Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
File: 13j4yccHK3MEiPnjISjdiVveMtM.mft (raw, json)
Hash identifier: ZsXDXY5+hO0MwRm4DKQCTVoJ0RfLHO12uuyM35fWvUg=
Subject key identifier: C1:29:BE:70:7C:D8:BB:C2:C1:5C:77:10:D5:E4:25:B2:04:31:47:CD
Authority key identifier: D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3
Certificate issuer: /CN=d778f8c9c7072b730488f9e32128dd895bde32d3
Certificate serial: 01A0C70EA6171C500A6DC394DB7D45F06B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
Manifest number: 0A80
Signing time: Tue 22 Sep 2026 03:00:21 +0000
Manifest this update: Tue 22 Sep 2026 03:00:21 +0000
Manifest next update: Wed 23 Sep 2026 03:00:21 +0000
Files and hashes: 1: 13j4yccHK3MEiPnjISjdiVveMtM.crl (hash: 8tIHOJfH6I7ZFSt0gKl7TIajw6jZXc+MaAO6/O4Y5mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:a6:17:1c:50:0a:6d:c3:94:db:7d:45:f0:6b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d778f8c9c7072b730488f9e32128dd895bde32d3
Validity
Not Before: Sep 22 03:00:21 2026 GMT
Not After : Sep 23 03:00:21 2026 GMT
Subject: CN=c129be707cd8bbc2c15c7710d5e425b2043147cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:5b:2e:08:a9:f0:4f:b9:1c:7b:be:f8:4c:
c2:2d:65:97:a9:3a:10:c2:52:f2:08:f2:af:4f:24:
49:42:44:5c:17:b4:5f:9d:1d:b4:8b:95:9f:7b:4f:
d1:46:1d:1f:45:1a:1d:cf:91:3d:6e:56:28:2e:e2:
b3:55:47:6d:be:79:2a:89:99:bd:7f:69:5a:c3:04:
40:48:06:b1:e0:35:08:8c:82:2f:ce:93:f1:ae:78:
d9:3d:47:40:18:71:9e:d9:43:29:e9:9f:82:ad:b1:
77:21:c2:6a:b1:79:f1:06:90:14:49:ad:ef:61:7a:
0d:04:52:dc:d5:aa:c0:f8:23:ce:1c:93:69:ae:75:
74:05:68:a0:39:32:a9:4c:3d:f3:af:0d:e3:f9:df:
1a:e4:94:02:c0:83:a3:08:3e:a8:66:f8:00:c7:a3:
f9:51:63:ac:5b:b1:8c:86:a0:a0:8c:64:16:85:02:
d8:37:19:e0:f9:7b:91:9f:b0:51:8b:44:cc:b4:a7:
2c:69:56:84:45:0b:29:4f:d0:dd:b7:d3:8d:a8:76:
4e:42:b3:10:1c:37:41:90:c9:2e:8f:5d:44:86:46:
4a:61:a1:a0:dc:76:6f:42:99:97:a2:96:cc:cb:37:
8f:2b:a5:d7:b7:ae:a8:b8:ec:5e:65:28:70:b2:b8:
6b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:29:BE:70:7C:D8:BB:C2:C1:5C:77:10:D5:E4:25:B2:04:31:47:CD
X509v3 Authority Key Identifier:
keyid:D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:a8:80:68:a4:34:62:8b:56:ee:00:d4:3b:52:4b:ca:fb:2c:
00:7f:1e:74:7e:80:13:51:4c:98:be:f8:c5:77:b9:f5:72:af:
07:78:3c:02:de:a8:32:a5:c8:bb:b9:20:25:9c:d0:92:7f:0a:
35:c1:2d:cc:43:c6:d4:25:bd:53:89:9d:79:a3:2b:4c:aa:26:
6f:33:d0:0d:25:1a:72:43:51:6f:fb:be:5e:be:ef:a3:fa:4b:
74:3b:68:f6:f7:37:7d:0e:0c:24:08:7f:a0:6f:79:c9:66:e7:
42:af:5e:42:7f:77:88:94:f6:91:39:45:74:d0:82:fd:d8:2d:
ad:08:69:a4:22:32:2b:03:26:0a:4d:0c:ec:4e:9c:8e:6c:af:
6e:94:d2:00:03:14:3d:7d:e7:63:21:a7:c4:59:c3:72:89:1d:
7d:60:c9:41:53:bf:30:aa:75:f1:33:4b:cb:f5:c1:74:ea:2f:
d4:99:a9:cb:89:f4:33:cc:6c:d7:65:88:c8:56:ef:94:71:61:
1c:7f:29:89:ad:51:6f:e3:93:f3:66:26:bc:c4:fa:da:7e:68:
33:db:f9:c7:61:d5:70:51:79:e1:5d:9a:59:9e:ef:30:35:3d:
c3:50:2f:13:b7:09:43:54:d0:d0:67:fb:40:08:8a:90:17:ee:
d3:5a:6c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:26:33 2026 by rpki-client