Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
File: 13mWjmbtvqNy75W6or9okThWekA.mft (raw, json)
Hash identifier: ZLa0iMj4AiiJYIJcA/8fjeqbhJ0wjuLkiwLib/QQXU0=
Subject key identifier: 4F:D7:4B:77:FB:2A:1C:3B:73:9C:76:F1:03:C8:5B:75:0A:F9:61:B7
Authority key identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
Certificate issuer: /CN=d779968e66edbea372ef95baa2bf689138567a40
Certificate serial: 019D9B198A9109EF4D8B57B325DCEDA01D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 11:00:35 +0000
Manifest this update: Fri 17 Apr 2026 11:00:35 +0000
Manifest next update: Sat 18 Apr 2026 11:00:35 +0000
Files and hashes: 1: 13mWjmbtvqNy75W6or9okThWekA.crl (hash: DyJ2Sz+apmgT58pWqTLJVEx7luYQuEj7C3rl3dXqlus=)
2: a2dGgMgkDvSFz9UvYkCXlH5tzZU.roa (hash: c2MCuHjIaTWBayfSiKP1qGbzAEWRP5fSSTHUf07P0Kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:8a:91:09:ef:4d:8b:57:b3:25:dc:ed:a0:1d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d779968e66edbea372ef95baa2bf689138567a40
Validity
Not Before: Apr 17 11:00:35 2026 GMT
Not After : Apr 18 11:00:35 2026 GMT
Subject: CN=4fd74b77fb2a1c3b739c76f103c85b750af961b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d5:80:50:f8:18:7d:ea:83:ca:36:7a:39:58:
76:f3:43:a2:48:8c:6a:f2:25:4c:a2:de:f3:6b:e4:
56:64:f8:d1:46:30:dc:af:aa:d4:c1:b4:1d:9f:ce:
b1:7b:f4:39:76:66:2a:5b:17:6e:ca:04:a2:d8:fc:
b9:ce:e6:bd:30:c0:eb:01:82:b9:e6:8b:89:56:83:
3a:70:f9:98:e7:f5:02:97:c1:b7:78:c0:58:2e:4a:
0d:20:91:02:ce:5a:99:b9:9a:4f:a5:d0:b3:0c:34:
bd:2f:fe:3c:4b:17:fe:14:87:64:35:c3:70:7a:29:
97:db:91:4b:47:d0:04:78:05:07:28:57:c9:00:fa:
b4:d1:8b:27:ab:85:92:ce:58:6f:56:72:9b:35:d9:
d8:2c:ac:b4:d0:fa:74:42:3b:0a:dd:33:9a:aa:90:
7e:88:fb:ce:fe:8f:00:e3:b8:af:fe:ef:7d:77:e7:
ce:46:81:24:94:39:f2:17:5d:d2:55:7f:ec:51:2a:
e1:57:5c:1d:55:36:87:09:6c:bf:08:c2:3c:39:1e:
dc:07:af:25:19:46:2a:9d:69:c2:a2:6e:b0:9b:36:
31:a9:80:5a:f3:cd:d7:f7:f3:dc:aa:10:d5:91:d6:
94:b2:f1:29:71:46:88:45:18:60:0a:97:59:9c:5e:
78:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D7:4B:77:FB:2A:1C:3B:73:9C:76:F1:03:C8:5B:75:0A:F9:61:B7
X509v3 Authority Key Identifier:
keyid:D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:93:f3:fd:61:1e:4a:a5:c5:4c:7e:24:21:53:7e:b5:37:98:
55:f0:9b:57:63:ba:03:49:6c:ec:c7:d7:99:65:b8:b1:3e:f4:
50:73:50:1b:bc:46:3d:d8:bb:96:45:03:79:af:ff:af:a2:ae:
3b:7a:55:99:ff:66:a8:2a:12:52:a9:9a:af:31:a4:3d:bf:ea:
fb:0c:41:42:e4:28:3a:a0:08:10:b0:7b:f0:11:6b:43:14:3f:
b5:67:28:f9:32:e7:7e:e8:03:c3:6e:cf:1e:7b:1d:14:4e:95:
7f:84:f3:a5:e6:73:6f:34:5d:40:80:db:d4:3b:d5:65:e6:8d:
d4:e0:cf:73:a0:53:ba:99:58:90:80:30:fe:9f:9c:c7:26:2a:
38:b9:81:e1:b6:de:f8:05:77:64:8e:01:7a:b4:81:9d:73:b7:
43:64:7a:98:ca:a1:66:71:4e:8e:43:1c:d7:d1:45:00:bc:89:
47:64:72:d7:59:b1:0d:d9:c2:74:44:a2:6b:3a:00:19:f5:a6:
0c:10:32:65:09:a1:16:77:10:54:30:5c:bf:e2:9f:1c:5e:c8:
60:17:f7:59:1e:00:08:7b:2e:f9:5d:86:93:13:cc:59:e3:cb:
c8:e5:f0:ff:49:e0:8b:e3:8a:62:1b:30:a3:d4:13:cf:ab:ce:
4f:08:7a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:09:44 2026 by rpki-client