Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
File: 13eUOzQRiOnNLpPeKIsz_-BBx9I.mft (raw, json)
Hash identifier: AmHcbKEfWFQ662LPMjZuhvwScy/hPpGy+BejKg2/Axk=
Subject key identifier: 8A:5E:6A:BB:7C:E7:DC:02:8E:E9:91:2F:20:E8:25:71:E0:5E:D7:E5
Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
Certificate issuer: /CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Certificate serial: 019F17F9F403DA49010AF5D4A1C13F498DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 10:01:24 +0000
Manifest this update: Tue 30 Jun 2026 10:01:24 +0000
Manifest next update: Wed 01 Jul 2026 10:01:24 +0000
Files and hashes: 1: 13eUOzQRiOnNLpPeKIsz_-BBx9I.crl (hash: IQ1AvmG/ATwsWb6Fhs9yY5Flz8viib4TFE34trW1A4s=)
2: hyElpaRCi-O3ttxNPiq_tbabKaM.roa (hash: utFwv7iVQh6KFUfFUAR5z2o9lvR/OP856LSn2YX8Pbs=)
3: sxVjjTuZsumW0h6mF4GiRANgUvg.roa (hash: z5zoee9BxxfVBHQHis7Mo+eHgddxsrIvf3XwtD1/H80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:f4:03:da:49:01:0a:f5:d4:a1:c1:3f:49:8d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Validity
Not Before: Jun 30 10:01:24 2026 GMT
Not After : Jul 1 10:01:24 2026 GMT
Subject: CN=8a5e6abb7ce7dc028ee9912f20e82571e05ed7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:58:c4:c2:76:27:32:02:37:12:67:04:7c:58:
1d:ad:a1:59:30:43:5e:4a:cd:0b:eb:f9:ed:70:ed:
06:eb:bd:d2:65:d4:f9:dd:4c:3e:60:26:18:a1:f5:
5d:b2:57:cb:89:05:21:a4:6b:a4:06:24:43:2d:85:
b0:08:e6:e5:95:e5:8f:c6:11:f9:43:18:26:64:da:
8f:5d:f4:33:20:3e:5e:42:c6:c5:93:9d:4e:6c:53:
11:8c:cd:f0:d9:cc:fe:44:cc:0d:21:70:1b:76:21:
3e:e2:82:99:31:fb:18:91:cc:27:4e:4d:f1:9f:5e:
1e:b6:b1:ac:c3:86:77:ce:27:d0:ab:4a:51:40:39:
42:7e:86:19:d8:3a:0e:ee:7e:f5:6b:07:78:0d:fe:
c6:05:00:c3:c3:41:28:eb:e0:15:88:4d:7a:6c:62:
fd:80:bf:ba:c1:a3:74:9d:a7:28:c3:a7:f8:5c:c2:
d0:98:c9:00:63:67:2c:13:31:6b:19:60:46:42:03:
b3:aa:b0:25:42:c2:b9:53:89:65:ca:28:37:cc:37:
95:2d:15:d1:d3:23:d6:46:c2:cd:2e:50:57:3d:7c:
2b:25:ba:63:c2:49:52:e1:3e:8b:34:4f:0a:34:4f:
03:3a:3c:4a:5f:45:dc:3a:32:85:da:b6:10:1d:41:
6c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5E:6A:BB:7C:E7:DC:02:8E:E9:91:2F:20:E8:25:71:E0:5E:D7:E5
X509v3 Authority Key Identifier:
keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8c:8b:de:a0:6c:f6:cb:e7:db:28:56:fc:5b:e5:62:53:37:
99:41:16:50:f2:e6:53:43:4a:0d:a2:dd:2b:56:5a:19:f7:78:
e2:40:84:ca:fa:ff:51:c0:02:ed:de:32:ba:2e:6d:b9:66:ff:
d7:08:91:12:f1:49:42:0c:14:02:bd:9f:59:dd:c6:b1:e4:4e:
31:f2:5e:0c:38:d0:66:e7:c2:a5:0f:64:1d:65:67:29:7d:88:
ad:de:45:e8:a7:2e:27:82:2b:83:ab:fc:d8:b4:4c:c4:9e:b4:
6d:79:3a:ff:f8:1f:1c:81:53:0b:54:c3:fa:c8:48:11:91:03:
96:b6:af:93:4b:e1:75:cd:53:0a:04:29:0c:b5:5b:7a:a4:0c:
bc:fa:7d:21:9e:83:bb:63:05:29:3c:28:fb:43:9d:35:58:a9:
1d:0b:eb:f0:c0:0e:e6:83:9f:f6:34:7d:f3:48:9f:55:7a:14:
53:4d:79:c3:df:26:64:7b:31:85:c8:cc:6e:dc:af:a0:7b:66:
dd:4c:1f:be:39:ce:ee:a9:32:88:5f:d4:c6:27:4a:23:94:34:
02:0b:58:70:7b:9f:06:bb:39:46:b3:83:f6:1b:cd:2d:04:8a:
b3:63:2d:8c:ba:02:b3:5a:8f:35:12:d7:ef:cb:94:5e:2e:25:
c0:52:3a:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8X+fQD2kkBCvXUocE/SY31MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Nzc5NDNiMzQxMTg4ZTljZDJlOTNkZTI4OGIzM2ZmZTA0
MWM3ZDIwHhcNMjYwNjMwMTAwMTI0WhcNMjYwNzAxMTAwMTI0WjAzMTEwLwYDVQQD
Eyg4YTVlNmFiYjdjZTdkYzAyOGVlOTkxMmYyMGU4MjU3MWUwNWVkN2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnljEwnYnMgI3EmcEfFgdraFZMENe
Ss0L6/ntcO0G673SZdT53Uw+YCYYofVdslfLiQUhpGukBiRDLYWwCOblleWPxhH5
QxgmZNqPXfQzID5eQsbFk51ObFMRjM3w2cz+RMwNIXAbdiE+4oKZMfsYkcwnTk3x
n14etrGsw4Z3zifQq0pRQDlCfoYZ2DoO7n71awd4Df7GBQDDw0Eo6+AViE16bGL9
gL+6waN0nacow6f4XMLQmMkAY2csEzFrGWBGQgOzqrAlQsK5U4llyig3zDeVLRXR
0yPWRsLNLlBXPXwrJbpjwklS4T6LNE8KNE8DOjxKX0XcOjKF2rYQHUFscQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpeart859wCjumRLyDoJXHgXtflMB8GA1UdIwQY
MBaAFNd3lDs0EYjpzS6T3iiLM//gQcfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNlVU96UVJpT25OTHBQZUtJc3pfLUJCeDlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zNWIxZGYtNzhjZi00ODE4LWIzM2Et
Y2RhN2ZjN2ViMDkyLzEvMTNlVU96UVJpT25OTHBQZUtJc3pfLUJCeDlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8zNWIxZGYtNzhjZi00ODE4LWIzM2EtY2RhN2ZjN2ViMDky
LzEvMTNlVU96UVJpT25OTHBQZUtJc3pfLUJCeDlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgIyL3qBs
9svn2yhW/FvlYlM3mUEWUPLmU0NKDaLdK1ZaGfd44kCEyvr/UcAC7d4yui5tuWb/
1wiREvFJQgwUAr2fWd3GseROMfJeDDjQZufCpQ9kHWVnKX2Ird5F6KcuJ4Irg6v8
2LRMxJ60bXk6//gfHIFTC1TD+shIEZEDlravk0vhdc1TCgQpDLVbeqQMvPp9IZ6D
u2MFKTwo+0OdNVipHQvr8MAO5oOf9jR980ifVXoUU015w98mZHsxhcjMbtyvoHtm
3UwfvjnO7qkyiF/UxidKI5Q0AgtYcHufBrs5RrOD9hvNLQSKs2MtjLoCs1qPNRLX
78uUXi4lwFI65A==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:21 2026 by rpki-client