Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
File: 13BmKFIPfdrO9yQ276VGNcUs_ck.mft (raw, json)
Hash identifier: EU5u3e+CeF5z0/PkXVayjIj8O8v0cSD374oF6yOq+kM=
Subject key identifier: F5:A8:92:6E:D3:59:EC:45:B9:3B:60:1C:0F:67:7D:DD:3C:91:F5:54
Authority key identifier: D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
Certificate issuer: /CN=d7706628520f7ddacef72436efa54635c52cfdc9
Certificate serial: 01A0C85874358049136DED075577B34F3983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
Manifest number: 113D
Signing time: Tue 22 Sep 2026 09:00:35 +0000
Manifest this update: Tue 22 Sep 2026 09:00:35 +0000
Manifest next update: Wed 23 Sep 2026 09:00:35 +0000
Files and hashes: 1: 13BmKFIPfdrO9yQ276VGNcUs_ck.crl (hash: 5pC+K6vcrLUmBETGy9V74pg/yyvl+MSICmM4gkpvJ5c=)
2: DQoj2ctBiN_T5FWsMsnqhdItImU.roa (hash: 5///YJpY90e2P/CAZ06dyQ4dMtgO+abo0J7yzIB0xQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:74:35:80:49:13:6d:ed:07:55:77:b3:4f:39:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7706628520f7ddacef72436efa54635c52cfdc9
Validity
Not Before: Sep 22 09:00:35 2026 GMT
Not After : Sep 23 09:00:35 2026 GMT
Subject: CN=f5a8926ed359ec45b93b601c0f677ddd3c91f554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:59:dc:aa:ce:40:f0:1f:59:23:14:a7:68:
91:57:56:78:66:74:59:10:d8:58:c0:0f:48:a9:3e:
d0:e7:e5:42:63:22:8f:be:4c:a7:94:7e:77:d2:c5:
df:e8:4c:b6:05:ab:f3:25:ab:d3:78:39:8e:58:76:
f8:4d:d0:a9:eb:82:2e:c7:9e:80:af:37:a4:36:e3:
19:8e:f8:02:a6:40:7f:57:b7:a2:ca:66:e0:fd:47:
3e:96:55:d4:15:31:6f:08:e3:69:79:7d:c2:71:b4:
23:32:a9:e5:7f:9f:09:ee:b7:6a:85:e4:c3:19:25:
bd:58:df:9f:27:03:7a:2a:a6:4d:3d:ab:df:09:2c:
f3:d0:06:1c:29:28:4a:b9:d8:7d:ff:01:64:ba:c4:
27:19:58:97:e7:66:85:3b:bd:d0:96:98:6f:cd:35:
5b:f7:4f:83:16:35:3d:3d:df:ea:54:ae:8d:6a:96:
5d:fc:28:56:d0:ce:2e:bf:97:ba:c8:f0:d5:eb:af:
ba:32:9b:2a:8b:10:7a:15:8f:06:cb:f4:f9:99:05:
7c:6d:a2:47:57:eb:ae:4a:25:ec:1c:ad:ce:7b:a1:
ef:98:67:a4:fa:fa:4e:06:73:5e:1e:b3:08:fc:4c:
6d:2e:12:6f:09:16:23:27:97:15:6f:a8:99:44:1e:
7d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A8:92:6E:D3:59:EC:45:B9:3B:60:1C:0F:67:7D:DD:3C:91:F5:54
X509v3 Authority Key Identifier:
keyid:D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:50:c9:ad:9b:5e:ff:03:52:5a:e3:50:7d:40:ed:1e:74:24:
6e:84:b0:65:5a:c4:88:f1:a4:01:16:fa:5c:3d:c8:bf:14:f0:
00:fb:6d:8c:17:54:08:74:91:e1:89:4c:42:08:f2:b4:94:21:
54:2d:6d:68:1a:ba:54:a0:46:2a:de:79:64:50:dd:4d:43:86:
98:52:a4:50:3c:97:be:c0:38:b2:bf:e7:43:83:f7:8f:93:5e:
77:22:84:12:30:09:4b:50:d7:00:99:f8:9e:a6:d0:80:64:d8:
b5:72:19:7d:f0:6a:c2:59:bd:61:be:cc:bd:ac:a0:c4:ac:a8:
ce:57:40:ce:9a:ee:56:9c:2c:fd:a4:cf:41:28:43:30:bf:e1:
00:f1:7d:9f:ad:b9:67:14:e3:be:0b:5c:1f:94:c7:75:80:1a:
f7:4c:e7:74:ab:21:59:5a:75:1a:0a:a2:fa:a2:eb:da:4d:1e:
27:b3:b8:2f:97:40:82:61:47:a3:9c:75:4d:95:1f:2b:89:cd:
50:f3:9e:0c:83:88:15:38:c8:f1:c1:3d:3a:a2:aa:46:c0:ca:
b3:91:f9:5a:5f:35:52:a2:9c:06:01:71:e1:55:3c:1c:95:9c:
55:a2:b4:d8:f1:02:fe:6e:28:dc:d0:8a:2b:82:25:e0:55:30:
a8:38:e2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:42:31 2026 by rpki-client