Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
File: 13eUOzQRiOnNLpPeKIsz_-BBx9I.mft (raw, json)
Hash identifier: neM4zxNUYKTzuOgShuvfFSF0XiUu2LNCPhw+vSod6Lw=
Subject key identifier: 93:D9:D5:EA:3A:63:61:1A:4C:E1:25:E8:1B:59:C4:C6:C8:18:49:3D
Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
Certificate issuer: /CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Certificate serial: 019D99997C788FD07D80481C3D29C509ED1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 04:01:06 +0000
Manifest this update: Fri 17 Apr 2026 04:01:06 +0000
Manifest next update: Sat 18 Apr 2026 04:01:06 +0000
Files and hashes: 1: 13eUOzQRiOnNLpPeKIsz_-BBx9I.crl (hash: aK3RhDEl/2RK3UpsfooUhyERlNRFXti2DKWwJS5Zn7E=)
2: hyElpaRCi-O3ttxNPiq_tbabKaM.roa (hash: utFwv7iVQh6KFUfFUAR5z2o9lvR/OP856LSn2YX8Pbs=)
3: sxVjjTuZsumW0h6mF4GiRANgUvg.roa (hash: z5zoee9BxxfVBHQHis7Mo+eHgddxsrIvf3XwtD1/H80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:7c:78:8f:d0:7d:80:48:1c:3d:29:c5:09:ed:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Validity
Not Before: Apr 17 04:01:06 2026 GMT
Not After : Apr 18 04:01:06 2026 GMT
Subject: CN=93d9d5ea3a63611a4ce125e81b59c4c6c818493d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bf:6f:0b:a3:6d:a9:65:a0:ce:27:76:db:87:
1f:6c:68:0b:ab:94:03:43:47:e5:4a:98:10:97:43:
39:15:6e:e4:0d:43:e7:20:ae:f5:22:68:6c:e0:45:
fc:d7:e6:42:1d:c9:ca:01:d5:04:1c:d1:99:f4:c8:
38:36:f4:05:33:9a:e7:24:2e:e0:84:05:fa:22:43:
23:ba:7c:6e:0f:d0:5e:e8:6a:dc:8f:dc:5d:cf:25:
47:2a:8d:4e:1d:cd:da:7b:db:ba:0a:15:65:64:f3:
0a:11:45:03:bc:e9:d9:63:09:4b:aa:f7:aa:06:ae:
64:d9:0e:ab:f1:96:91:f1:37:38:05:30:0b:0b:f3:
e8:83:8f:c5:ff:14:b5:f6:ef:74:ad:39:67:cf:c8:
48:92:f7:85:c9:3d:66:7e:3b:f5:03:c3:a7:e9:c3:
1f:a0:98:66:85:d4:3c:b3:37:16:03:01:81:d8:af:
d1:29:04:3d:eb:2a:96:69:9d:2b:53:16:cb:98:a3:
b4:f4:b9:01:58:22:c2:23:52:47:fb:32:c4:d5:da:
78:1b:92:17:7e:de:75:73:3f:2f:32:d6:1d:d5:63:
80:42:73:58:0c:ba:d8:c1:6a:d3:4f:fe:48:33:bd:
9a:b9:09:09:84:b7:d9:39:30:b8:32:48:c4:50:cd:
94:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D9:D5:EA:3A:63:61:1A:4C:E1:25:E8:1B:59:C4:C6:C8:18:49:3D
X509v3 Authority Key Identifier:
keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:8d:51:45:35:bd:82:15:f9:da:6f:e9:83:9b:e4:23:47:9d:
b4:a2:b1:e5:eb:a2:15:48:78:5b:4d:89:bb:09:02:be:df:57:
7e:50:e8:c5:41:f7:94:b9:0c:aa:f6:38:f0:1a:c6:b8:ef:67:
3b:b0:08:7b:2e:2c:23:36:f0:b8:af:d2:11:6c:cd:9a:46:5c:
ad:e0:7a:b3:d2:8a:82:91:e1:b7:e0:e1:7f:b1:13:44:ba:9a:
c3:f5:73:92:33:99:30:ca:1c:8b:68:b9:10:ee:19:a8:df:92:
c4:31:59:67:a1:a8:b0:13:4c:6e:3e:7d:c0:b9:19:78:90:cd:
39:e8:8d:28:5d:f5:99:90:3d:e8:b9:31:8d:0c:7f:73:27:76:
67:eb:aa:50:26:47:51:b4:bb:57:dd:ea:44:cd:65:af:6d:2e:
51:1e:19:1b:8b:d9:07:c1:d9:88:56:6a:4b:0c:c9:ef:d2:c3:
79:f5:0f:c3:a4:32:af:99:f1:6a:f4:66:db:63:7e:22:c9:50:
8f:a9:75:c1:16:4f:0c:37:42:a4:38:3a:b0:3c:55:3c:99:c5:
a1:37:4c:ef:c0:73:07:5a:4f:d4:0a:83:1f:fb:c4:bd:81:b6:
27:2f:49:94:73:de:ff:e5:93:b7:a8:1a:60:c9:8f:dc:3e:85:
6e:75:db:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:56:07 2026 by rpki-client