Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
File: 13eW4WtWXXJzZphsycqcpj0aTlg.mft (raw, json)
Hash identifier: djgPRPV8ZqWmENiTinTXiX2OeKHETxBO2KS8WaCxygc=
Subject key identifier: 70:8E:CF:95:2A:45:A5:9D:97:42:7E:89:FC:10:15:89:C9:63:16:12
Authority key identifier: D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
Certificate issuer: /CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Certificate serial: 019D3A1C6D4C72262C5680E761D2CDA98BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
Manifest number: 05B1
Signing time: Sun 29 Mar 2026 15:00:34 +0000
Manifest this update: Sun 29 Mar 2026 15:00:34 +0000
Manifest next update: Mon 30 Mar 2026 15:00:34 +0000
Files and hashes: 1: 13eW4WtWXXJzZphsycqcpj0aTlg.crl (hash: Rf5UbubNr6QIPDu1yZgEQu9My3hNzM+bCBrzKq8xLAc=)
2: Z7tPkv-KOS--LcH3raWeWv6mob4.roa (hash: 2730/QIDnBMlH2saKFE8sJJcRwFrjnSocRmwgcVBh5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:6d:4c:72:26:2c:56:80:e7:61:d2:cd:a9:8b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Validity
Not Before: Mar 29 15:00:34 2026 GMT
Not After : Mar 30 15:00:34 2026 GMT
Subject: CN=708ecf952a45a59d97427e89fc101589c9631612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7f:fa:54:4c:c5:e0:34:e2:aa:4f:39:9b:a3:
a0:4c:f4:5a:d0:3a:d5:d1:9a:08:00:47:df:63:92:
ae:00:6e:d9:07:e5:d8:cc:59:50:4c:7e:ef:df:18:
17:4f:6f:81:76:d4:d9:71:e5:51:a3:45:01:1f:20:
b7:ad:26:8f:90:03:ad:b4:76:d8:24:8a:8d:de:e1:
9a:d2:23:55:78:0b:58:47:fb:89:1c:73:4a:4f:10:
c5:0b:f8:5b:82:f1:f3:6c:c7:2f:4d:ab:7b:f4:0b:
34:89:5e:3f:07:5f:f0:b7:c2:4f:13:81:a5:77:fb:
61:eb:ca:04:9f:ac:83:94:46:9a:4b:ac:56:af:8d:
00:a6:69:9c:e0:43:73:88:3d:fd:f2:d7:53:69:1c:
1a:27:c8:ce:70:98:08:7f:9e:6c:41:e4:a4:18:88:
22:f2:34:d6:d4:d9:15:6e:77:e2:a6:f4:48:a7:c4:
ee:48:d2:75:24:81:bc:46:c2:e5:26:40:35:11:c5:
9b:39:46:16:d2:f9:c3:f7:c1:e1:6f:f7:a1:76:8b:
fa:e1:bf:f1:2e:51:c6:24:fe:a7:9f:00:bb:af:f5:
41:57:c7:df:16:06:57:cd:95:16:b1:e9:12:ff:cc:
05:4d:6c:ba:2d:1e:9d:94:f5:bf:b3:a7:a1:28:ac:
93:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8E:CF:95:2A:45:A5:9D:97:42:7E:89:FC:10:15:89:C9:63:16:12
X509v3 Authority Key Identifier:
keyid:D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:78:4f:e1:70:59:18:63:04:95:3a:30:a4:d4:79:eb:00:d2:
1a:15:12:65:cd:99:3d:53:37:09:a4:46:be:7a:a2:f5:b5:da:
03:d7:70:74:0d:0c:45:f3:05:98:4f:da:05:c1:5b:ed:f4:f0:
14:73:c8:f0:98:c6:94:0f:32:d1:ec:57:a3:52:08:1e:97:ec:
d0:32:e1:b2:58:f7:0f:4c:09:99:25:08:47:4f:53:b5:04:70:
81:fa:bd:06:8a:29:26:05:db:5d:16:27:56:a3:7a:b7:13:f7:
32:b4:1b:ad:95:82:f9:df:8a:c1:1f:08:89:76:9f:08:cc:4d:
b7:e3:e5:08:d3:40:10:33:e0:c0:41:c1:b7:04:b6:43:90:f1:
54:fb:e9:d1:36:46:16:d8:c1:10:05:14:c3:9c:08:be:f1:a5:
b7:ee:a1:b3:88:7e:7a:77:01:aa:7f:dc:7e:bc:ac:15:e8:11:
e7:4b:29:45:8a:28:cc:28:d9:81:46:d9:ad:25:9c:da:ee:9f:
cd:34:c3:cf:7a:b1:9a:0f:a7:a6:ce:b1:e9:13:0a:e0:52:59:
c2:12:28:f6:d9:36:be:3c:4f:93:21:25:a0:9a:df:b1:fb:00:
8c:48:2b:ba:67:17:3f:8f:da:82:67:dc:db:2c:c6:71:ab:24:
d8:d8:3c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:14 2026 by rpki-client