Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
File: 13auCasbyUrOg_pv02rFIoZ7kuo.mft (raw, json)
Hash identifier: /J6NYwfHvC9sObnBlgf4xvKiXT6Rvqqe/79M6jQkHQo=
Subject key identifier: 9D:BC:A1:D9:39:F5:93:EE:A8:85:AC:55:3D:0F:14:7E:CE:DD:B8:D4
Authority key identifier: D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA
Certificate issuer: /CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
Certificate serial: 01A10994B6B608E9F0E0E8F467F30AAAFC19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
Manifest number: 1A89
Signing time: Mon 05 Oct 2026 01:01:43 +0000
Manifest this update: Mon 05 Oct 2026 01:01:43 +0000
Manifest next update: Tue 06 Oct 2026 01:01:43 +0000
Files and hashes: 1: 13auCasbyUrOg_pv02rFIoZ7kuo.crl (hash: yOkJMiNPFxl/cMlALN7LrjhfoqTWi5G8vk3tgnZQI7Y=)
2: yQF_oqKXVguMAr3971D21MlrR_8.roa (hash: rXFsVsTmW2PojlnuQAcJtT+oQ2/oW7PggfH906SCVtQ=)
3: ywVR7woUIzneTMtjfuoirWk196k.roa (hash: i+MATSFKerXwDHLKNUICE818LV3sf8RvOyqaZnW8Yrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:94:b6:b6:08:e9:f0:e0:e8:f4:67:f3:0a:aa:fc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
Validity
Not Before: Oct 5 01:01:43 2026 GMT
Not After : Oct 6 01:01:43 2026 GMT
Subject: CN=9dbca1d939f593eea885ac553d0f147eceddb8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f0:77:1b:ac:65:a3:72:43:bc:18:d6:b9:7c:
fc:5a:71:cf:e3:05:30:09:93:84:9b:59:03:37:6b:
e2:85:7b:ee:01:e8:14:ec:de:03:dc:e1:61:3f:b9:
a9:b8:ec:9f:5a:fd:a3:7a:07:54:38:6d:75:75:de:
ce:a1:1d:bc:fd:a5:eb:de:b0:d1:ae:17:68:f4:b7:
67:ac:6c:6a:24:a4:9a:0b:bf:31:c1:71:7b:dc:af:
ae:9a:2e:b3:fc:3d:64:fb:8e:67:d2:96:b3:05:99:
d6:94:5e:7a:1a:45:e4:ca:5c:6e:24:69:32:b3:49:
38:26:08:9e:2f:d9:2a:92:f9:de:67:4f:0f:ca:22:
76:80:2c:16:d4:c8:be:a8:f3:02:a2:80:b9:6f:de:
71:00:78:5d:3e:4d:0d:85:74:cc:a5:e6:97:6a:db:
93:ee:6b:15:70:59:b9:0b:18:b0:5e:d1:da:cc:21:
2b:cc:e5:b2:20:a6:12:53:c2:35:0e:82:a7:d4:df:
6c:38:a8:52:13:cf:da:38:73:68:e8:c2:1a:73:63:
48:57:4b:79:77:c8:7e:09:c1:71:97:75:4f:e8:7d:
01:ed:6e:8d:6f:1a:a5:8f:8d:21:ca:1d:b6:b5:d4:
69:18:32:08:d8:aa:41:e4:79:b5:56:d5:fa:5f:ae:
77:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BC:A1:D9:39:F5:93:EE:A8:85:AC:55:3D:0F:14:7E:CE:DD:B8:D4
X509v3 Authority Key Identifier:
keyid:D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e9:43:eb:b3:94:ec:24:92:6d:a4:ab:c1:d3:9e:ec:43:95:
c7:5f:97:eb:0a:bf:d1:e3:cb:1a:70:e5:69:fd:d4:6a:3c:e7:
12:1f:dd:df:5d:3b:0e:b1:8c:36:82:f6:78:f1:f7:1b:c1:b1:
3b:6c:83:98:fc:e5:d4:e9:17:8b:20:e0:24:13:8f:ac:28:ce:
70:43:90:9f:0a:c9:65:7c:2d:a9:43:3a:fc:87:8e:6d:7e:1e:
4f:66:25:2b:a4:29:3a:0a:32:50:f8:c5:0e:bf:53:7d:ae:a7:
b4:81:ab:bc:cd:86:13:ac:95:d2:02:7d:8c:45:ce:cf:aa:86:
4b:c4:ac:81:29:e0:68:0c:00:19:ac:34:7e:72:8e:56:92:5d:
2b:19:44:9a:57:fc:af:89:24:67:5d:9f:35:5e:41:5c:52:70:
26:e7:93:62:51:ce:ec:c9:48:07:37:10:8c:7d:19:90:97:c8:
fa:e5:06:af:eb:d9:b4:5e:da:37:9a:50:1d:ad:45:b2:0c:75:
0a:0c:aa:57:5f:ae:6c:42:2f:61:6d:26:85:b4:73:8f:a0:46:
ec:96:7b:43:43:8c:c2:03:1f:72:f9:0c:48:ea:b8:eb:49:43:
61:b4:d4:3f:b6:10:7b:8e:50:a2:b4:d3:a9:d7:55:18:8c:8e:
3a:e8:cc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:54:12 2026 by rpki-client