Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
File: 13EApGzEauiWvcLg4HTjBVq4hns.mft (raw, json)
Hash identifier: J3/OJdxNxq+yPbQuNeJch7fCO7ofJV3dSmBKv3nvH44=
Subject key identifier: DA:2F:0A:0A:A9:A8:CC:D0:E4:83:C7:08:27:42:37:32:A7:28:78:8B
Authority key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
Certificate issuer: /CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Certificate serial: 019D3940D44A7653135F53CA128258C62243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
Manifest number: 0D4B
Signing time: Sun 29 Mar 2026 11:00:43 +0000
Manifest this update: Sun 29 Mar 2026 11:00:43 +0000
Manifest next update: Mon 30 Mar 2026 11:00:43 +0000
Files and hashes: 1: 13EApGzEauiWvcLg4HTjBVq4hns.crl (hash: UFwOXefmqESJe35KlE8y3VmVRKf+i6ljYh11z+qcYiA=)
2: lAjUh0yd7DRPhi-W3SSvqev0w_E.roa (hash: YCOHiUTXUD1rmQesFlzNj90jbAUp9KL2LXtb7YGRhtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:d4:4a:76:53:13:5f:53:ca:12:82:58:c6:22:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Validity
Not Before: Mar 29 11:00:43 2026 GMT
Not After : Mar 30 11:00:43 2026 GMT
Subject: CN=da2f0a0aa9a8ccd0e483c70827423732a728788b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:c3:f9:18:0b:8b:dc:da:75:f6:3a:fb:d3:
b3:cb:df:82:55:e0:77:95:4a:04:6f:d5:2d:7c:82:
1f:dd:e9:3f:a1:60:e3:32:f6:a5:fa:17:59:0f:e5:
8a:c8:70:98:7a:b4:b6:d6:49:5f:87:b3:b9:8a:fb:
40:3b:06:84:63:e1:52:2d:40:59:4c:0e:f8:55:1f:
af:51:11:5d:4f:be:7f:65:67:d8:da:fb:e4:7f:a1:
75:aa:97:35:0b:47:a0:4e:ed:9f:e7:8e:30:6b:51:
12:f6:ff:77:3a:e3:28:0a:36:97:74:b0:91:aa:12:
86:f6:83:00:4e:b1:26:5f:6d:b1:6b:2b:18:75:16:
b3:fc:7f:a3:ac:a7:c6:ba:a3:d6:c0:4c:1e:c7:d2:
da:be:78:6d:49:a0:b5:df:6e:09:ef:1b:25:d9:e7:
a5:6f:c8:5f:00:21:ed:fa:70:77:5a:11:6a:70:6e:
89:13:bf:30:77:b8:78:74:d2:00:36:1b:76:5a:5c:
c6:ae:b0:2d:e4:19:3c:cd:24:4e:1e:47:e0:88:78:
7e:09:18:54:11:0e:3b:1c:75:fd:4d:f4:b1:d7:e1:
99:a6:c1:02:8f:1e:08:5e:18:39:79:da:49:f5:d4:
28:82:5b:c3:c3:c9:8c:b6:a8:6e:67:ba:b3:bb:46:
57:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2F:0A:0A:A9:A8:CC:D0:E4:83:C7:08:27:42:37:32:A7:28:78:8B
X509v3 Authority Key Identifier:
keyid:D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:40:78:92:7e:18:bc:71:1b:ef:e2:74:3b:92:3c:8f:a8:92:
b6:7f:b6:bf:c0:53:79:ac:2e:a2:ff:48:f0:41:8f:5e:86:b7:
ef:c5:36:5a:6f:f2:ef:c3:61:c7:9b:ab:2b:99:e6:f0:b3:a4:
fe:98:74:38:d9:28:6c:a5:53:dc:d9:c0:e5:3d:4c:99:81:c9:
47:fb:89:8a:53:83:22:f0:44:80:d3:56:a7:99:c0:13:91:fa:
8c:a9:2a:c6:cf:af:3f:b7:d9:a2:20:6a:9a:b7:1a:f0:ad:04:
f6:c4:a2:12:a0:bd:c8:55:82:b1:ca:5a:81:ba:7f:48:9c:9e:
84:8c:b8:e1:21:d1:10:c5:ed:cb:59:7f:31:d0:f5:f0:2e:6a:
4b:6b:dc:6b:1a:7e:26:d4:06:7a:8a:97:8a:84:fb:5d:b8:02:
b5:26:0f:52:d1:14:15:e7:76:d5:c4:f8:ea:d0:50:9b:c7:4b:
d7:f6:ad:7c:14:48:a2:87:a8:3a:93:69:dc:b1:ee:5a:39:b8:
b7:39:e5:50:09:00:10:6d:77:86:7c:ee:d0:b7:e4:23:11:87:
8a:99:86:e2:7c:e4:0f:39:3f:fc:a0:93:9e:bd:12:c8:25:9e:
f1:ad:50:40:ef:b2:69:b7:01:c2:81:3b:95:b6:32:8a:19:a9:
44:05:51:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QNRKdlMTX1PKEoJYxiJDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NzEwMGE0NmNjNDZhZTg5NmJkYzJlMGUwNzRlMzA1NWFi
ODg2N2IwHhcNMjYwMzI5MTEwMDQzWhcNMjYwMzMwMTEwMDQzWjAzMTEwLwYDVQQD
EyhkYTJmMGEwYWE5YThjY2QwZTQ4M2M3MDgyNzQyMzczMmE3Mjg3ODhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxXD+RgLi9zadfY6+9Ozy9+CVeB3
lUoEb9UtfIIf3ek/oWDjMval+hdZD+WKyHCYerS21klfh7O5ivtAOwaEY+FSLUBZ
TA74VR+vURFdT75/ZWfY2vvkf6F1qpc1C0egTu2f544wa1ES9v93OuMoCjaXdLCR
qhKG9oMATrEmX22xaysYdRaz/H+jrKfGuqPWwEwex9LavnhtSaC1324J7xsl2eel
b8hfACHt+nB3WhFqcG6JE78wd7h4dNIANht2WlzGrrAt5Bk8zSROHkfgiHh+CRhU
EQ47HHX9TfSx1+GZpsECjx4IXhg5edpJ9dQoglvDw8mMtqhuZ7qzu0ZXBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNovCgqpqMzQ5IPHCCdCNzKnKHiLMB8GA1UdIwQY
MBaAFNdxAKRsxGrolr3C4OB04wVauIZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjIt
ZGQ1MGJlMDY3NDAxLzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjItZGQ1MGJlMDY3NDAx
LzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs0B4kn4Y
vHEb7+J0O5I8j6iStn+2v8BTeawuov9I8EGPXoa378U2Wm/y78Nhx5urK5nm8LOk
/ph0ONkobKVT3NnA5T1MmYHJR/uJilODIvBEgNNWp5nAE5H6jKkqxs+vP7fZoiBq
mrca8K0E9sSiEqC9yFWCscpagbp/SJyehIy44SHREMXty1l/MdD18C5qS2vcaxp+
JtQGeoqXioT7XbgCtSYPUtEUFed21cT46tBQm8dL1/atfBRIooeoOpNp3LHuWjm4
tznlUAkAEG13hnzu0LfkIxGHipmG4nzkDzk//KCTnr0SyCWe8a1QQO+yabcBwoE7
lbYyihmpRAVR7w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:09 2026 by rpki-client