Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
File: 13eW4WtWXXJzZphsycqcpj0aTlg.mft (raw, json)
Hash identifier: 1JD541xztKVhX3+xPXCdwViyQCL45ETtDbUAXfOCe5I=
Subject key identifier: DF:89:81:46:1E:AB:B4:D4:5A:66:16:42:E2:62:B1:F1:8C:02:1D:79
Authority key identifier: D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
Certificate issuer: /CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Certificate serial: 019D28BBA6FF43601DB14FEBAAB523F7716C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
Manifest number: 05A8
Signing time: Thu 26 Mar 2026 06:01:19 +0000
Manifest this update: Thu 26 Mar 2026 06:01:19 +0000
Manifest next update: Fri 27 Mar 2026 06:01:19 +0000
Files and hashes: 1: 13eW4WtWXXJzZphsycqcpj0aTlg.crl (hash: BYLKJ8SKPFREQSbtizIW39nkj6dwgNfWnX+K6xjiuBY=)
2: Z7tPkv-KOS--LcH3raWeWv6mob4.roa (hash: 2730/QIDnBMlH2saKFE8sJJcRwFrjnSocRmwgcVBh5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:a6:ff:43:60:1d:b1:4f:eb:aa:b5:23:f7:71:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Validity
Not Before: Mar 26 06:01:19 2026 GMT
Not After : Mar 27 06:01:19 2026 GMT
Subject: CN=df8981461eabb4d45a661642e262b1f18c021d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:89:12:24:d9:f7:20:4d:ad:b0:22:a5:9f:d6:
f7:dd:a0:fa:3e:c0:1d:6a:6a:f3:44:90:a7:cd:e9:
ca:67:74:ca:ed:22:d2:5f:d6:e6:cf:0d:24:6d:f8:
cc:72:4f:13:f3:64:47:6f:10:e9:4f:02:90:31:4d:
1d:b3:77:4a:bc:f7:73:55:23:12:ab:f1:1c:3b:8a:
45:37:f4:80:02:e4:17:8e:bd:63:11:20:ea:67:7a:
70:fb:94:22:07:db:d4:d4:53:51:58:c9:9e:78:08:
42:f7:99:89:45:cb:93:26:1a:10:4d:a4:3f:79:b8:
df:bf:a0:2d:54:fb:4d:d8:5e:c1:60:9e:f6:4c:49:
d4:bf:08:64:34:d5:08:16:c8:88:68:dc:f0:9b:b9:
cb:0e:c3:d0:39:8b:be:41:5a:ac:f1:f4:2c:83:44:
65:25:f9:90:2c:6c:32:59:46:5c:0a:bc:61:64:57:
52:a9:23:e8:96:d2:74:41:9a:2c:ae:ec:fb:b5:d0:
ee:6a:a0:2e:c8:a9:be:98:c4:a1:db:21:52:61:78:
30:b5:b5:87:9a:46:8a:ed:01:10:ed:df:86:ae:52:
f1:06:14:1d:40:81:91:0a:d3:44:41:76:c0:fb:9e:
9e:cd:11:5a:c4:f7:e8:0d:46:7a:84:32:a6:e0:a2:
bc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:89:81:46:1E:AB:B4:D4:5A:66:16:42:E2:62:B1:F1:8C:02:1D:79
X509v3 Authority Key Identifier:
keyid:D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:af:24:0f:1d:ae:3b:6e:21:6d:a7:c4:4b:2b:05:55:ce:22:
a4:c3:09:84:1a:fe:54:37:2e:f9:a4:d7:7f:54:98:de:4c:a6:
d0:4d:13:63:14:c0:29:6c:22:1d:d6:40:2a:b3:ea:6a:6b:3e:
50:31:c0:ed:77:79:26:67:39:de:54:cd:07:12:ba:7b:0b:b0:
86:c7:ba:32:6f:76:5e:80:e2:35:4c:81:17:dd:8d:0d:58:e5:
80:75:ab:56:ff:d8:bb:38:a6:7c:04:4d:54:a7:b3:26:a2:5d:
69:33:76:20:5d:23:ac:eb:b0:e8:d8:7e:67:06:4d:94:dc:95:
38:28:aa:ba:46:99:76:bb:65:93:7f:ef:a8:eb:a1:b4:08:7d:
08:88:c6:4b:ee:42:fe:5a:ee:ee:2d:d3:6c:ad:bd:b4:b0:5f:
06:38:a1:2d:23:be:7d:67:0d:9f:5c:22:8e:5b:8e:e5:ab:28:
b5:08:83:0e:15:8e:9c:9d:5e:ff:91:6a:fc:ee:27:58:c6:53:
34:aa:b6:e7:fb:5b:d6:08:f0:cb:b6:1b:dc:7a:ca:91:25:4c:
8c:57:18:ba:e6:3f:ad:ec:5b:65:9d:a3:c8:da:69:1a:02:8e:
ac:58:db:c8:f3:9f:fa:78:86:28:0a:04:61:cf:1c:e8:4a:e7:
89:a7:c5:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou6b/Q2AdsU/rqrUj93FsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Nzc5NmUxNmI1NjVkNzI3MzY2OTg2Y2M5Y2E5Y2E2M2Qx
YTRlNTgwHhcNMjYwMzI2MDYwMTE5WhcNMjYwMzI3MDYwMTE5WjAzMTEwLwYDVQQD
EyhkZjg5ODE0NjFlYWJiNGQ0NWE2NjE2NDJlMjYyYjFmMThjMDIxZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwokSJNn3IE2tsCKln9b33aD6PsAd
amrzRJCnzenKZ3TK7SLSX9bmzw0kbfjMck8T82RHbxDpTwKQMU0ds3dKvPdzVSMS
q/EcO4pFN/SAAuQXjr1jESDqZ3pw+5QiB9vU1FNRWMmeeAhC95mJRcuTJhoQTaQ/
ebjfv6AtVPtN2F7BYJ72TEnUvwhkNNUIFsiIaNzwm7nLDsPQOYu+QVqs8fQsg0Rl
JfmQLGwyWUZcCrxhZFdSqSPoltJ0QZosruz7tdDuaqAuyKm+mMSh2yFSYXgwtbWH
mkaK7QEQ7d+GrlLxBhQdQIGRCtNEQXbA+56ezRFaxPfoDUZ6hDKm4KK8mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+JgUYeq7TUWmYWQuJisfGMAh15MB8GA1UdIwQY
MBaAFNd3luFrVl1yc2aYbMnKnKY9Gk5YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNlVzRXdFdYWEp6WnBoc3ljcWNwajBhVGxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81NDI5ZDgtZjQxMS00NjkyLWIwYTct
MTU1ZmQwYjQzZjlmLzEvMTNlVzRXdFdYWEp6WnBoc3ljcWNwajBhVGxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My81NDI5ZDgtZjQxMS00NjkyLWIwYTctMTU1ZmQwYjQzZjlm
LzEvMTNlVzRXdFdYWEp6WnBoc3ljcWNwajBhVGxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN68kDx2u
O24hbafESysFVc4ipMMJhBr+VDcu+aTXf1SY3kym0E0TYxTAKWwiHdZAKrPqams+
UDHA7Xd5Jmc53lTNBxK6ewuwhse6Mm92XoDiNUyBF92NDVjlgHWrVv/YuzimfARN
VKezJqJdaTN2IF0jrOuw6Nh+ZwZNlNyVOCiqukaZdrtlk3/vqOuhtAh9CIjGS+5C
/lru7i3TbK29tLBfBjihLSO+fWcNn1wijluO5asotQiDDhWOnJ1e/5Fq/O4nWMZT
NKq25/tb1gjwy7Yb3HrKkSVMjFcYuuY/rexbZZ2jyNppGgKOrFjbyPOf+niGKAoE
Yc8c6ErniafFnw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:10:17 2026 by rpki-client