
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
File: 13eUOzQRiOnNLpPeKIsz_-BBx9I.mft (raw, json)
Hash identifier: gZ31dXU0BwNDVNU1i9kZBHXJeEk3Vsv9GeawdGmyq1w=
Subject key identifier: 3A:C7:61:57:3F:45:39:71:A8:60:4A:BF:36:30:93:B2:F1:2F:C5:9D
Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
Certificate issuer: /CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Certificate serial: 019E1CEB50A31E140B4FDAF496CC5EEEB435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 16:00:44 +0000
Manifest this update: Tue 12 May 2026 16:00:44 +0000
Manifest next update: Wed 13 May 2026 16:00:44 +0000
Files and hashes: 1: 13eUOzQRiOnNLpPeKIsz_-BBx9I.crl (hash: /e1YcE74XJYNhZvgEZ1rhKqRRDj0e4cc7WL2tTis//A=)
2: hyElpaRCi-O3ttxNPiq_tbabKaM.roa (hash: utFwv7iVQh6KFUfFUAR5z2o9lvR/OP856LSn2YX8Pbs=)
3: sxVjjTuZsumW0h6mF4GiRANgUvg.roa (hash: z5zoee9BxxfVBHQHis7Mo+eHgddxsrIvf3XwtD1/H80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:50:a3:1e:14:0b:4f:da:f4:96:cc:5e:ee:b4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Validity
Not Before: May 12 16:00:44 2026 GMT
Not After : May 13 16:00:44 2026 GMT
Subject: CN=3ac761573f453971a8604abf363093b2f12fc59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d8:eb:74:12:75:45:c5:e8:d1:04:77:0f:ad:
cc:f8:1b:81:59:45:e1:35:f5:9c:fa:30:3b:44:4d:
37:8e:2b:f0:92:af:f6:34:3e:87:f7:9d:47:0f:96:
19:14:3a:93:ea:28:1b:ff:d7:de:77:dc:01:99:31:
e6:2e:05:f7:01:63:5a:ac:bb:a9:7e:04:cd:54:08:
db:c0:69:23:31:db:ad:c2:66:d2:d9:cd:03:72:41:
30:73:91:48:c8:78:c3:24:8c:b1:39:e7:d4:4f:87:
b5:91:ef:23:98:73:f2:6c:de:db:4c:7b:1b:35:a2:
0e:0d:5a:ba:d6:b8:a0:3c:96:60:13:e5:e4:28:5f:
1c:fb:ac:88:d5:b0:b3:bc:b2:6b:54:45:a3:51:5e:
98:6e:9b:1e:17:d5:15:bd:af:8e:99:c9:1e:9e:1f:
98:4e:3a:4f:ac:09:b9:7c:bf:02:eb:3a:2b:e7:d4:
66:f4:2f:2b:ec:3d:76:39:52:d8:29:55:52:2e:49:
4d:f7:fb:59:76:29:a7:c0:25:14:a9:90:a7:55:57:
0c:e6:f9:b3:72:6f:33:1e:97:d6:4f:f2:b0:eb:29:
4d:fc:fd:2a:e4:92:20:31:cb:28:e9:b3:f2:a7:c7:
e6:56:a5:97:b0:f7:39:90:78:e3:c9:13:2b:16:ee:
01:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C7:61:57:3F:45:39:71:A8:60:4A:BF:36:30:93:B2:F1:2F:C5:9D
X509v3 Authority Key Identifier:
keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6c:b0:41:02:71:4b:f4:7a:c9:08:d2:06:e0:65:3f:50:d1:
70:db:c6:45:f7:24:5e:27:b2:0e:0e:b3:c7:bd:6f:99:8e:bb:
83:81:c7:f3:b6:b9:de:68:8c:ed:37:38:6b:9d:4c:32:e7:f9:
81:f1:d4:8a:93:a6:b3:d7:6f:c0:cf:13:56:b0:f4:08:2d:f2:
91:f4:34:ee:d1:d2:ef:da:6d:3b:6f:e5:ad:42:de:a9:f8:e0:
4e:73:84:78:32:cb:4d:0e:36:fd:22:7f:b7:ce:b5:04:b0:a2:
84:ba:99:ff:c3:fd:dc:52:98:5d:a6:8e:be:c9:9a:c0:84:c0:
55:fa:e1:32:d8:96:cf:14:5c:8b:96:d3:5c:82:b0:05:0d:0b:
80:d6:dd:5f:d6:c5:21:14:3f:0c:3d:2f:d1:33:a5:b9:8a:95:
86:62:ac:b9:58:8e:08:e0:63:1e:03:b1:01:7d:21:4c:bb:d3:
04:30:13:ca:d8:ef:c3:a3:cf:77:ae:b5:8a:fc:14:0b:bc:25:
2b:5e:b3:92:e8:47:fe:43:39:3c:28:7e:c2:2d:2d:cc:9e:54:
2d:55:e8:ad:ca:47:50:db:2d:cf:2c:62:48:06:5b:26:41:65:
c1:8b:92:75:ab:52:02:f5:6d:d4:49:2f:2e:37:34:6f:c1:d9:
c7:a0:e4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:49:41 2026 by rpki-client