Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
File: 13j4yccHK3MEiPnjISjdiVveMtM.mft (raw, json)
Hash identifier: 4qfibAg6XX+kqHHKmVowVXpQKVaIkZMlJ3Rz2+gGdAI=
Subject key identifier: EA:39:83:44:48:B8:0E:09:9F:0C:1E:F6:57:8A:4E:3D:4D:C6:FD:FF
Authority key identifier: D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3
Certificate issuer: /CN=d778f8c9c7072b730488f9e32128dd895bde32d3
Certificate serial: 01A0DA5F515CCA04E9F095AFCBC4F96F8C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
Manifest number: 0A8A
Signing time: Fri 25 Sep 2026 21:01:14 +0000
Manifest this update: Fri 25 Sep 2026 21:01:14 +0000
Manifest next update: Sat 26 Sep 2026 21:01:14 +0000
Files and hashes: 1: 13j4yccHK3MEiPnjISjdiVveMtM.crl (hash: LTrK5ZYsRhUJbymDlpJjPi0RBThzcxzJH5UODA9TvfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:51:5c:ca:04:e9:f0:95:af:cb:c4:f9:6f:8c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d778f8c9c7072b730488f9e32128dd895bde32d3
Validity
Not Before: Sep 25 21:01:14 2026 GMT
Not After : Sep 26 21:01:14 2026 GMT
Subject: CN=ea39834448b80e099f0c1ef6578a4e3d4dc6fdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:fb:a0:13:c5:60:75:f6:18:ce:1d:a7:34:
8b:0a:42:60:47:a0:b5:df:d8:44:6d:8b:a9:fa:03:
09:d6:ad:dd:23:0c:36:a7:12:23:8a:82:b3:d7:13:
49:f1:98:d7:b1:24:0e:43:73:99:7b:a6:5c:2e:58:
96:14:77:8c:7f:23:13:0c:22:ea:41:88:d5:52:d2:
a9:ed:3b:79:6f:73:87:a0:a3:8b:2b:b9:b0:5b:22:
c1:73:17:a9:a9:76:bc:a7:c7:69:d3:32:6f:6d:bb:
c1:33:00:3c:e6:2e:5d:36:7e:36:31:7d:69:94:48:
0e:31:4a:7d:5b:a0:78:33:9e:69:d0:60:bd:5f:91:
a9:0d:6a:09:41:5d:7b:d4:f7:d6:ea:48:fc:31:a5:
b9:46:69:77:b6:00:3b:4f:84:ad:a8:ef:a0:b6:c5:
ac:31:42:9e:4c:3d:c9:86:f6:cd:a2:c6:16:ec:28:
48:e6:19:62:ab:53:0d:a4:b7:e7:e1:0f:fa:7b:79:
94:46:ef:70:8e:11:e6:e5:c7:d9:3f:13:33:9a:b2:
31:8c:9c:37:e6:07:98:50:ea:84:b6:67:45:82:a9:
61:14:30:54:13:c9:86:e8:c6:61:83:c8:f8:d0:c5:
df:4e:34:dd:08:7e:69:4b:50:ce:19:77:98:02:7a:
01:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:39:83:44:48:B8:0E:09:9F:0C:1E:F6:57:8A:4E:3D:4D:C6:FD:FF
X509v3 Authority Key Identifier:
keyid:D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a0:8d:e2:d3:8c:95:d5:a6:4a:2d:79:aa:a3:85:42:27:be:
3d:b0:4a:79:4f:51:de:26:8f:ea:3c:63:a5:1b:1f:c7:10:1c:
b7:27:9a:9e:19:06:95:13:73:4b:83:a5:88:16:2c:a0:80:b0:
05:9a:0d:c6:88:50:cf:d5:ee:44:3f:8b:bd:0f:5f:55:a8:4f:
15:0e:77:86:ed:d9:d7:5a:c7:4b:42:fe:cd:b6:cf:c5:9b:ba:
15:2f:1a:e9:43:e5:05:a4:bd:49:09:35:9d:41:e0:22:0a:59:
86:99:ce:4c:b2:94:e3:d1:57:72:57:fd:7f:8e:2d:74:58:71:
53:e4:2e:10:e1:09:25:2a:b5:a1:39:f1:4c:9d:af:53:a9:cf:
43:8e:1f:42:4e:98:41:42:7e:80:f4:1e:60:b6:45:9a:d7:e8:
b9:bd:9d:f7:e6:99:cf:05:2b:53:4d:d8:0b:b0:fd:fa:23:fe:
e0:c3:41:21:1c:da:c1:e6:3c:31:ac:12:39:1b:d3:bb:7d:47:
28:99:e8:bd:be:e0:51:ee:fb:1f:3f:dd:82:7e:0b:fe:ad:49:
93:93:a0:16:24:bb:32:a6:54:15:7a:11:39:84:93:0f:a4:8d:
e6:0a:f1:cd:0c:53:51:45:c8:45:8a:11:00:6f:c9:9c:36:6f:
51:dd:c9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:16:17 2026 by rpki-client