Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
File: 13BmKFIPfdrO9yQ276VGNcUs_ck.mft (raw, json)
Hash identifier: tOEUxd+4ja5/2rYLL2q1ZxidKGzfwv+piL5ZoDf6wjc=
Subject key identifier: 2F:9E:55:13:8C:FE:14:2E:C3:F0:2D:19:82:2A:B9:A3:1B:81:AF:F7
Authority key identifier: D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
Certificate issuer: /CN=d7706628520f7ddacef72436efa54635c52cfdc9
Certificate serial: 019F17C2BAC6EA7C9BDC78783F6898A29C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
Manifest number: 105D
Signing time: Tue 30 Jun 2026 09:01:05 +0000
Manifest this update: Tue 30 Jun 2026 09:01:05 +0000
Manifest next update: Wed 01 Jul 2026 09:01:05 +0000
Files and hashes: 1: 13BmKFIPfdrO9yQ276VGNcUs_ck.crl (hash: bbqRdH4opPTRx2FLtcSjueOpdNWS6/zDwlbaii/kZho=)
2: DQoj2ctBiN_T5FWsMsnqhdItImU.roa (hash: 5///YJpY90e2P/CAZ06dyQ4dMtgO+abo0J7yzIB0xQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:ba:c6:ea:7c:9b:dc:78:78:3f:68:98:a2:9c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7706628520f7ddacef72436efa54635c52cfdc9
Validity
Not Before: Jun 30 09:01:05 2026 GMT
Not After : Jul 1 09:01:05 2026 GMT
Subject: CN=2f9e55138cfe142ec3f02d19822ab9a31b81aff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:7a:9c:ba:12:61:ae:44:e5:a5:33:c1:6e:
d3:72:c8:3c:0e:93:12:09:a6:eb:50:6a:63:53:d8:
84:cc:87:c4:19:66:a1:6b:e3:ef:38:76:d6:20:d8:
e4:21:52:38:37:ee:a1:4d:e7:33:80:95:59:5f:e5:
50:1b:6d:82:db:86:2f:60:93:54:02:90:b0:32:fb:
b4:9a:a6:20:a4:52:23:21:85:e9:54:bb:75:9b:d6:
fe:40:90:9f:cc:40:e1:fc:fb:e5:86:3e:54:6f:eb:
52:37:49:e8:da:5b:1d:02:5d:4e:19:10:0b:00:42:
ae:32:7c:2c:8a:f6:e5:49:4e:95:1f:d4:98:32:75:
d6:4c:5d:ab:77:d6:f7:4f:02:3e:b5:a5:5f:37:9d:
ea:f5:ba:77:6e:6a:44:2a:51:cd:e0:89:2a:53:e6:
af:b6:32:a4:a9:58:f8:45:5d:91:c7:26:22:02:a4:
79:ca:4a:3a:7c:84:85:89:6f:8b:89:0b:0c:0d:23:
70:0b:3e:e4:06:ac:3d:2a:3a:bf:54:e3:e9:f1:18:
72:c7:fa:ed:34:ed:1b:7e:7b:7d:64:16:8e:ed:12:
bb:82:b7:6e:e6:8c:97:63:68:6b:95:fc:87:7f:d7:
c1:d8:e8:9a:2a:83:4f:38:23:1f:0a:c8:d6:03:01:
e8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9E:55:13:8C:FE:14:2E:C3:F0:2D:19:82:2A:B9:A3:1B:81:AF:F7
X509v3 Authority Key Identifier:
keyid:D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d9:e8:0b:b1:36:c5:b6:15:84:ff:0c:b6:48:97:39:98:7d:
f6:97:8b:95:92:62:d0:6b:60:06:1e:9d:bd:52:ba:5b:9c:fc:
da:d1:14:8c:7a:5f:cc:f6:b8:7a:c9:e9:05:e9:aa:4c:61:3f:
b2:29:27:0b:81:45:00:2a:af:23:09:25:15:c6:10:d3:6b:a0:
b8:4c:84:80:af:96:00:84:5d:e0:71:45:29:cf:0f:d7:4f:d9:
b7:2c:93:44:61:fd:43:a2:75:64:13:d1:e9:ad:72:77:10:d1:
5f:41:fc:b6:fa:6f:56:64:86:0a:11:84:6c:76:32:f2:46:0c:
3f:87:a1:e2:59:72:9e:72:22:dd:28:45:27:7b:4a:65:f0:81:
1c:38:c3:3f:d2:cd:d5:f9:e4:00:e2:9b:53:e4:24:a6:3c:77:
da:78:ce:41:92:f1:25:ab:cc:3e:9f:62:d5:54:9a:b9:83:45:
34:bd:a5:d2:da:04:87:26:e5:6a:52:8e:3c:c2:4b:7e:db:8e:
a0:f8:cc:a0:c2:9f:2b:98:d5:d8:2e:1c:a4:ac:03:fd:f6:4a:
ce:47:44:1b:0a:e1:a0:09:dd:6e:06:6e:32:d2:9f:53:b3:8d:
d3:82:ff:db:03:d1:57:67:52:31:aa:ab:11:97:eb:8a:61:4f:
a9:b8:95:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:03 2026 by rpki-client