Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
File: 13BmKFIPfdrO9yQ276VGNcUs_ck.mft (raw, json)
Hash identifier: BvFsSosn+aSYQeWruxC78VUMPzBicCTzFZ7DzAuVHHE=
Subject key identifier: 1C:34:83:BD:36:B4:C5:A4:76:03:08:2A:6D:19:BE:A6:2D:4E:8E:70
Authority key identifier: D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
Certificate issuer: /CN=d7706628520f7ddacef72436efa54635c52cfdc9
Certificate serial: 019FA899F801E1FA95855D280CFD727F2114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
Manifest number: 10A8
Signing time: Tue 28 Jul 2026 12:01:30 +0000
Manifest this update: Tue 28 Jul 2026 12:01:30 +0000
Manifest next update: Wed 29 Jul 2026 12:01:30 +0000
Files and hashes: 1: 13BmKFIPfdrO9yQ276VGNcUs_ck.crl (hash: OIMeOTXmw2jfuxer1jlMiVPrRV0UxzKjeXAOKrJLJ4c=)
2: DQoj2ctBiN_T5FWsMsnqhdItImU.roa (hash: 5///YJpY90e2P/CAZ06dyQ4dMtgO+abo0J7yzIB0xQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:f8:01:e1:fa:95:85:5d:28:0c:fd:72:7f:21:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7706628520f7ddacef72436efa54635c52cfdc9
Validity
Not Before: Jul 28 12:01:30 2026 GMT
Not After : Jul 29 12:01:30 2026 GMT
Subject: CN=1c3483bd36b4c5a47603082a6d19bea62d4e8e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c3:ce:93:4e:72:00:5c:47:3a:5b:c9:d8:b5:
70:9a:bc:c7:4d:27:ef:44:c1:4d:aa:61:a8:3c:33:
db:ef:c7:5e:26:0a:70:be:96:1b:52:7a:77:47:c4:
c5:f6:ea:12:f7:83:cc:24:a5:50:38:4f:d4:fe:55:
02:90:07:11:3b:0d:48:be:47:04:87:c3:13:9a:76:
13:e4:6b:f0:c2:8b:4e:92:08:00:52:3f:1b:dd:d6:
e0:57:a8:aa:f4:cb:73:c9:75:da:8e:86:b4:3c:1b:
83:6a:b1:a8:70:62:11:f4:8b:5e:d5:c2:a1:83:6a:
77:5d:c1:ef:93:cf:53:7b:5b:2e:d2:72:69:3e:4b:
16:c3:78:71:df:22:d6:10:93:70:b0:b9:7c:53:cd:
a5:5f:c0:f9:6e:ae:04:76:58:37:f3:98:30:64:02:
83:e8:81:6a:d6:d3:e4:47:ce:d7:76:4f:64:18:22:
23:a8:14:5c:1e:93:fe:53:43:44:db:b9:fc:bc:46:
a9:96:00:3c:84:25:cd:0e:28:54:8a:e9:bd:c5:ce:
ae:da:a8:32:b1:d8:dd:55:9c:22:70:01:eb:a2:79:
da:cb:8b:fa:c2:ed:71:71:cf:68:12:c9:e4:65:7d:
69:c8:45:b9:94:fb:b5:84:a5:ac:af:9f:f5:49:9c:
27:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:34:83:BD:36:B4:C5:A4:76:03:08:2A:6D:19:BE:A6:2D:4E:8E:70
X509v3 Authority Key Identifier:
keyid:D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b8:63:ac:7a:c8:ba:56:f8:10:4c:9f:62:e7:66:0c:64:08:
c4:13:4c:37:20:29:b7:a2:1e:2e:7e:0a:2d:25:07:16:1d:e5:
e2:00:9b:b7:d8:68:e1:30:71:2e:4b:45:12:36:79:75:1c:f6:
13:6e:07:6a:3c:79:52:4d:cb:4d:53:eb:9c:6d:a6:c0:46:a6:
10:97:7c:52:62:b2:ac:26:e4:2c:7d:9b:1a:28:5c:fc:4b:a0:
7d:ce:06:e0:40:69:06:55:f0:76:86:0d:b7:fb:fc:db:5e:40:
59:6c:46:1b:ed:b9:1e:f8:c9:78:f1:3e:b6:a6:55:08:f2:10:
95:8e:1d:55:5f:ed:e4:20:ba:dd:80:85:60:02:6f:9d:e9:3b:
9d:36:3d:b7:47:18:8c:06:f1:0a:e1:4d:b0:6d:2e:34:8e:c5:
1b:11:bd:d2:47:4c:68:58:f9:ec:86:8d:86:81:67:79:e2:3f:
9a:50:07:8b:ac:3c:70:54:30:06:04:8d:6b:b9:74:9c:4c:a5:
94:8f:fb:32:ea:9e:b2:21:51:39:5c:7e:c2:9f:a7:bf:92:21:
f8:ef:a3:33:87:30:fb:79:41:c2:ec:57:98:ef:d7:20:68:56:
f7:e3:31:ca:79:cf:f0:8c:38:fa:00:a6:43:d3:a1:bd:47:59:
78:3f:84:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:09:22 2026 by rpki-client