Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
File: 13mWjmbtvqNy75W6or9okThWekA.mft (raw, json)
Hash identifier: 4gUemTB8sEgkr0f28SolnPyy4psmDebcH7KQhFHe6Ko=
Subject key identifier: 8B:81:B4:89:DF:B6:F4:C3:88:0B:F9:C5:AE:5A:2A:89:3A:1D:9A:17
Authority key identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
Certificate issuer: /CN=d779968e66edbea372ef95baa2bf689138567a40
Certificate serial: 019D389BF7B6B619599D38CFB113489FA699
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 08:00:38 +0000
Manifest this update: Sun 29 Mar 2026 08:00:38 +0000
Manifest next update: Mon 30 Mar 2026 08:00:38 +0000
Files and hashes: 1: 13mWjmbtvqNy75W6or9okThWekA.crl (hash: 13vVrk+0m0gHU9zp+5s34fhYxWTH0MiqENjk9TgzZoo=)
2: a2dGgMgkDvSFz9UvYkCXlH5tzZU.roa (hash: c2MCuHjIaTWBayfSiKP1qGbzAEWRP5fSSTHUf07P0Kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:f7:b6:b6:19:59:9d:38:cf:b1:13:48:9f:a6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d779968e66edbea372ef95baa2bf689138567a40
Validity
Not Before: Mar 29 08:00:38 2026 GMT
Not After : Mar 30 08:00:38 2026 GMT
Subject: CN=8b81b489dfb6f4c3880bf9c5ae5a2a893a1d9a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f0:20:2a:1c:65:7a:4b:e5:7f:2a:0d:4f:d3:
87:4f:cb:b4:13:ad:06:e3:a9:99:bf:32:0c:bc:81:
f6:17:26:ef:9e:e0:e3:df:30:74:8b:c6:eb:bd:13:
5c:54:7d:e1:cb:17:03:66:2b:93:0b:65:4a:65:07:
c2:87:14:5c:f0:b0:1f:0f:7c:69:b6:6c:66:29:29:
a7:25:a8:9f:2e:80:5f:6d:98:df:fa:88:96:2a:62:
fd:95:b5:fc:1f:06:6d:17:99:dc:97:56:8c:77:dc:
55:28:4c:05:de:3b:20:c0:77:77:7e:b5:d2:89:bd:
eb:0e:b5:d5:68:03:16:da:2f:6e:89:cd:f4:fe:80:
c1:67:43:42:6e:14:64:59:b7:85:d5:1f:0f:97:93:
92:e5:7b:70:2b:1c:e5:22:d6:a6:07:ec:c5:51:7f:
f4:56:c5:5f:4a:a5:81:1d:be:e2:6b:5c:3b:3f:29:
a9:1e:f6:8a:65:da:b8:4a:28:65:30:b2:4d:3e:93:
18:7d:d4:d8:cc:9c:db:aa:55:c8:70:51:17:23:6b:
cf:79:d8:25:49:b0:89:e5:97:9b:c0:09:ec:33:74:
8b:7f:f6:ae:0b:90:82:86:fc:fd:a2:78:81:45:07:
e1:9e:2b:96:ef:1d:6f:e3:8c:53:cb:d5:7a:79:5c:
1f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:81:B4:89:DF:B6:F4:C3:88:0B:F9:C5:AE:5A:2A:89:3A:1D:9A:17
X509v3 Authority Key Identifier:
keyid:D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4c:16:5e:08:86:b9:6d:de:2e:9e:27:43:4f:35:6c:4c:9f:
57:a7:cf:24:7b:d2:93:5e:b9:68:dd:22:60:ba:21:67:64:ca:
32:21:30:07:7b:b9:32:46:a2:fe:7b:88:40:33:52:f9:a6:af:
36:10:d9:ff:6f:c0:b1:a6:e5:f0:58:be:ac:98:91:a9:29:bf:
a7:d6:a8:9b:3e:32:9e:8f:ab:7f:eb:d5:c5:fa:0b:69:1b:64:
98:2b:df:04:d6:b2:a9:df:7a:90:83:26:63:66:13:35:49:62:
eb:dd:20:7b:8b:c2:40:18:f9:87:d7:eb:6b:ca:cc:4d:a4:dd:
26:50:72:35:98:c6:f7:27:e7:7b:be:03:42:c4:d1:04:f7:04:
88:c5:6e:88:d3:e9:50:f8:e1:cd:3e:26:0b:ae:11:e8:cf:8a:
89:67:15:08:94:51:5e:58:01:76:a7:9c:e3:dc:3f:f3:ba:15:
68:b4:43:c3:7d:b6:f4:ae:1c:53:85:24:8e:9c:2d:d0:50:38:
83:06:e8:06:07:84:19:c0:05:e1:be:2a:3e:bc:58:a6:10:20:
cd:cc:60:2e:b2:b5:57:f2:76:79:29:05:82:d8:b1:28:a4:ce:
f2:f1:80:16:17:64:03:eb:9b:6b:1f:10:35:94:46:a8:5e:5f:
bb:9c:3c:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04m/e2thlZnTjPsRNIn6aZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Nzk5NjhlNjZlZGJlYTM3MmVmOTViYWEyYmY2ODkxMzg1
NjdhNDAwHhcNMjYwMzI5MDgwMDM4WhcNMjYwMzMwMDgwMDM4WjAzMTEwLwYDVQQD
Eyg4YjgxYjQ4OWRmYjZmNGMzODgwYmY5YzVhZTVhMmE4OTNhMWQ5YTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/AgKhxlekvlfyoNT9OHT8u0E60G
46mZvzIMvIH2FybvnuDj3zB0i8brvRNcVH3hyxcDZiuTC2VKZQfChxRc8LAfD3xp
tmxmKSmnJaifLoBfbZjf+oiWKmL9lbX8HwZtF5ncl1aMd9xVKEwF3jsgwHd3frXS
ib3rDrXVaAMW2i9uic30/oDBZ0NCbhRkWbeF1R8Pl5OS5XtwKxzlItamB+zFUX/0
VsVfSqWBHb7ia1w7PympHvaKZdq4SihlMLJNPpMYfdTYzJzbqlXIcFEXI2vPedgl
SbCJ5ZebwAnsM3SLf/auC5CChvz9oniBRQfhniuW7x1v44xTy9V6eVwfnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuBtInftvTDiAv5xa5aKok6HZoXMB8GA1UdIwQY
MBaAFNd5lo5m7b6jcu+VuqK/aJE4VnpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNtV2ptYnR2cU55NzVXNm9yOW9rVGhXZWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85NGJmNWItZDM4YS00Yzc2LWIwMWYt
NmU2ZmEzOWJiMWVjLzEvMTNtV2ptYnR2cU55NzVXNm9yOW9rVGhXZWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC85NGJmNWItZDM4YS00Yzc2LWIwMWYtNmU2ZmEzOWJiMWVj
LzEvMTNtV2ptYnR2cU55NzVXNm9yOW9rVGhXZWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkwWXgiG
uW3eLp4nQ081bEyfV6fPJHvSk165aN0iYLohZ2TKMiEwB3u5Mkai/nuIQDNS+aav
NhDZ/2/Asabl8Fi+rJiRqSm/p9aomz4yno+rf+vVxfoLaRtkmCvfBNayqd96kIMm
Y2YTNUli690ge4vCQBj5h9fra8rMTaTdJlByNZjG9yfne74DQsTRBPcEiMVuiNPp
UPjhzT4mC64R6M+KiWcVCJRRXlgBdqec49w/87oVaLRDw3229K4cU4Ukjpwt0FA4
gwboBgeEGcAF4b4qPrxYphAgzcxgLrK1V/J2eSkFgtixKKTO8vGAFhdkA+ubax8Q
NZRGqF5fu5w85A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:25 2026 by rpki-client