Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
File: 13j4yccHK3MEiPnjISjdiVveMtM.mft (raw, json)
Hash identifier: lIdGT/gPdJ4eEMGqHHrbvL6i0WdCjSMGWbMXS6R6ZNA=
Subject key identifier: A7:CE:D9:83:6C:67:AC:5E:F5:4E:53:43:CE:15:FD:B2:81:BA:30:D5
Authority key identifier: D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3
Certificate issuer: /CN=d778f8c9c7072b730488f9e32128dd895bde32d3
Certificate serial: 01A00213FBAC3C9C35786FE91979EC1D10BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
Manifest number: 0A1A
Signing time: Fri 14 Aug 2026 21:00:59 +0000
Manifest this update: Fri 14 Aug 2026 21:00:59 +0000
Manifest next update: Sat 15 Aug 2026 21:00:59 +0000
Files and hashes: 1: 13j4yccHK3MEiPnjISjdiVveMtM.crl (hash: gPIx67fNVqCyyIxRcLDRtZEHdOsIJPhVLgcqFNfn3/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:fb:ac:3c:9c:35:78:6f:e9:19:79:ec:1d:10:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d778f8c9c7072b730488f9e32128dd895bde32d3
Validity
Not Before: Aug 14 21:00:59 2026 GMT
Not After : Aug 15 21:00:59 2026 GMT
Subject: CN=a7ced9836c67ac5ef54e5343ce15fdb281ba30d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0a:e8:2c:a2:5d:ce:c2:d0:a6:4e:f0:12:e3:
16:e3:59:43:e6:b3:c9:b9:56:fc:da:b7:8b:bd:1f:
a4:f0:85:fc:e8:e6:cf:b3:e8:ba:37:bf:31:95:24:
13:67:00:d8:29:a5:3d:20:b5:41:1e:bc:1b:2a:55:
4b:73:33:16:49:aa:8f:10:69:9e:bd:51:0f:a1:14:
64:7e:1e:ee:3c:9f:92:b0:f1:d4:2a:98:e0:c8:c4:
68:07:3b:e6:1b:69:ad:d5:de:0a:79:8b:ec:f8:d5:
51:69:e1:1e:b5:23:3d:b1:a0:09:0e:5f:e0:e3:aa:
26:9d:f2:70:48:70:fa:3e:3c:40:8e:58:a5:7a:ca:
99:b5:12:0a:92:13:bb:d7:b7:e4:84:fa:5b:f0:20:
a9:eb:cb:9f:66:af:06:38:8b:c3:c8:bc:9a:3d:9a:
75:bb:a5:94:6e:91:d4:f2:93:25:36:ab:40:06:5b:
71:07:57:52:9b:29:2a:e8:58:7f:5a:a4:19:2f:2f:
41:7b:d8:ae:1d:85:b2:18:d4:f0:d2:2a:08:a4:5d:
33:fd:a1:8a:4d:ca:5d:c7:e5:18:f3:15:e5:59:51:
c4:50:7c:a5:78:aa:4b:70:72:16:3a:42:b4:11:22:
18:b0:f3:42:9f:41:6d:11:94:4a:b4:97:f9:f2:5b:
fd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CE:D9:83:6C:67:AC:5E:F5:4E:53:43:CE:15:FD:B2:81:BA:30:D5
X509v3 Authority Key Identifier:
keyid:D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c0:11:f5:af:55:31:9d:d0:3a:24:59:9a:20:1f:00:96:1e:
fb:bc:aa:73:ff:55:80:54:6f:3f:92:30:a5:20:4d:3d:ba:62:
ee:75:05:91:56:39:7f:da:12:39:92:56:00:db:c5:c7:c9:6f:
0c:89:14:58:18:1e:67:33:7c:b5:31:f9:d4:f0:45:be:ab:44:
92:16:20:27:7c:f9:2c:73:67:6a:e1:d5:2c:13:68:50:8c:28:
ef:1b:a1:dc:ca:82:88:0f:7e:70:c4:82:3f:5e:37:b7:d2:2e:
b4:cb:7c:f7:b8:20:ff:3b:64:bc:b1:87:a7:f7:a5:f2:e9:8c:
82:62:58:57:a7:2d:15:92:be:f3:a4:d0:cb:3d:f7:d1:eb:3b:
a1:97:aa:90:50:e7:24:d1:7e:0f:40:a6:97:c3:aa:8c:27:83:
56:47:6a:d5:d5:fa:cd:31:0b:8a:94:fb:0f:f6:16:49:c8:9a:
08:af:89:17:51:b0:56:ed:27:ff:51:43:66:f6:55:40:c9:5b:
32:3a:d4:7b:c2:3a:39:a8:f5:2e:a2:0c:9a:07:a4:58:ad:bf:
92:a2:da:57:fc:fa:38:7b:02:94:79:f4:1f:02:b0:f7:fe:9e:
25:3d:41:41:d3:61:9d:53:de:ec:1a:54:ca:45:35:0d:50:69:
a8:1f:bf:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:17 2026 by rpki-client