Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
File: 13mWjmbtvqNy75W6or9okThWekA.mft (raw, json)
Hash identifier: 01etkiShP4ddCrbj26FKuamaLKD+zO6IU5KFRNLM16c=
Subject key identifier: D0:37:EC:48:01:78:09:C1:B8:6A:02:E5:0D:32:61:39:70:2A:C5:AC
Authority key identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
Certificate issuer: /CN=d779968e66edbea372ef95baa2bf689138567a40
Certificate serial: 01A13DEECD1B1CA9B9AFBAF4679A16522B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 05:00:22 +0000
Manifest this update: Thu 15 Oct 2026 05:00:22 +0000
Manifest next update: Fri 16 Oct 2026 05:00:22 +0000
Files and hashes: 1: 13mWjmbtvqNy75W6or9okThWekA.crl (hash: DPM4+nt15xgbRg4gflUIl0A36kIdtkn9q2C75Jabu1Y=)
2: a2dGgMgkDvSFz9UvYkCXlH5tzZU.roa (hash: c2MCuHjIaTWBayfSiKP1qGbzAEWRP5fSSTHUf07P0Kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:cd:1b:1c:a9:b9:af:ba:f4:67:9a:16:52:2b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d779968e66edbea372ef95baa2bf689138567a40
Validity
Not Before: Oct 15 05:00:22 2026 GMT
Not After : Oct 16 05:00:22 2026 GMT
Subject: CN=d037ec48017809c1b86a02e50d326139702ac5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3d:8d:9b:80:4c:ea:6a:1c:7c:ae:f0:2a:aa:
30:34:a0:20:42:e2:d4:30:05:b7:93:e7:44:8f:5a:
5c:6b:25:11:50:1b:df:47:ba:4f:d5:99:8d:56:5b:
63:8e:f5:d9:19:da:69:c4:83:30:5c:3e:a9:d2:e0:
4c:0f:4b:88:b2:a5:1f:38:a0:07:5c:72:3c:30:c9:
cc:75:d0:d5:46:42:10:9b:35:7f:6e:ea:1d:eb:28:
e3:3d:10:cb:f5:40:70:7b:20:ba:b1:6f:17:ef:40:
c0:3a:3c:b6:2a:6e:c4:b2:78:dd:b2:a2:ba:47:31:
5b:98:82:4e:b6:34:fd:51:de:e9:d1:55:9b:c4:ca:
87:86:ec:e9:f3:f2:ee:7a:45:3f:1a:53:3a:08:a2:
8b:8f:62:bb:95:60:b1:00:4e:87:3e:c8:37:9e:42:
0b:91:f2:49:ff:c3:2d:f7:54:c3:5a:0e:71:8d:ca:
05:44:e4:a7:b0:37:55:7a:43:c0:d1:15:4b:13:b4:
d6:ac:37:34:05:d3:f5:a4:52:d4:94:f9:c4:c8:71:
fb:a7:8a:9e:a1:d0:80:5e:95:29:e5:47:fb:8f:4e:
31:fe:8f:05:0e:b1:c9:85:ea:8e:19:0c:38:ec:ca:
72:aa:d3:43:6a:17:90:7f:04:5e:bc:7a:01:3b:7f:
7f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:37:EC:48:01:78:09:C1:B8:6A:02:E5:0D:32:61:39:70:2A:C5:AC
X509v3 Authority Key Identifier:
keyid:D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:4b:e6:31:6d:d8:05:3f:33:cd:fc:cc:03:dc:61:86:f0:f8:
bf:ac:07:e6:04:23:3c:f4:8d:77:91:8c:28:d8:78:d4:f0:ff:
35:a8:38:4d:01:57:5a:33:03:78:a6:f9:ca:86:81:8d:76:d1:
41:52:6a:91:78:24:36:60:36:79:24:a3:98:37:a6:32:35:9a:
4e:b3:4d:6f:43:14:5d:34:dc:7b:46:80:ac:ad:58:f6:3d:ec:
f7:92:1e:71:6d:29:fe:40:31:c0:62:8e:35:7e:9f:dd:e7:b9:
09:df:02:5b:c2:6d:e8:06:14:c3:68:18:89:86:34:95:cb:23:
ad:c9:d7:35:63:95:70:df:04:9e:86:82:7a:42:24:b6:5d:58:
8a:ba:af:b6:c2:28:2e:e8:ed:44:77:0c:05:3a:3f:21:d5:2e:
4c:13:ee:65:1d:81:f1:c8:93:89:b9:f1:79:26:47:9c:1a:ea:
08:3c:68:c5:5e:28:83:dc:3b:72:44:45:b3:a2:73:bd:b1:5e:
ed:d4:06:c1:05:6a:20:ef:40:58:0e:59:1d:1f:a3:b5:74:71:
13:2f:1d:76:e0:13:9e:76:61:1c:86:10:4a:1b:ff:e8:4f:42:
81:2a:c0:f4:f5:c3:02:24:80:fc:f4:11:a6:24:f6:e6:33:05:
f8:68:0c:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE97s0bHKm5r7r0Z5oWUisyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Nzk5NjhlNjZlZGJlYTM3MmVmOTViYWEyYmY2ODkxMzg1
NjdhNDAwHhcNMjYxMDE1MDUwMDIyWhcNMjYxMDE2MDUwMDIyWjAzMTEwLwYDVQQD
EyhkMDM3ZWM0ODAxNzgwOWMxYjg2YTAyZTUwZDMyNjEzOTcwMmFjNWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmT2Nm4BM6mocfK7wKqowNKAgQuLU
MAW3k+dEj1pcayURUBvfR7pP1ZmNVltjjvXZGdppxIMwXD6p0uBMD0uIsqUfOKAH
XHI8MMnMddDVRkIQmzV/buod6yjjPRDL9UBweyC6sW8X70DAOjy2Km7EsnjdsqK6
RzFbmIJOtjT9Ud7p0VWbxMqHhuzp8/LuekU/GlM6CKKLj2K7lWCxAE6HPsg3nkIL
kfJJ/8Mt91TDWg5xjcoFROSnsDdVekPA0RVLE7TWrDc0BdP1pFLUlPnEyHH7p4qe
odCAXpUp5Uf7j04x/o8FDrHJheqOGQw47MpyqtNDaheQfwRevHoBO39/tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNA37EgBeAnBuGoC5Q0yYTlwKsWsMB8GA1UdIwQY
MBaAFNd5lo5m7b6jcu+VuqK/aJE4VnpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNtV2ptYnR2cU55NzVXNm9yOW9rVGhXZWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85NGJmNWItZDM4YS00Yzc2LWIwMWYt
NmU2ZmEzOWJiMWVjLzEvMTNtV2ptYnR2cU55NzVXNm9yOW9rVGhXZWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC85NGJmNWItZDM4YS00Yzc2LWIwMWYtNmU2ZmEzOWJiMWVj
LzEvMTNtV2ptYnR2cU55NzVXNm9yOW9rVGhXZWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMEvmMW3Y
BT8zzfzMA9xhhvD4v6wH5gQjPPSNd5GMKNh41PD/Nag4TQFXWjMDeKb5yoaBjXbR
QVJqkXgkNmA2eSSjmDemMjWaTrNNb0MUXTTce0aArK1Y9j3s95IecW0p/kAxwGKO
NX6f3ee5Cd8CW8Jt6AYUw2gYiYY0lcsjrcnXNWOVcN8EnoaCekIktl1YirqvtsIo
LujtRHcMBTo/IdUuTBPuZR2B8ciTibnxeSZHnBrqCDxoxV4og9w7ckRFs6JzvbFe
7dQGwQVqIO9AWA5ZHR+jtXRxEy8dduATnnZhHIYQShv/6E9CgSrA9PXDAiSA/PQR
piT25jMF+GgM7Q==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:25:43 2026 by rpki-client