Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
File: 13yGmob-yDN5Pu7azNSx98pEM-k.mft (raw, json)
Hash identifier: wW5D+rmq23CPfvTSqsuqAjkoZj7wWhfPKabsghw0PeY=
Subject key identifier: 98:01:AF:E1:E2:DF:18:85:56:A1:A5:C6:21:E1:9E:7E:A9:8E:E4:51
Authority key identifier: D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
Certificate issuer: /CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Certificate serial: 019CAD22C5AD2A1863AA0BF9067E30E9A6A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
Manifest number: 162E
Signing time: Mon 02 Mar 2026 06:01:02 +0000
Manifest this update: Mon 02 Mar 2026 06:01:02 +0000
Manifest next update: Tue 03 Mar 2026 06:01:02 +0000
Files and hashes: 1: 13yGmob-yDN5Pu7azNSx98pEM-k.crl (hash: kYC3OXL6lGzHJMH2J7qHL+CpnukwmBBFNwX/VPegYPI=)
2: H3UZwuAp9rSpSKUa2W4mA_Q1udI.roa (hash: 1AEX5MF9asrj6WNrnWzO3bQ5bregGi6ctVtR6cHklb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:c5:ad:2a:18:63:aa:0b:f9:06:7e:30:e9:a6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Validity
Not Before: Mar 2 06:01:02 2026 GMT
Not After : Mar 3 06:01:02 2026 GMT
Subject: CN=9801afe1e2df188556a1a5c621e19e7ea98ee451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f4:de:df:68:9e:45:cd:d5:78:5c:c6:c7:80:
c5:0d:fe:df:2c:6b:1e:b3:70:b7:6e:89:19:df:34:
25:b0:11:e5:27:bc:72:38:ce:6f:0a:18:b3:f2:fa:
12:fa:d0:fd:a4:7a:a0:d9:b0:94:9e:d0:cf:69:45:
ad:5f:d7:1d:b1:29:33:53:4f:31:be:01:cd:c3:3a:
a2:af:74:74:a4:09:2a:b0:c7:f1:15:06:01:e3:08:
76:34:7e:b0:53:6f:0d:7f:c7:3a:0a:cc:46:8e:12:
3e:9a:6a:18:05:16:81:1c:db:89:e1:f2:3f:58:5f:
48:ac:18:b7:50:fa:87:bc:73:bf:cb:a9:4d:db:d8:
d6:58:88:82:d9:83:12:1e:53:3d:1b:8f:8f:8e:63:
c8:09:d7:08:f6:d2:c4:6c:db:d0:63:e6:e1:fc:87:
4e:fc:06:81:df:7a:cd:53:32:27:8a:5b:54:83:13:
6b:9f:4b:e2:c5:db:0a:25:86:83:61:97:09:8e:31:
1e:a9:c8:44:96:c7:90:77:09:ef:ea:38:33:c7:be:
6a:3e:9c:4a:b8:97:c7:d8:40:71:a8:62:a0:74:36:
70:8e:58:a2:71:45:d4:35:89:85:48:0b:f1:41:e4:
db:5d:3d:54:9e:88:4e:ed:eb:3f:41:01:2b:3a:59:
44:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:01:AF:E1:E2:DF:18:85:56:A1:A5:C6:21:E1:9E:7E:A9:8E:E4:51
X509v3 Authority Key Identifier:
keyid:D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fe:44:5f:85:a5:23:dd:23:a3:e0:28:59:a1:bb:40:1d:73:
21:2e:1d:0b:af:70:f4:04:4c:f3:5e:4e:ba:ae:5d:a7:b4:4f:
23:07:2f:83:85:87:a3:2c:67:64:50:f9:9b:8f:40:ce:4d:b5:
45:44:2e:9b:41:36:b4:57:a2:a1:37:7b:33:df:cd:06:29:6b:
69:33:d0:59:b4:09:b1:da:c9:9d:7f:08:3e:30:31:c5:da:ca:
92:19:4a:e9:ea:bf:8c:11:5c:32:06:0a:c4:a9:a9:e2:a9:8e:
6d:11:b9:ff:bc:b7:0b:3b:e4:b0:8b:ab:a8:9b:18:92:3a:02:
bc:01:40:d6:fa:4e:8a:c5:ad:c6:da:05:d9:25:34:69:4a:ce:
c5:2d:93:d0:ed:d3:8c:c7:d5:2c:e0:a5:34:7d:c4:c7:22:9e:
d7:b3:63:60:ad:c9:13:34:d1:ed:b9:50:c2:fe:37:7f:2c:e0:
c9:27:37:4f:e3:c4:c9:a1:6b:b7:a0:c1:92:15:2c:24:de:e5:
54:4c:e2:b3:fc:4b:20:7a:64:b9:06:d4:06:eb:c6:f6:ee:77:
43:ed:4f:69:c8:a6:b6:0c:10:a4:9e:58:4e:54:2b:5d:44:70:
22:6e:30:81:87:7d:e9:b3:e2:3f:b9:ac:70:cd:9f:9b:c1:66:
bb:34:88:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:56:41 2026 by rpki-client