Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
File: 13eUOzQRiOnNLpPeKIsz_-BBx9I.mft (raw, json)
Hash identifier: ZhbLBSm6MgFWlJTt73JI6O5H271BTe8WJDwcqCQn0O0=
Subject key identifier: F5:43:FD:4C:B9:C1:BE:75:EB:22:3A:F3:51:D4:2E:65:B5:75:9E:5C
Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
Certificate issuer: /CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Certificate serial: 019D371BA7A12D3A7FD201B202BA30E37A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 01:00:52 +0000
Manifest this update: Sun 29 Mar 2026 01:00:52 +0000
Manifest next update: Mon 30 Mar 2026 01:00:52 +0000
Files and hashes: 1: 13eUOzQRiOnNLpPeKIsz_-BBx9I.crl (hash: QopjwHy020hMdGuN1BxrVw2lgAVrTfnBffHTBDGJY+A=)
2: hyElpaRCi-O3ttxNPiq_tbabKaM.roa (hash: utFwv7iVQh6KFUfFUAR5z2o9lvR/OP856LSn2YX8Pbs=)
3: sxVjjTuZsumW0h6mF4GiRANgUvg.roa (hash: z5zoee9BxxfVBHQHis7Mo+eHgddxsrIvf3XwtD1/H80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:a7:a1:2d:3a:7f:d2:01:b2:02:ba:30:e3:7a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Validity
Not Before: Mar 29 01:00:52 2026 GMT
Not After : Mar 30 01:00:52 2026 GMT
Subject: CN=f543fd4cb9c1be75eb223af351d42e65b5759e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:8c:77:29:e5:c9:b6:6d:3d:7c:c9:49:23:
6b:9f:83:07:33:19:36:ec:05:26:3d:db:fc:5f:2b:
78:b1:41:cc:93:8b:15:e6:0d:aa:44:97:62:19:27:
5a:72:47:45:83:19:8f:2e:72:f0:86:d3:1d:33:e5:
ce:d9:3b:cf:a5:64:e8:f6:21:7a:e0:8b:23:86:7f:
ca:f4:c6:2e:13:61:3c:bd:c0:06:bd:a8:93:80:df:
e5:af:3a:62:52:7a:5b:1a:92:42:e3:d2:d6:48:ad:
6c:f7:6f:c8:dd:77:b3:83:dd:c3:83:c3:72:e7:39:
8c:9a:e7:72:d0:40:e7:c2:79:a4:9e:6d:9b:75:94:
07:5d:cf:56:92:cc:45:d7:88:d5:1f:d3:6a:8e:ba:
3f:6e:3a:51:41:67:97:9a:fb:82:a1:72:e3:1a:3e:
06:6c:6d:ed:d6:a1:28:32:cc:20:d9:ed:a2:ba:2a:
19:e8:37:66:1d:57:96:30:48:66:b1:c7:3d:54:10:
8d:fd:ee:c1:c1:20:33:66:b9:9f:6f:9d:66:0f:d3:
d1:04:08:f6:f7:0e:6a:c3:53:89:ac:8f:7b:ca:e1:
74:53:83:78:73:71:28:7e:75:45:42:d5:fa:6d:6c:
c1:e8:54:ab:15:3a:ed:8e:28:94:b9:c7:2e:a8:66:
02:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:43:FD:4C:B9:C1:BE:75:EB:22:3A:F3:51:D4:2E:65:B5:75:9E:5C
X509v3 Authority Key Identifier:
keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:87:db:1a:74:60:87:bd:78:22:0c:08:22:2c:32:5d:94:45:
3f:90:e6:dd:1f:d0:c3:7d:55:b3:2b:0d:33:ee:4f:90:1e:ed:
32:ea:0f:6c:3a:f1:e1:92:57:98:4c:8c:fd:bb:95:d4:2a:aa:
b6:44:a2:69:15:7a:0c:7c:1c:65:10:b5:ef:9d:45:81:81:ec:
92:c0:87:70:db:68:23:74:0e:9c:e6:8a:8c:b3:42:ac:52:95:
f8:f6:b2:4a:70:4a:53:67:0b:40:64:e0:c3:33:d6:59:07:73:
3b:18:8c:81:9b:ca:dc:49:ec:01:cc:25:d9:f0:50:e6:fe:fd:
82:c0:4c:a3:b4:4f:cb:e4:b2:f7:43:f1:92:03:71:16:78:8f:
19:a1:48:01:41:c1:bf:ad:5e:24:e8:7c:06:a8:16:81:3d:34:
ef:9c:c2:a8:73:0c:54:83:46:ff:a4:98:e9:f9:81:14:11:62:
1c:83:25:0c:f3:9b:f8:dd:83:1b:d9:f8:c3:23:84:b0:90:85:
f1:5c:b3:e7:73:d8:ef:8d:dd:ad:68:e9:22:16:6d:64:d6:c2:
47:34:99:4d:1c:ed:ef:97:fe:88:05:d8:40:ca:e0:ca:4d:06:
d7:48:dd:df:d2:8e:3f:cc:b4:55:19:a2:f0:58:a9:f7:10:9c:
b6:fa:50:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:26 2026 by rpki-client