Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
File: 13mWjmbtvqNy75W6or9okThWekA.mft (raw, json)
Hash identifier: qE5slOhPuYPcB2t5p0t9bbENky7JDatjJfWaLtoUJrs=
Subject key identifier: 89:71:CC:2B:ED:7E:12:A0:0F:83:D9:12:06:F2:4B:67:50:CC:6A:BE
Authority key identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
Certificate issuer: /CN=d779968e66edbea372ef95baa2bf689138567a40
Certificate serial: 019E1C7DE9D32C1CB59FA1D82BE5BE7181B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 14:01:14 +0000
Manifest this update: Tue 12 May 2026 14:01:14 +0000
Manifest next update: Wed 13 May 2026 14:01:14 +0000
Files and hashes: 1: 13mWjmbtvqNy75W6or9okThWekA.crl (hash: ZXot6QHX8BXjKuvLE4nhnYjbxGeUSI8eWj23oz/F6NE=)
2: a2dGgMgkDvSFz9UvYkCXlH5tzZU.roa (hash: c2MCuHjIaTWBayfSiKP1qGbzAEWRP5fSSTHUf07P0Kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:e9:d3:2c:1c:b5:9f:a1:d8:2b:e5:be:71:81:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d779968e66edbea372ef95baa2bf689138567a40
Validity
Not Before: May 12 14:01:14 2026 GMT
Not After : May 13 14:01:14 2026 GMT
Subject: CN=8971cc2bed7e12a00f83d91206f24b6750cc6abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:7c:da:e7:9c:97:e3:35:69:77:94:0b:8d:
a7:73:32:fa:8a:28:77:31:a3:14:f4:c7:c7:2e:f1:
f0:60:7d:42:3e:ac:4a:13:e1:19:b0:e0:36:dc:15:
6d:e7:6f:6c:cc:95:87:fc:2f:82:4d:e8:ab:cc:2f:
a4:eb:49:2e:fd:30:47:31:ba:31:ff:9a:36:4d:cd:
18:57:ef:2a:22:25:f0:3d:e4:4e:81:23:66:9c:3d:
b3:11:be:2a:62:e3:1a:75:49:0e:da:6e:f1:10:45:
03:e3:2d:31:12:71:41:cf:ab:b3:a7:12:ff:70:2a:
49:d8:6e:5d:8c:c9:5d:76:17:58:2e:90:e9:01:4a:
d1:ec:bd:46:07:04:4d:2e:bd:32:88:5f:03:b3:e3:
16:32:d6:6d:33:81:f1:18:a0:69:88:0c:fb:c2:e8:
b6:0b:f6:52:1e:55:14:eb:dd:5c:e6:5d:ff:17:5e:
8d:44:85:2c:90:39:a5:8f:ab:38:bd:ec:40:50:65:
48:f1:0a:63:d0:0e:d2:23:23:6e:1e:e0:68:1c:c6:
b4:ef:ff:8a:89:1a:a6:2f:3a:5d:41:d9:5b:66:fd:
03:0d:7b:f6:30:a0:52:5e:df:c6:9c:04:0f:c3:e4:
3b:8a:fb:ef:7e:ce:91:a8:82:7f:e7:02:91:c3:6b:
dc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:71:CC:2B:ED:7E:12:A0:0F:83:D9:12:06:F2:4B:67:50:CC:6A:BE
X509v3 Authority Key Identifier:
keyid:D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5c:c5:ec:e9:ba:26:da:4d:21:79:b8:b5:e1:d4:08:ab:95:
89:8e:f0:60:8e:0d:80:44:b3:1c:ad:e4:0e:b7:46:5c:5b:35:
55:4a:c6:ef:f9:ad:47:5c:85:d8:ab:4b:34:eb:ff:1e:c7:61:
c6:6b:1b:90:9a:70:d8:ea:f7:de:0e:c9:fa:92:fc:b2:11:c6:
7f:83:db:e3:24:6c:8c:cd:1d:cd:5d:3a:ab:e9:b3:85:8a:20:
2a:e1:12:88:03:e2:34:c7:9e:98:da:6e:10:77:77:7f:08:c1:
1b:46:b5:a5:24:d2:70:e1:c8:43:0d:86:de:be:88:03:7a:20:
f4:28:6c:27:e6:bd:45:56:21:85:60:6c:0a:b0:f1:21:9c:ad:
c4:a8:b0:37:5a:fa:78:1a:70:3c:18:6a:34:1f:18:27:8c:88:
db:47:5e:17:38:61:ff:5a:16:c3:ef:3b:7d:39:5e:83:5a:e3:
6c:0e:53:a9:69:9c:97:57:45:b6:aa:ed:87:d5:cb:48:a3:65:
e3:3e:fc:58:6d:93:e5:dd:e9:6e:40:b3:d2:97:41:b0:f8:ef:
f7:e4:79:bd:c2:84:2f:57:9b:f0:22:47:5f:24:d1:64:c6:16:
43:4b:d5:4a:fa:36:0a:d6:20:0a:b0:f9:9c:76:1d:5c:2b:ec:
c6:af:b0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:20:48 2026 by rpki-client