Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
File: 13auCasbyUrOg_pv02rFIoZ7kuo.mft (raw, json)
Hash identifier: Av5OHLFrrEsjCC5gfNJAVwWZp+sbXJuyYqfqJyzMpmM=
Subject key identifier: 27:73:79:28:0F:B6:A3:82:6D:7A:3F:0A:58:9E:7D:D2:E6:C0:EF:EC
Authority key identifier: D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA
Certificate issuer: /CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
Certificate serial: 019DCF0724AD18FCCBEAD3053AF0F2B57D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 13:00:44 +0000
Manifest this update: Mon 27 Apr 2026 13:00:44 +0000
Manifest next update: Tue 28 Apr 2026 13:00:44 +0000
Files and hashes: 1: 13auCasbyUrOg_pv02rFIoZ7kuo.crl (hash: nWVZnt/EbjOK9VzTI/udkDLy5ljJX2e0q25aeLpFFdU=)
2: yQF_oqKXVguMAr3971D21MlrR_8.roa (hash: rXFsVsTmW2PojlnuQAcJtT+oQ2/oW7PggfH906SCVtQ=)
3: ywVR7woUIzneTMtjfuoirWk196k.roa (hash: i+MATSFKerXwDHLKNUICE818LV3sf8RvOyqaZnW8Yrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:24:ad:18:fc:cb:ea:d3:05:3a:f0:f2:b5:7d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
Validity
Not Before: Apr 27 13:00:44 2026 GMT
Not After : Apr 28 13:00:44 2026 GMT
Subject: CN=277379280fb6a3826d7a3f0a589e7dd2e6c0efec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e2:d9:9f:bd:db:3e:ee:8d:b3:6e:d2:97:15:
66:b6:e7:e9:5c:01:96:d1:ac:78:94:98:b3:0c:01:
ca:99:c2:12:9d:92:12:62:26:f3:39:ba:c1:12:51:
2e:7f:40:8b:55:55:2a:c0:cf:7c:d3:f4:e9:0b:0c:
02:7d:94:7f:1a:f6:c0:0b:89:40:e8:f6:fb:ce:a9:
42:86:5c:de:6e:4c:82:34:3b:fd:bb:95:3b:10:25:
48:13:31:c2:0d:f7:4e:aa:c8:9b:c2:71:81:7c:57:
5a:af:5f:3d:b4:64:d4:3a:3f:31:d3:40:7f:c1:4a:
b4:27:d1:06:9a:35:47:5c:58:bd:6c:cc:68:ae:8e:
c6:1b:b7:bd:4f:9c:f2:6e:3d:16:1b:49:36:de:8f:
34:81:9c:a4:0d:d2:83:03:87:30:79:cd:73:b0:d5:
8d:8f:1e:85:89:30:81:cf:73:b6:9c:46:62:41:64:
df:1e:3c:32:29:6a:22:8a:26:33:99:77:2f:9b:98:
32:bd:f5:eb:bd:8d:f4:3e:8d:77:57:86:aa:3d:3d:
48:92:a3:fa:c0:52:e6:40:d9:78:4e:6f:35:a7:54:
5a:32:cb:39:50:db:4b:97:49:ff:bd:4e:61:c3:7b:
64:20:a8:f5:b2:39:3e:7c:34:38:5f:72:d8:c7:0b:
2f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:73:79:28:0F:B6:A3:82:6D:7A:3F:0A:58:9E:7D:D2:E6:C0:EF:EC
X509v3 Authority Key Identifier:
keyid:D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:68:c1:5b:4b:57:71:df:60:5b:80:2c:2c:00:68:50:b5:3a:
cc:ae:4c:e4:98:9b:c2:53:78:cc:6e:6a:aa:0d:b6:a1:86:89:
01:bf:11:33:b3:bc:3f:84:c2:07:e5:21:cf:69:0f:80:49:9c:
6a:75:f7:65:e3:c6:fa:d9:4c:c5:8c:c9:b7:ae:c4:59:a8:80:
b9:e0:73:3d:0e:e2:44:4e:d8:13:65:89:68:1e:ee:82:ea:86:
06:c5:ae:40:00:5a:19:aa:68:77:d3:49:f5:a4:21:c3:6f:9a:
34:26:f9:d4:b4:c7:a7:79:79:1f:83:20:f8:c2:9d:79:db:26:
51:a9:b7:df:5b:62:35:6b:4a:54:21:65:44:d9:8a:c6:e2:84:
9e:d6:24:b6:8d:5a:ab:2f:be:ef:4f:74:e6:2a:1b:35:3f:95:
85:4d:28:db:59:43:bd:84:e3:fc:66:f0:a0:67:d5:2a:fd:22:
99:c7:e0:fe:21:21:ff:9e:bc:8e:9d:07:f6:9e:70:77:a6:8e:
39:5b:ca:e6:a8:a8:d1:cf:25:a9:1a:09:87:64:89:86:6d:19:
04:64:7a:4a:6c:84:ff:2b:70:68:71:ea:1e:a0:a3:33:82:26:
57:8f:c0:89:b3:b8:13:83:6d:ec:f4:91:e7:4e:29:d4:4f:5a:
0a:94:8c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:32:55 2026 by rpki-client