Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
File: 13EApGzEauiWvcLg4HTjBVq4hns.mft (raw, json)
Hash identifier: QVbYsyHgTz/YQ2d3IZX8St7XpdpV5mR0NTcccjQEusE=
Subject key identifier: E6:5D:DC:53:C9:F9:12:D1:D5:AC:9B:11:F3:4F:E8:44:DE:F2:3F:DE
Authority key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
Certificate issuer: /CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Certificate serial: 019CAC469220DA51F97C51371B0B10F7CE78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
Manifest number: 0D02
Signing time: Mon 02 Mar 2026 02:00:31 +0000
Manifest this update: Mon 02 Mar 2026 02:00:31 +0000
Manifest next update: Tue 03 Mar 2026 02:00:31 +0000
Files and hashes: 1: 13EApGzEauiWvcLg4HTjBVq4hns.crl (hash: FhO6yZH3nAIVvdq1F61TGr+3qBxrpKunvO/1vLJicnM=)
2: lAjUh0yd7DRPhi-W3SSvqev0w_E.roa (hash: YCOHiUTXUD1rmQesFlzNj90jbAUp9KL2LXtb7YGRhtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:92:20:da:51:f9:7c:51:37:1b:0b:10:f7:ce:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Validity
Not Before: Mar 2 02:00:31 2026 GMT
Not After : Mar 3 02:00:31 2026 GMT
Subject: CN=e65ddc53c9f912d1d5ac9b11f34fe844def23fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a9:6c:a1:38:e4:8d:33:30:56:8e:48:2f:2a:
c0:b4:6d:08:9e:03:44:66:44:10:8d:a7:67:dd:ee:
d5:3c:20:b2:38:2e:0c:26:dc:f5:fc:15:a3:4f:57:
f1:ab:a5:c4:c2:8e:f8:37:d7:22:71:c4:7f:09:f6:
ce:ef:ce:6b:61:3c:e6:66:9b:73:42:b9:02:92:16:
82:2f:04:29:0c:f0:ff:44:92:9d:41:c7:e1:e7:1c:
d2:c9:05:1b:cc:ca:e3:82:7b:40:25:8c:df:47:d0:
d0:6c:26:10:96:82:52:81:3b:a7:43:5e:7a:6b:ba:
18:78:49:e9:e8:e3:8c:60:9b:c5:69:b6:a0:4c:82:
ea:56:f0:8d:ca:e4:15:ba:92:6a:4f:f4:48:66:35:
9a:42:fd:4d:c7:9b:fb:85:72:ba:0d:35:c9:cf:3f:
28:32:ef:61:8c:32:80:c3:29:0a:02:8f:f4:83:23:
8a:3c:e9:a7:d0:2b:29:e6:66:90:b9:0d:b1:82:4e:
a9:03:20:f1:0a:6e:cf:8d:f1:a3:04:03:8d:39:c8:
ba:d1:f4:06:78:58:be:60:c9:57:c1:7e:b5:6b:7e:
9f:54:58:f0:ee:2d:27:95:d5:ab:53:77:96:bb:2b:
7a:17:64:20:28:64:aa:a0:e3:eb:44:7b:fc:a0:1e:
ec:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:5D:DC:53:C9:F9:12:D1:D5:AC:9B:11:F3:4F:E8:44:DE:F2:3F:DE
X509v3 Authority Key Identifier:
keyid:D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ab:f5:d6:02:50:ed:db:35:9e:c9:fa:55:98:b9:d1:db:4b:
86:95:1c:52:7b:d5:5d:66:c3:bf:e2:d3:1d:bb:ba:f9:34:2b:
c3:9d:1c:e3:c2:88:3c:a0:f8:c3:d3:2b:1d:f8:04:62:68:4f:
81:18:75:32:fe:a4:a4:dc:22:6c:f8:b7:c1:e6:9c:83:f1:22:
8c:4c:c8:f6:e4:2b:94:67:4d:7c:dd:a9:7f:87:ec:68:7f:8f:
28:b0:2e:bd:03:dd:b9:b1:ba:b8:38:30:d6:54:db:7b:c0:e5:
56:8d:b0:98:39:5d:76:2f:3b:8a:c1:75:af:1a:52:c2:95:03:
6f:e8:3a:8e:f3:1a:fd:ce:62:f8:42:de:ea:a2:ad:32:58:1f:
e9:ec:b3:59:d9:c8:f6:de:34:d6:2c:14:89:dc:b3:57:c5:1a:
45:79:59:f1:73:23:24:a7:5c:39:cb:f3:c1:e9:5d:ae:ac:47:
55:cd:c7:50:13:66:3e:b3:0e:c6:f9:c5:2d:e3:e7:9f:7d:0c:
46:20:31:09:a4:75:2d:e8:c0:81:45:2b:e8:6d:21:a6:6d:87:
e4:0e:fa:7d:ba:f3:ee:bd:18:be:67:69:c2:94:31:a1:b2:d9:
e9:a1:5d:53:74:c4:6e:32:9f:9f:ff:47:a9:d2:8d:02:b9:c3:
6d:47:d0:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRpIg2lH5fFE3GwsQ9854MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NzEwMGE0NmNjNDZhZTg5NmJkYzJlMGUwNzRlMzA1NWFi
ODg2N2IwHhcNMjYwMzAyMDIwMDMxWhcNMjYwMzAzMDIwMDMxWjAzMTEwLwYDVQQD
EyhlNjVkZGM1M2M5ZjkxMmQxZDVhYzliMTFmMzRmZTg0NGRlZjIzZmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKlsoTjkjTMwVo5ILyrAtG0IngNE
ZkQQjadn3e7VPCCyOC4MJtz1/BWjT1fxq6XEwo74N9ciccR/CfbO785rYTzmZptz
QrkCkhaCLwQpDPD/RJKdQcfh5xzSyQUbzMrjgntAJYzfR9DQbCYQloJSgTunQ156
a7oYeEnp6OOMYJvFabagTILqVvCNyuQVupJqT/RIZjWaQv1Nx5v7hXK6DTXJzz8o
Mu9hjDKAwykKAo/0gyOKPOmn0Csp5maQuQ2xgk6pAyDxCm7PjfGjBAONOci60fQG
eFi+YMlXwX61a36fVFjw7i0nldWrU3eWuyt6F2QgKGSqoOPrRHv8oB7sxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZd3FPJ+RLR1aybEfNP6ETe8j/eMB8GA1UdIwQY
MBaAFNdxAKRsxGrolr3C4OB04wVauIZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjIt
ZGQ1MGJlMDY3NDAxLzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjItZGQ1MGJlMDY3NDAx
LzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtKv11gJQ
7ds1nsn6VZi50dtLhpUcUnvVXWbDv+LTHbu6+TQrw50c48KIPKD4w9MrHfgEYmhP
gRh1Mv6kpNwibPi3weacg/EijEzI9uQrlGdNfN2pf4fsaH+PKLAuvQPdubG6uDgw
1lTbe8DlVo2wmDlddi87isF1rxpSwpUDb+g6jvMa/c5i+ELe6qKtMlgf6eyzWdnI
9t401iwUidyzV8UaRXlZ8XMjJKdcOcvzweldrqxHVc3HUBNmPrMOxvnFLePnn30M
RiAxCaR1LejAgUUr6G0hpm2H5A76fbrz7r0YvmdpwpQxobLZ6aFdU3TEbjKfn/9H
qdKNArnDbUfQWg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:59 2026 by rpki-client