Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
File: 13eUOzQRiOnNLpPeKIsz_-BBx9I.mft (raw, json)
Hash identifier: cMpTWGpOeOQb5cB2z+FGJQKkQwXs67/V0wpIlWXzya8=
Subject key identifier: 87:24:7D:0A:D5:CF:B1:61:8E:B7:54:7B:BB:85:B2:CE:C9:81:E2:46
Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
Certificate issuer: /CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Certificate serial: 01A0DBE007721434EC583CB40A3E8D4FD633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 04:01:27 +0000
Manifest this update: Sat 26 Sep 2026 04:01:27 +0000
Manifest next update: Sun 27 Sep 2026 04:01:27 +0000
Files and hashes: 1: 13eUOzQRiOnNLpPeKIsz_-BBx9I.crl (hash: H72sS3uzUCF3W+IDEgZ3fTpUsWR39eG/EqmZYqGO88g=)
2: hyElpaRCi-O3ttxNPiq_tbabKaM.roa (hash: utFwv7iVQh6KFUfFUAR5z2o9lvR/OP856LSn2YX8Pbs=)
3: sxVjjTuZsumW0h6mF4GiRANgUvg.roa (hash: z5zoee9BxxfVBHQHis7Mo+eHgddxsrIvf3XwtD1/H80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:07:72:14:34:ec:58:3c:b4:0a:3e:8d:4f:d6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Validity
Not Before: Sep 26 04:01:27 2026 GMT
Not After : Sep 27 04:01:27 2026 GMT
Subject: CN=87247d0ad5cfb1618eb7547bbb85b2cec981e246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:d7:90:3f:69:fd:1b:f8:b8:26:a7:ac:bd:
b3:c5:39:38:39:3b:1b:bd:77:ef:61:b7:57:7d:34:
5b:2f:65:b8:ed:fe:ee:8d:38:44:48:ad:04:48:9d:
f6:e1:43:7b:d1:05:ad:0e:a6:91:ee:0d:9c:1e:9d:
3d:0c:6d:97:23:ce:14:e3:32:a7:3f:cf:e5:34:1b:
7d:10:7a:2a:58:66:0d:04:0c:2a:99:d3:19:8c:31:
e9:fe:b6:d3:46:81:85:0c:e4:98:37:0f:06:d0:6d:
9a:8c:ee:cf:3f:e2:ab:fe:91:57:4f:99:fb:23:ea:
e9:70:09:b4:e6:be:2f:b5:16:67:1f:e5:24:29:4b:
10:22:90:39:b8:c0:b3:a3:10:55:99:68:af:34:11:
a4:a7:13:35:1d:90:e1:08:65:79:d5:18:b4:e6:ae:
27:8f:cd:2e:d3:be:1c:77:bc:68:5b:ed:a3:67:90:
89:41:e0:55:d8:4c:7e:cf:7e:42:df:de:b3:9b:5a:
87:54:58:fc:51:6b:20:6b:71:df:26:03:2f:95:46:
4b:af:bc:5f:8a:c1:cc:6d:1a:17:72:c3:f3:28:99:
b0:15:bf:68:5a:aa:aa:1c:49:f1:b8:8e:76:2d:db:
ab:eb:dd:11:bb:66:7c:b7:57:a9:54:65:9d:88:02:
0c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:24:7D:0A:D5:CF:B1:61:8E:B7:54:7B:BB:85:B2:CE:C9:81:E2:46
X509v3 Authority Key Identifier:
keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:77:1c:75:96:6d:5d:58:e4:e0:1b:61:10:84:ea:d6:a8:d5:
fa:15:36:52:e9:fd:a7:b2:9c:96:f7:a7:62:1c:ab:c4:81:37:
b5:6b:b0:b0:ac:dc:dd:85:0d:22:aa:54:45:e7:f0:4a:56:f7:
d7:ca:6d:07:55:45:dd:8a:e2:f4:7a:6b:fa:c3:d7:26:06:b3:
f5:3d:97:d1:f1:7e:66:bd:82:17:4a:49:5d:f3:24:09:6b:a0:
87:f3:f8:08:f0:16:12:cc:24:02:6a:83:14:78:71:02:d3:cd:
c6:62:e9:d1:ea:d4:cc:b5:67:14:11:f8:26:02:37:67:dd:b4:
04:e7:84:0c:71:c2:be:d3:f2:e5:ed:5b:b0:be:c9:8c:07:3f:
f2:4b:68:c1:46:f1:ea:9d:a9:4c:03:4c:9f:ab:a5:50:5f:36:
7e:7f:8d:7b:b5:ed:f0:fa:97:bc:3d:a7:09:ed:38:95:e7:b5:
c0:fe:9f:3a:51:85:6b:a1:40:4b:ce:dd:15:d0:41:60:04:56:
d6:57:60:df:4e:c2:72:61:2a:42:7c:ac:94:9c:2d:68:01:e0:
aa:53:f0:b1:91:54:a7:39:12:10:11:44:6c:b0:73:ac:66:24:
b1:6e:c8:63:22:ec:81:22:26:8d:6e:16:5f:de:8c:a2:2d:f2:
33:80:45:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:23:53 2026 by rpki-client