Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
File: 13auCasbyUrOg_pv02rFIoZ7kuo.mft (raw, json)
Hash identifier: cVR04U67cil5MXuGtTmvloTgjS/0Ucasbyr0qAuORcA=
Subject key identifier: 2F:40:53:0D:D8:1D:C9:38:5E:BE:48:A3:6C:EC:D8:84:42:B5:DA:80
Authority key identifier: D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA
Certificate issuer: /CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
Certificate serial: 01A1249D4372C16A9FFD385EF5AE422DA050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
Manifest number: 1A97
Signing time: Sat 10 Oct 2026 07:00:48 +0000
Manifest this update: Sat 10 Oct 2026 07:00:48 +0000
Manifest next update: Sun 11 Oct 2026 07:00:48 +0000
Files and hashes: 1: 13auCasbyUrOg_pv02rFIoZ7kuo.crl (hash: gLeD7YGkWKK0GR0yA01W6Yx23FbZtVeiKVznR62b8NE=)
2: yQF_oqKXVguMAr3971D21MlrR_8.roa (hash: rXFsVsTmW2PojlnuQAcJtT+oQ2/oW7PggfH906SCVtQ=)
3: ywVR7woUIzneTMtjfuoirWk196k.roa (hash: i+MATSFKerXwDHLKNUICE818LV3sf8RvOyqaZnW8Yrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:9d:43:72:c1:6a:9f:fd:38:5e:f5:ae:42:2d:a0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
Validity
Not Before: Oct 10 07:00:48 2026 GMT
Not After : Oct 11 07:00:48 2026 GMT
Subject: CN=2f40530dd81dc9385ebe48a36cecd88442b5da80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:41:a5:7e:0c:36:94:1a:b0:da:0a:8c:99:ba:
cb:b5:00:24:2d:e4:dc:89:e7:e8:55:46:51:ef:30:
37:0a:79:f0:cd:49:62:ea:29:45:08:90:4a:d1:d8:
5f:38:0b:77:e3:91:5a:48:c8:70:c3:5b:05:87:a1:
b1:4a:08:d8:fd:2f:16:1a:41:b4:44:7b:2f:47:a1:
3e:de:19:75:c5:63:66:a4:1e:87:5c:34:fa:65:f9:
df:a5:a4:3d:c1:75:df:a8:b1:f1:c6:5d:89:37:eb:
28:8f:e3:e6:ca:4f:47:28:af:66:11:5a:b2:06:37:
10:0e:11:e5:ad:56:7c:d1:0b:85:51:3d:9b:52:32:
3f:31:f8:a3:77:f0:b6:58:b3:7c:fa:2e:f9:45:f7:
6b:ef:68:f8:25:05:7a:4b:89:13:81:24:9a:09:de:
cc:47:df:99:4c:47:58:16:75:12:80:84:8b:e7:35:
4e:34:97:58:89:5b:70:a6:06:98:22:94:4c:ff:16:
8c:0d:c1:15:97:80:ee:a9:20:f6:4e:4b:c5:77:de:
2c:c0:ec:e7:48:93:2e:3a:c4:0c:91:e0:f8:6c:83:
3a:2c:0b:6a:ba:c5:aa:13:60:0c:66:5e:7a:a1:ae:
b3:5b:4e:e2:27:b3:aa:5b:f0:12:e9:67:ee:d2:e2:
6f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:40:53:0D:D8:1D:C9:38:5E:BE:48:A3:6C:EC:D8:84:42:B5:DA:80
X509v3 Authority Key Identifier:
keyid:D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:8c:f2:6c:1c:35:be:f1:1f:8a:14:c9:2d:2c:30:b6:f1:05:
ae:76:ec:8c:92:1d:0f:e5:a6:fc:3e:fa:93:c9:e3:01:f7:b6:
23:cf:8d:d2:77:a3:49:d9:6e:30:2c:52:d4:d7:7e:ed:64:45:
f5:d6:16:b8:c8:2b:3d:ad:27:13:e3:e9:f7:02:29:49:76:37:
2b:3b:00:6b:c2:c8:57:c4:05:3e:1f:e2:fd:b5:8c:60:c1:08:
d1:97:31:a3:b6:38:00:c9:fc:87:9e:ad:b0:90:db:19:08:dc:
c9:d2:0b:ca:1f:3c:67:d5:4c:a0:77:a3:aa:99:75:9b:d6:6f:
53:15:2d:59:06:19:c1:57:bf:07:b1:12:de:b7:d9:f9:12:92:
7b:ed:7b:06:e6:26:c6:ca:15:cd:41:19:c2:0a:21:bf:9d:1c:
d6:65:a8:64:09:0c:72:d3:96:a6:8c:04:9b:4c:67:85:ee:10:
08:6b:92:9e:7d:00:a5:b1:bd:2c:05:8c:37:04:b4:a6:cc:5a:
ab:31:1f:a2:c8:6a:ef:5f:1f:c5:fb:d8:5d:0a:73:25:25:6f:
d4:a8:11:26:aa:d2:ce:c7:30:f7:fa:06:be:a8:26:f7:7c:67:
3f:8e:28:84:d3:9d:70:f8:c4:21:4f:dc:92:9d:ab:98:1b:bb:
c4:ee:7c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:04:53 2026 by rpki-client