95baa2bf689138567a40
Validity
Not Before: Sep 28 08:03:02 2026 GMT
Not After : Sep 29 08:03:02 2026 GMT
Subject: CN=1c9856648a7fc32a758dba4922b60db616a98b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:34:37:e3:3d:d8:17:a6:97:57:e0:dc:b5:e2:
03:d1:22:7f:4b:92:0b:57:35:69:9e:b7:53:35:68:
84:bf:fd:d5:c0:d2:98:d8:eb:f7:25:1c:f1:30:d6:
fb:5d:62:91:53:e7:e7:47:8c:cd:ae:73:98:a1:64:
e6:09:90:9c:de:c9:38:9b:00:2b:3c:a4:7c:94:50:
a7:fd:b0:eb:c5:4d:b8:fc:c1:5f:3e:18:45:15:ef:
c0:86:1c:27:87:d9:de:15:00:d5:96:f7:d0:0d:b1:
76:34:39:c3:84:f7:33:25:ac:21:84:76:1f:06:ed:
c7:04:cc:e1:96:55:9c:06:55:22:04:cb:11:05:61:
f5:38:f5:3d:77:48:2f:db:6b:fa:6f:62:8e:f6:96:
aa:22:97:27:2a:b2:98:8b:29:f1:dc:ce:1f:9e:71:
3f:9b:da:6e:66:ee:7f:10:00:ef:bd:a8:74:0b:30:
56:c3:50:f6:c6:1a:c0:98:de:68:51:13:20:44:72:
d3:8b:0d:c3:8f:a0:1b:88:e5:1f:66:aa:ac:23:34:
82:97:ee:c9:6c:c3:fa:3f:00:79:2d:0a:1f:21:25:
9d:6d:75:9a:a8:a7:c3:98:4f:5e:e0:0c:20:46:1f:
57:d5:b7:b4:43:8e:66:b1:53:80:1f:72:77:5d:6a:
78:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:98:56:64:8A:7F:C3:2A:75:8D:BA:49:22:B6:0D:B6:16:A9:8B:2D
X509v3 Authority Key Identifier:
keyid:D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1b:4e:aa:b8:c2:3a:df:6b:35:c1:8d:6a:8a:30:9b:ac:7e:
b3:af:a2:fe:84:47:91:4a:47:28:44:0e:81:21:4a:b7:15:2f:
90:11:f5:2b:f1:ff:96:01:47:e0:6e:32:1e:67:d2:61:e9:25:
51:bd:e8:d9:f4:be:12:a8:cb:98:e3:de:1f:c8:ab:96:18:02:
d6:73:15:62:54:7e:d4:0e:83:3e:32:b7:06:64:03:2c:b3:dd:
c4:c6:69:3b:f2:72:11:45:0a:57:19:3c:62:67:86:27:65:71:
68:62:8b:aa:de:86:a5:b8:3b:0e:fa:c1:69:74:47:75:bd:f3:
68:11:d1:b0:2c:8d:ef:04:5f:12:43:ae:f0:87:d6:90:4f:6b:
5e:71:8e:73:42:6e:0a:ff:83:1c:ce:41:39:f9:95:54:49:7a:
1b:c7:18:71:a2:6d:fb:de:5c:1b:43:fb:1b:0b:77:e4:29:ed:
d1:41:ef:3c:c7:16:75:b6:f1:70:f0:16:b7:99:f7:20:42:ff:
30:d7:6c:77:b6:fe:2b:c1:c9:84:3f:5b:dc:1a:84:12:e1:4b:
94:fc:08:76:cf:73:33:8a:ba:72:99:48:c8:3f:13:df:f0:b0:
94:ee:5a:0d:39:9e:cc:f6:e5:1b:03:62:2b:39:32:92:ce:74:
9e:f7:cb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 15:38:20 2026 by rpki-client