Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
File: 13EApGzEauiWvcLg4HTjBVq4hns.mft (raw, json)
Hash identifier: TQUpVbQ5dsuoRieNmD2l2k0psKnDoT5mMrFPHtxWjG4=
Subject key identifier: 66:75:21:D8:09:6D:E1:75:70:E2:60:F7:76:FD:DA:76:4C:CE:22:31
Authority key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
Certificate issuer: /CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Certificate serial: 019D29CED8256F9EA35848CC7C9C902AA8A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
Manifest number: 0D43
Signing time: Thu 26 Mar 2026 11:01:54 +0000
Manifest this update: Thu 26 Mar 2026 11:01:54 +0000
Manifest next update: Fri 27 Mar 2026 11:01:54 +0000
Files and hashes: 1: 13EApGzEauiWvcLg4HTjBVq4hns.crl (hash: dTjNWfnnAZicuHwi+AtpiVSTo8JjKxCE/cdQWDVrRaY=)
2: lAjUh0yd7DRPhi-W3SSvqev0w_E.roa (hash: YCOHiUTXUD1rmQesFlzNj90jbAUp9KL2LXtb7YGRhtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:d8:25:6f:9e:a3:58:48:cc:7c:9c:90:2a:a8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Validity
Not Before: Mar 26 11:01:54 2026 GMT
Not After : Mar 27 11:01:54 2026 GMT
Subject: CN=667521d8096de17570e260f776fdda764cce2231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:97:74:22:1c:58:da:02:79:dd:cd:60:f1:9f:
5c:08:2d:a9:ab:ca:64:94:72:bc:9b:cd:4f:cb:bf:
1f:08:a5:5a:7e:9a:76:40:82:96:41:48:02:27:6d:
28:d2:e8:f9:2f:39:19:d0:ed:c1:ef:e2:f7:cd:07:
9c:6e:c9:fc:47:69:0b:b9:bb:63:6b:84:b4:85:81:
e8:aa:c7:e6:34:8f:a3:25:06:f1:10:a0:a7:63:29:
2a:83:69:da:ae:48:be:d5:e2:80:e4:36:bc:73:22:
6a:19:b2:c6:7c:8b:9e:ac:39:83:63:aa:8f:85:39:
d3:75:f0:bf:cf:fc:f2:88:af:bc:69:76:15:24:bb:
c9:9d:fa:d2:ce:9c:ef:a5:fd:a0:38:80:0e:d7:a1:
02:89:5c:2d:f8:e9:93:8e:5e:3d:12:93:88:7d:4b:
57:54:a5:53:55:41:54:69:3d:f2:9b:90:0d:ed:6d:
c5:f6:5e:b3:43:1e:b6:fd:d2:35:1c:35:86:e4:5b:
72:c7:30:fc:a6:31:66:98:7d:23:a0:70:f1:0a:92:
75:df:4f:4e:16:e1:fa:d9:a4:28:4d:67:ac:91:cc:
b8:13:9d:df:23:5b:8a:82:d8:3c:50:c9:51:09:95:
0a:28:c4:bf:78:b7:5e:e8:46:cd:bb:49:3c:12:04:
1b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:75:21:D8:09:6D:E1:75:70:E2:60:F7:76:FD:DA:76:4C:CE:22:31
X509v3 Authority Key Identifier:
keyid:D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:2a:69:3c:95:5c:27:9e:87:02:11:46:74:32:a6:48:62:c5:
93:8b:8a:20:80:e2:46:c7:a0:87:ad:64:65:8b:e4:5e:ce:ef:
f7:5f:28:ee:27:0b:4c:18:d0:ef:54:87:68:fd:f1:30:6f:be:
bb:25:c5:3b:2e:40:7a:a5:c5:99:fc:0e:b7:18:2b:6e:19:9e:
f8:8c:aa:0b:dc:b2:af:1f:cf:83:2c:14:76:33:04:22:c3:ac:
1f:78:f5:7e:ee:54:c3:8a:0a:81:1d:75:0f:b0:85:c6:0c:4e:
02:1c:73:41:b5:2d:71:da:3b:c9:06:62:27:1f:72:2f:26:ca:
3d:99:04:d9:a8:b9:b7:83:99:6a:96:5e:19:2f:fc:3e:0e:b4:
b4:c8:19:b3:23:b3:12:2e:5f:bc:8a:d9:f7:d5:22:0b:44:f1:
b2:0c:af:2b:21:73:47:1f:fa:98:11:81:b1:40:52:ac:d3:d4:
5d:0c:84:9c:75:af:7e:0b:23:41:91:aa:72:b6:22:a0:79:43:
1e:46:41:e6:bb:c4:b7:b5:ca:8e:e9:9e:6f:c1:07:de:ad:99:
76:56:50:6d:5e:02:1b:3a:8f:32:ba:4d:aa:0b:34:e7:87:ec:
94:25:ff:7e:79:0e:50:e7:0b:0f:f2:77:3a:8e:34:c4:9b:aa:
d9:b2:29:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:21:44 2026 by rpki-client