Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
File: 13BmKFIPfdrO9yQ276VGNcUs_ck.mft (raw, json)
Hash identifier: cKXnDc+vQL57EGvkjF3/oVadWKEseH7jl//VL+IAw5Q=
Subject key identifier: 11:05:72:64:C7:4F:C6:0B:0C:7E:A7:FB:6F:CA:55:04:FC:38:F2:3F
Authority key identifier: D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
Certificate issuer: /CN=d7706628520f7ddacef72436efa54635c52cfdc9
Certificate serial: 019CAC0FC625A9C15BA290E5DFE4F403A0F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
Manifest number: 0F19
Signing time: Mon 02 Mar 2026 01:00:40 +0000
Manifest this update: Mon 02 Mar 2026 01:00:40 +0000
Manifest next update: Tue 03 Mar 2026 01:00:40 +0000
Files and hashes: 1: 13BmKFIPfdrO9yQ276VGNcUs_ck.crl (hash: hJlpRhazS65NyiQh2ABMUzhKWbvLGOuwGNMlbEWUA0M=)
2: uQRbqS9LPTy7hZzBwEs3VE_Bnd0.roa (hash: QkUHvM9www+i9hqJm6pKI/m/l1ZGqMAnj/w7SHFkHZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:c6:25:a9:c1:5b:a2:90:e5:df:e4:f4:03:a0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7706628520f7ddacef72436efa54635c52cfdc9
Validity
Not Before: Mar 2 01:00:40 2026 GMT
Not After : Mar 3 01:00:40 2026 GMT
Subject: CN=11057264c74fc60b0c7ea7fb6fca5504fc38f23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:54:22:55:5c:d4:da:bf:9d:74:61:6e:6c:78:
98:e6:5f:58:9e:cf:18:2c:2a:df:7b:17:a2:77:ec:
90:d8:92:54:61:dd:f8:fa:27:be:4f:82:ac:4d:e4:
3b:ad:f0:b2:14:f9:fb:18:3d:77:ae:7d:c4:73:7e:
51:5f:3f:bf:20:e3:0f:75:45:c5:f0:53:b5:cb:fe:
58:19:af:31:0f:5c:cf:be:d5:66:af:dd:d2:8d:12:
ed:fd:45:40:ab:a4:1a:d7:7f:48:63:f4:a5:a6:cb:
2f:64:3a:0f:89:5d:34:f3:7c:00:fd:6c:4d:82:63:
1a:e8:0f:11:c5:d5:be:fc:64:0e:fe:dc:76:6f:cf:
b9:7e:9a:eb:d8:84:3a:af:eb:94:61:52:be:fe:5f:
3c:7b:07:35:2f:0e:c8:c8:9e:da:13:b1:ef:c6:a8:
85:4e:d2:02:10:2f:b3:00:08:9c:98:76:ad:cf:fc:
7a:51:73:fe:7a:3f:e8:65:7b:26:39:6f:9e:f7:a4:
92:a7:6a:d8:00:30:df:89:06:0c:20:11:2f:ad:ec:
ac:c2:25:96:fd:5c:fa:01:dc:48:1a:60:57:b4:eb:
7e:1e:24:c3:39:d2:32:fc:56:8d:7f:38:42:3a:d0:
4d:fa:a0:09:65:c6:4b:04:0a:d9:61:59:e8:65:bf:
78:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:05:72:64:C7:4F:C6:0B:0C:7E:A7:FB:6F:CA:55:04:FC:38:F2:3F
X509v3 Authority Key Identifier:
keyid:D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6a:97:96:6e:7b:90:8c:96:c6:32:4a:25:b6:13:ca:9c:95:
9f:aa:61:83:f8:d1:64:0a:e9:77:5f:5a:6d:44:4b:33:43:bb:
58:af:ee:f9:bf:e5:e7:2d:72:0d:b9:bc:7b:9d:52:f9:63:8d:
de:77:bf:6f:d6:07:21:d1:1e:84:f1:0a:a8:60:e0:b7:78:93:
38:71:44:f7:97:bd:5d:fc:fb:8b:fa:b9:7b:2a:d0:27:dc:1b:
17:ff:b1:59:8d:bf:fc:ae:40:b8:51:1e:44:c9:83:91:89:45:
54:2e:ab:db:b8:c3:8d:dc:35:35:bc:e1:8e:67:7e:43:73:86:
60:9b:4a:e9:18:b2:44:95:d8:b2:f1:f2:e8:d1:12:40:bd:d8:
e2:d7:13:95:60:8a:0e:1e:75:4f:18:56:3c:48:72:34:de:05:
26:63:c8:b4:7c:92:0c:43:00:ef:8d:f3:be:35:27:f0:4a:08:
3d:73:11:93:32:c1:c4:53:cb:0f:ac:13:a7:3d:d7:eb:c2:02:
37:de:53:9c:47:7f:b1:07:b0:0c:ae:ec:7f:ea:63:6e:32:86:
e2:d3:2a:52:5c:0a:7f:39:b7:f2:ca:17:c2:03:85:c3:1f:42:
ba:7b:c9:3a:16:28:89:09:d1:e3:4b:54:bd:48:f7:22:e5:9a:
bc:ca:b4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:10 2026 by rpki-client