Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
File: 13BmKFIPfdrO9yQ276VGNcUs_ck.mft (raw, json)
Hash identifier: rgdx6w2tLE5pe0HdpbUwDZatpnunLUkwokaJd9MO4Jo=
Subject key identifier: C2:E9:BD:C7:9F:E5:E9:52:BF:7A:1B:7A:28:61:E0:96:5E:41:97:2D
Authority key identifier: D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
Certificate issuer: /CN=d7706628520f7ddacef72436efa54635c52cfdc9
Certificate serial: 019E1D90AF7371C1E8D2A063935BA3CFCD9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
Manifest number: 0FDA
Signing time: Tue 12 May 2026 19:01:21 +0000
Manifest this update: Tue 12 May 2026 19:01:21 +0000
Manifest next update: Wed 13 May 2026 19:01:21 +0000
Files and hashes: 1: 13BmKFIPfdrO9yQ276VGNcUs_ck.crl (hash: hz/iuYrOVFkyw8Kn4a/MPZ8izP/Su8I9E3odaN58YW0=)
2: Nu3peWDWrg8B9TZmbC7e-FKE5u0.roa (hash: XwlZgv/uZ1480t7jqmTSWZk9U5cuFEim7w/uA9kUOv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:af:73:71:c1:e8:d2:a0:63:93:5b:a3:cf:cd:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7706628520f7ddacef72436efa54635c52cfdc9
Validity
Not Before: May 12 19:01:21 2026 GMT
Not After : May 13 19:01:21 2026 GMT
Subject: CN=c2e9bdc79fe5e952bf7a1b7a2861e0965e41972d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:d2:81:16:de:88:cb:af:6d:c6:dc:8a:e4:
79:8e:de:ae:f9:9a:f1:6b:f6:bb:69:7c:05:8b:52:
16:47:b2:c9:7b:0b:b1:ed:75:02:38:9e:1a:fa:b2:
20:ef:97:57:de:9e:99:6f:e0:08:97:43:d0:6e:5b:
8a:e6:5a:4a:e2:62:5b:da:64:90:31:2a:70:50:04:
f7:8c:0f:ef:79:e5:54:9d:f1:d9:3a:2d:80:3b:9a:
f6:18:5c:64:d9:5e:a6:a2:6f:ab:1a:2a:ea:bd:56:
df:ea:95:06:03:e6:e8:86:47:bf:75:ff:66:0e:22:
21:49:eb:05:8c:3b:bf:20:c3:aa:99:9e:b7:ac:9c:
f2:6e:d8:46:0e:9c:77:a1:e3:2b:af:ce:40:13:f3:
17:54:10:e9:b0:8b:65:d1:1d:b8:c6:db:4b:8b:10:
02:7c:1a:35:28:19:e7:1d:f5:8c:fe:da:96:4c:9b:
ab:f3:5b:6e:d9:c4:4b:83:c9:f7:06:4c:53:d3:87:
ea:a4:bc:cf:bd:75:a1:18:5b:2a:d2:1b:e6:52:35:
87:bd:f0:59:20:4d:a2:95:7d:45:87:e3:3d:f1:00:
89:40:84:6f:b8:6b:01:13:c1:da:8a:1e:10:a9:d4:
83:ec:73:c4:23:c0:2b:77:b1:0b:0b:61:75:7d:09:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E9:BD:C7:9F:E5:E9:52:BF:7A:1B:7A:28:61:E0:96:5E:41:97:2D
X509v3 Authority Key Identifier:
keyid:D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ba:26:ce:f2:0b:d8:b2:ee:fa:49:1b:24:45:a8:8e:74:aa:
cb:a6:a2:a9:b9:de:c8:cd:23:9d:3d:c0:fc:58:09:be:b4:4a:
7a:be:9c:45:ff:86:a6:0d:08:02:f7:2c:a5:80:60:d3:4d:08:
65:37:d4:c9:63:e8:41:86:0a:af:58:ef:b0:c4:2f:81:5b:d5:
45:a1:8a:61:1f:0c:6e:9d:b7:32:1e:af:86:d3:58:76:a2:d9:
46:d1:02:5c:07:27:55:41:76:2f:07:e6:c9:cb:91:29:51:a7:
1e:00:7b:4c:57:82:55:4a:36:e4:41:12:51:3a:52:5b:de:7c:
8c:90:a8:f1:4e:36:bc:4d:87:63:7e:60:91:a9:05:74:a4:e9:
25:f9:7c:5c:fc:db:eb:a3:91:b2:d2:3a:68:64:94:7d:b5:17:
f5:b5:79:fb:11:40:71:da:9c:30:ff:4a:3e:ea:5a:6c:10:70:
0a:13:bd:4b:08:00:aa:7e:e7:1d:2f:ff:73:55:e0:9e:70:25:
37:c3:45:90:70:aa:ae:62:33:c2:90:0d:ea:d5:b5:6e:cf:d1:
8d:bc:c2:83:c9:1f:fc:7b:41:4b:bb:20:e1:1c:b9:9d:52:92:
15:0e:e8:af:98:ca:6e:66:26:7d:cb:48:51:0a:40:82:38:6b:
c8:19:3b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:32:55 2026 by rpki-client