Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
File: 13j4yccHK3MEiPnjISjdiVveMtM.mft (raw, json)
Hash identifier: U9khUrGM9WhaDqDSR+vuAvBzpHJC9ASDLN3SKiI4X7Y=
Subject key identifier: 43:15:83:10:DA:E9:6E:5B:E5:A0:DE:48:F6:78:07:1D:97:B4:7C:9E
Authority key identifier: D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3
Certificate issuer: /CN=d778f8c9c7072b730488f9e32128dd895bde32d3
Certificate serial: 019D9A06BF468784FCED2FE92A8AE20876B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
Manifest number: 08DB
Signing time: Fri 17 Apr 2026 06:00:26 +0000
Manifest this update: Fri 17 Apr 2026 06:00:26 +0000
Manifest next update: Sat 18 Apr 2026 06:00:26 +0000
Files and hashes: 1: 13j4yccHK3MEiPnjISjdiVveMtM.crl (hash: Y2kL3osH2AUqfvP5QefzuWatdYrvy61leCGwlQydiOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:bf:46:87:84:fc:ed:2f:e9:2a:8a:e2:08:76:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d778f8c9c7072b730488f9e32128dd895bde32d3
Validity
Not Before: Apr 17 06:00:26 2026 GMT
Not After : Apr 18 06:00:26 2026 GMT
Subject: CN=43158310dae96e5be5a0de48f678071d97b47c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:96:b2:f9:40:71:bf:21:bd:95:78:a5:cb:
94:23:a8:49:07:8d:0b:22:ac:2a:ff:39:d6:00:77:
c2:6e:bc:b3:42:cc:29:61:26:4c:d0:e6:b7:43:66:
70:04:7d:40:1c:8a:af:0e:54:c5:09:e6:a4:3a:1e:
78:90:ea:ac:ad:0f:1b:92:eb:f0:2d:b9:df:ca:ec:
de:ff:03:1c:72:12:bc:f1:a3:09:39:d8:c3:9f:a7:
6f:e8:93:23:75:f5:59:ea:61:24:59:0b:07:37:77:
38:7b:9d:f3:9e:9f:be:eb:d3:c6:a8:93:61:24:b6:
55:66:e1:10:25:af:f0:35:73:f3:ed:d2:9e:ac:6c:
4b:d1:0b:1e:aa:9a:09:9d:ba:fd:ae:b9:b0:89:be:
7a:e6:21:1a:9b:a2:40:00:1a:ee:87:02:5d:91:60:
8c:00:69:4d:20:3f:ba:72:14:df:e3:39:3c:19:b9:
03:9f:cf:7a:97:da:2d:ae:3f:49:5c:1b:6a:d9:cc:
c1:95:d2:e1:ef:2a:8a:c1:a8:38:85:c5:3e:bb:79:
59:27:47:90:73:81:ee:c6:86:8b:f2:b2:cb:01:6c:
bc:de:50:b8:32:7b:31:d1:d0:d7:2d:f1:84:53:0a:
b0:2e:53:86:8e:32:22:dd:bc:3c:cb:08:3e:13:97:
9f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:15:83:10:DA:E9:6E:5B:E5:A0:DE:48:F6:78:07:1D:97:B4:7C:9E
X509v3 Authority Key Identifier:
keyid:D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:9a:c1:4e:50:ad:8e:1c:4c:64:59:c4:b5:11:d6:8b:9c:71:
7e:59:f5:43:ad:1b:59:2b:f4:3f:f6:a3:2e:f3:4c:72:15:b9:
87:d6:02:9a:75:7e:cd:cc:2f:f8:bb:6a:bd:0d:40:07:e2:a4:
30:61:f2:bb:84:af:47:2a:27:3e:0e:4c:4c:cd:b0:74:67:86:
43:4c:00:cb:24:b6:3a:c9:36:9e:38:f3:2a:63:10:7a:ab:c8:
20:28:1f:3b:ce:57:70:40:ff:29:70:7f:57:b0:96:f1:88:4b:
5c:08:d6:0f:4a:cc:50:d4:f7:32:62:89:c6:d6:36:2f:7a:be:
91:b6:1d:94:12:4b:f8:76:00:47:50:04:42:2f:8b:91:40:7e:
21:03:6f:9e:a8:d7:58:96:b3:e0:2d:5a:f0:ea:66:f7:49:38:
08:9a:b1:c8:6a:c9:97:d7:76:d5:bb:00:39:24:f9:ae:7d:75:
40:3e:d4:66:a6:ef:b5:1b:34:2f:12:f1:e9:97:80:23:c2:71:
0b:9e:8a:ee:63:8b:a0:25:85:e8:55:06:4b:da:a5:65:ab:e4:
15:ab:c1:88:6c:7c:a4:f8:84:21:78:b3:78:c3:12:ef:95:3a:
2f:fc:88:a4:d0:c9:84:80:03:fe:7f:60:cd:80:53:89:11:49:
97:00:0d:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBr9Gh4T87S/pKoriCHaxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NzhmOGM5YzcwNzJiNzMwNDg4ZjllMzIxMjhkZDg5NWJk
ZTMyZDMwHhcNMjYwNDE3MDYwMDI2WhcNMjYwNDE4MDYwMDI2WjAzMTEwLwYDVQQD
Eyg0MzE1ODMxMGRhZTk2ZTViZTVhMGRlNDhmNjc4MDcxZDk3YjQ3YzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV2WsvlAcb8hvZV4pcuUI6hJB40L
Iqwq/znWAHfCbryzQswpYSZM0Oa3Q2ZwBH1AHIqvDlTFCeakOh54kOqsrQ8bkuvw
Lbnfyuze/wMcchK88aMJOdjDn6dv6JMjdfVZ6mEkWQsHN3c4e53znp++69PGqJNh
JLZVZuEQJa/wNXPz7dKerGxL0QseqpoJnbr9rrmwib565iEam6JAABruhwJdkWCM
AGlNID+6chTf4zk8GbkDn896l9otrj9JXBtq2czBldLh7yqKwag4hcU+u3lZJ0eQ
c4HuxoaL8rLLAWy83lC4Mnsx0dDXLfGEUwqwLlOGjjIi3bw8ywg+E5efuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMVgxDa6W5b5aDeSPZ4Bx2XtHyeMB8GA1UdIwQY
MBaAFNd4+MnHBytzBIj54yEo3Ylb3jLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNqNHljY0hLM01FaVBuaklTamRpVnZlTXRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9hMjg0ZjctYWFkZS00MTY4LWE5ZDAt
NThiZTkyN2Y0MmU5LzEvMTNqNHljY0hLM01FaVBuaklTamRpVnZlTXRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9hMjg0ZjctYWFkZS00MTY4LWE5ZDAtNThiZTkyN2Y0MmU5
LzEvMTNqNHljY0hLM01FaVBuaklTamRpVnZlTXRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5rBTlCt
jhxMZFnEtRHWi5xxfln1Q60bWSv0P/ajLvNMchW5h9YCmnV+zcwv+LtqvQ1AB+Kk
MGHyu4SvRyonPg5MTM2wdGeGQ0wAyyS2Osk2njjzKmMQeqvIICgfO85XcED/KXB/
V7CW8YhLXAjWD0rMUNT3MmKJxtY2L3q+kbYdlBJL+HYAR1AEQi+LkUB+IQNvnqjX
WJaz4C1a8Opm90k4CJqxyGrJl9d21bsAOST5rn11QD7UZqbvtRs0LxLx6ZeAI8Jx
C56K7mOLoCWF6FUGS9qlZavkFavBiGx8pPiEIXizeMMS75U6L/yIpNDJhIAD/n9g
zYBTiRFJlwANqw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:26:32 2026 by rpki-client