Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
File: 13mWjmbtvqNy75W6or9okThWekA.mft (raw, json)
Hash identifier: ysrmIYhBvJpVCBXCnP9pZiIFEBIPyBHwSemWDbM/zRI=
Subject key identifier: 81:3D:A5:04:12:3D:39:38:F1:25:E3:9D:4E:6F:26:50:C3:64:EE:5E
Authority key identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
Certificate issuer: /CN=d779968e66edbea372ef95baa2bf689138567a40
Certificate serial: 01A13A12349633EAE28A4753260450C86D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
Manifest number: 1AA5
Signing time: Wed 14 Oct 2026 11:00:33 +0000
Manifest this update: Wed 14 Oct 2026 11:00:33 +0000
Manifest next update: Thu 15 Oct 2026 11:00:33 +0000
Files and hashes: 1: 13mWjmbtvqNy75W6or9okThWekA.crl (hash: xbE88XOHtAg27UCXJ25Mu0mNURJmiTLfx4+JPqiPb28=)
2: a2dGgMgkDvSFz9UvYkCXlH5tzZU.roa (hash: c2MCuHjIaTWBayfSiKP1qGbzAEWRP5fSSTHUf07P0Kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:12:34:96:33:ea:e2:8a:47:53:26:04:50:c8:6d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d779968e66edbea372ef95baa2bf689138567a40
Validity
Not Before: Oct 14 11:00:33 2026 GMT
Not After : Oct 15 11:00:33 2026 GMT
Subject: CN=813da504123d3938f125e39d4e6f2650c364ee5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:39:e0:0c:2f:d8:56:13:bf:e6:1d:bb:3e:39:
eb:25:f3:d7:5c:09:de:3e:df:b7:67:a3:4f:c0:02:
c1:4c:b4:37:46:a0:4a:1b:a7:96:1a:cb:5e:6a:ce:
11:fe:a5:dd:42:02:c5:f3:64:b1:2e:c2:7e:6b:21:
f4:53:b4:3a:ec:de:4a:f5:5c:62:bb:03:45:6d:17:
71:a7:03:9c:18:b9:5b:09:67:e8:58:4d:01:15:ff:
5b:f4:0e:72:2e:ed:30:77:9b:7f:bb:0f:f2:f4:c6:
01:d1:90:ec:f9:f2:1f:26:da:c7:a3:33:02:e6:7c:
93:85:97:61:93:81:c6:66:a7:0c:d2:b0:3c:bf:d8:
20:41:e2:c3:9c:e1:08:76:0a:47:5b:b3:a7:a0:85:
d7:69:6f:0e:31:0b:f3:34:c9:49:2b:53:6b:d6:ef:
02:e8:22:ba:21:06:6a:16:4a:97:1d:1c:cc:25:69:
37:72:e0:29:c9:07:5e:45:6e:c3:fc:b0:0c:0a:78:
78:cd:31:4c:11:de:bf:22:74:0e:d7:1f:bd:67:8e:
18:4c:4d:5d:93:18:d2:04:fd:7a:32:e9:37:3b:ff:
f0:51:04:5b:3b:21:ea:63:b6:cc:6c:40:63:ed:a4:
89:d4:af:ca:12:a6:70:63:52:1f:fe:62:f8:c3:b3:
ed:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3D:A5:04:12:3D:39:38:F1:25:E3:9D:4E:6F:26:50:C3:64:EE:5E
X509v3 Authority Key Identifier:
keyid:D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:74:72:ea:6b:c6:90:2c:ea:5f:7f:96:d5:3e:e0:3f:5b:45:
93:fe:cf:9e:ee:f9:07:f8:7a:16:b8:75:1f:a7:e7:6e:ff:62:
bf:8a:57:4c:09:59:79:96:9e:35:ce:b3:eb:d7:21:8d:c1:fd:
63:3b:cd:ef:f1:7b:b6:c4:6e:20:11:9e:12:f4:89:e9:30:57:
5d:18:9b:f6:5f:ee:82:d6:0b:5a:95:4a:15:32:90:49:d8:ca:
ec:67:1a:31:4d:4b:17:e6:f0:a3:6e:73:5c:68:e4:99:b1:d0:
e5:47:2e:52:ab:65:21:a2:d9:fb:28:e6:af:d0:77:cb:02:ae:
46:7c:a9:fa:7a:7b:ed:d6:18:34:14:04:f7:72:51:e8:b7:2a:
e8:46:e7:37:ac:9b:28:62:cb:29:66:3c:22:e2:7f:a0:80:ef:
97:55:ef:cc:09:06:c2:13:fa:c3:1a:97:25:d7:9a:ef:ff:6c:
65:6c:56:b8:bd:4a:09:aa:20:af:54:88:68:41:f7:49:e5:0d:
a2:e0:c9:31:16:d6:f6:2e:78:3d:64:9f:d5:19:98:1b:bc:79:
2f:a6:c6:ec:93:88:38:b2:eb:e7:91:82:75:31:46:38:82:d9:
df:2f:52:fc:5c:2f:fe:d4:01:a7:72:9b:f6:f5:a4:50:f7:3d:
a0:20:6f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:32:51 2026 by rpki-client