Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
File: 13eUOzQRiOnNLpPeKIsz_-BBx9I.mft (raw, json)
Hash identifier: 0yK8v23zk1VogYAsF2plclP/ZzeBwXpzp3qZE6NXKIA=
Subject key identifier: C6:AC:5C:89:72:21:D9:CC:4C:EA:A2:14:F1:8B:DF:FA:49:29:68:42
Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
Certificate issuer: /CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Certificate serial: 019CAA21D9DD6FB0E222EA69ADCD11B4ED87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 16:01:11 +0000
Manifest this update: Sun 01 Mar 2026 16:01:11 +0000
Manifest next update: Mon 02 Mar 2026 16:01:11 +0000
Files and hashes: 1: 13eUOzQRiOnNLpPeKIsz_-BBx9I.crl (hash: 370BtG0qD/wNC2dhrQXTFR7phJMT8JVYSgbU9Zn+iVI=)
2: hyElpaRCi-O3ttxNPiq_tbabKaM.roa (hash: utFwv7iVQh6KFUfFUAR5z2o9lvR/OP856LSn2YX8Pbs=)
3: sxVjjTuZsumW0h6mF4GiRANgUvg.roa (hash: z5zoee9BxxfVBHQHis7Mo+eHgddxsrIvf3XwtD1/H80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:d9:dd:6f:b0:e2:22:ea:69:ad:cd:11:b4:ed:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Validity
Not Before: Mar 1 16:01:11 2026 GMT
Not After : Mar 2 16:01:11 2026 GMT
Subject: CN=c6ac5c897221d9cc4ceaa214f18bdffa49296842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:4e:6f:a9:b4:53:d1:29:ef:fa:fb:47:23:
78:27:86:aa:77:fc:47:6c:68:72:14:0c:ae:30:3b:
4c:6e:4f:11:d1:b1:ed:78:09:23:c5:2e:5d:ab:8f:
af:70:3e:55:00:5e:54:74:2f:00:64:00:83:2b:c7:
58:f6:9c:29:24:d2:02:95:6f:17:33:da:8b:6b:f4:
89:24:97:79:ca:6a:5a:94:65:bf:8d:1a:14:a7:2c:
0c:0f:48:8d:a1:35:74:fe:a7:aa:87:f0:7d:54:2d:
6c:18:d9:8e:71:12:12:2b:ba:f0:cb:ff:7d:98:10:
e8:58:1b:ad:39:68:59:fc:61:ef:5a:6d:58:2c:71:
17:17:9b:7b:09:55:0f:60:44:57:cf:6a:93:87:17:
95:c8:c9:24:89:05:76:6c:30:9b:63:dd:e3:17:39:
be:1e:7b:2d:8e:24:87:7e:cd:cc:5a:fd:57:13:eb:
40:b8:21:cb:e3:93:54:eb:45:d7:fc:ff:9f:93:e5:
be:7b:60:d1:32:90:fd:c2:5a:6c:7d:5f:91:93:38:
14:b4:c9:f3:f2:c6:6f:e4:79:55:d1:a4:fb:97:6f:
ce:07:44:f8:17:5b:d5:49:25:ed:25:5e:2b:41:a8:
3c:49:58:a6:54:c1:1e:f4:d7:6a:41:3b:b9:e6:06:
ca:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AC:5C:89:72:21:D9:CC:4C:EA:A2:14:F1:8B:DF:FA:49:29:68:42
X509v3 Authority Key Identifier:
keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e3:30:23:91:4b:37:58:af:a5:cf:3f:df:3d:4f:c2:f4:79:
c6:75:0c:6b:08:d8:bc:27:92:b3:71:07:fc:94:8f:1e:b1:85:
3b:dc:a8:1b:6d:7c:63:52:bf:b1:cb:2e:f6:32:31:2c:b0:00:
9b:b0:83:d4:f0:b3:2e:8b:4b:7a:3b:e6:ef:b2:dc:d5:ba:8f:
c5:1e:ab:05:eb:41:a9:24:00:f9:e4:28:31:f4:c4:89:e6:d3:
3e:bd:20:77:29:e8:d5:f8:86:40:02:4d:c7:c1:3f:5a:df:4b:
c1:1f:b7:eb:f3:05:5d:f2:f8:cc:8b:18:39:67:ad:2e:85:ee:
fa:9c:49:c0:78:21:7d:34:16:89:17:32:83:db:aa:4b:26:fb:
23:ab:ae:0f:a8:6b:68:fc:d9:18:b0:6e:69:c2:9b:27:83:06:
24:21:7f:4d:40:aa:b9:16:59:6f:58:a5:68:0a:a0:70:9d:77:
32:3b:cf:57:da:16:7a:15:34:24:15:75:a9:53:07:6e:8d:7f:
3d:25:80:5e:e7:bb:f8:47:09:71:2e:82:ab:2b:b0:23:18:0b:
3d:c5:a7:d3:77:6d:f8:18:15:f2:16:ee:ac:22:93:27:36:03:
60:db:7d:ec:83:bf:6f:94:89:0b:95:17:a3:50:7d:89:d8:65:
31:bb:6e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:22:10 2026 by rpki-client