Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
File: 13eUOzQRiOnNLpPeKIsz_-BBx9I.mft (raw, json)
Hash identifier: +6DW0Y23dxCidtu/1hspFOnwzW6arOTr793fYFT5oHk=
Subject key identifier: 67:F5:37:EB:4F:B0:9A:BD:4C:58:C6:BD:26:E1:C2:4F:0C:ED:E0:4E
Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
Certificate issuer: /CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Certificate serial: 01A0C6A14F8D780F99D262ADD248FB59BF52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 01:00:55 +0000
Manifest this update: Tue 22 Sep 2026 01:00:55 +0000
Manifest next update: Wed 23 Sep 2026 01:00:55 +0000
Files and hashes: 1: 13eUOzQRiOnNLpPeKIsz_-BBx9I.crl (hash: S1voJ/vcLt10e0/9zTlKqP+9QQ4gwvntSpXLfbcPaLw=)
2: hyElpaRCi-O3ttxNPiq_tbabKaM.roa (hash: utFwv7iVQh6KFUfFUAR5z2o9lvR/OP856LSn2YX8Pbs=)
3: sxVjjTuZsumW0h6mF4GiRANgUvg.roa (hash: z5zoee9BxxfVBHQHis7Mo+eHgddxsrIvf3XwtD1/H80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:4f:8d:78:0f:99:d2:62:ad:d2:48:fb:59:bf:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Validity
Not Before: Sep 22 01:00:55 2026 GMT
Not After : Sep 23 01:00:55 2026 GMT
Subject: CN=67f537eb4fb09abd4c58c6bd26e1c24f0cede04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:33:97:bb:36:66:31:1a:f6:8c:27:05:e6:
b8:14:4b:5d:13:cb:b7:2a:ba:3e:09:75:a5:a3:ca:
c5:61:5e:fb:b6:4d:ea:50:87:0b:b5:1d:b1:bb:09:
8b:eb:cf:0a:a9:98:e0:d5:41:af:45:b9:ae:84:62:
bb:62:47:bd:a6:b9:7a:f2:bc:25:8c:4b:7d:88:75:
77:d1:52:eb:0a:a7:18:7f:50:b5:0d:b0:48:da:de:
5a:a5:1e:ae:d3:44:02:72:8e:1e:fa:02:92:6a:25:
a7:7e:1d:14:75:e8:79:bd:be:30:f9:f8:21:36:ef:
8e:00:bd:d2:c2:e0:0a:1e:48:cb:a9:2d:fb:0b:ef:
ef:e4:da:fc:55:e6:9b:18:14:27:32:83:fa:86:10:
bf:2b:e7:3e:31:5f:d4:e8:7d:8b:7e:c2:00:7f:5f:
8a:25:dd:08:b0:30:07:e5:9b:d0:11:1b:52:28:41:
b6:95:81:48:d7:74:28:9a:c4:e5:0d:f1:1f:9d:f3:
f7:10:ed:f3:f6:c5:96:21:62:f5:af:bc:34:b6:d8:
27:80:f7:f1:07:8e:c0:af:a5:5e:36:ce:aa:8c:f6:
ff:84:8b:09:56:be:d1:c7:8e:f5:71:b9:36:b5:61:
21:b5:df:6b:aa:08:a6:e2:24:aa:da:c2:3c:61:b1:
88:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F5:37:EB:4F:B0:9A:BD:4C:58:C6:BD:26:E1:C2:4F:0C:ED:E0:4E
X509v3 Authority Key Identifier:
keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:eb:2d:f7:0b:32:38:2c:61:70:7a:e0:a7:e7:8e:0c:3e:1a:
65:15:30:f4:ec:f6:7b:51:64:ff:41:87:19:66:f0:65:90:de:
80:81:47:fb:8a:f3:21:f2:e6:90:06:0d:33:37:e5:fa:7a:b7:
c7:0c:25:d6:18:6b:23:aa:f9:ad:ff:a1:cb:55:02:5b:1a:a3:
99:68:a3:33:3b:1d:42:6c:1b:34:63:a7:52:16:30:d5:6d:2d:
a2:a2:4c:cb:32:81:f0:b5:3a:4a:b1:98:c3:d5:52:11:c2:51:
bb:9c:b4:a7:fc:76:00:b6:c6:a0:17:0e:3b:9e:90:e2:e2:33:
db:03:72:a3:78:ac:21:59:d8:20:62:68:7c:8c:a9:06:02:99:
26:b8:b3:cf:b0:26:52:6b:1e:a3:72:57:49:4e:b1:16:22:db:
cb:cc:f0:5b:b2:90:c5:92:54:26:f0:9a:a2:df:c9:1d:95:89:
91:61:f5:a1:50:bc:c1:72:cc:04:4d:38:82:5f:58:e9:ef:50:
b3:53:96:9e:e8:ba:cb:52:27:01:d8:b9:1a:34:4a:76:85:40:
45:11:01:4c:d3:18:f5:b2:88:f3:e5:a6:54:2b:6a:10:7e:c8:
12:27:35:22:b9:06:77:d5:77:09:76:21:bd:21:6a:d3:28:de:
0c:3f:9a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:51:04 2026 by rpki-client