
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
File: 13BmKFIPfdrO9yQ276VGNcUs_ck.mft (raw, json)
Hash identifier: 2LSYRsIqwvyhAeCn9fpBO0oONX2iUfFBvxcD1sJfXPU=
Subject key identifier: 57:9D:08:D0:9A:70:C8:E3:A9:5D:26:22:95:E8:47:44:E4:40:77:6B
Authority key identifier: D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
Certificate issuer: /CN=d7706628520f7ddacef72436efa54635c52cfdc9
Certificate serial: 01A140154863C49E053B7329E920C5CB0D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
Manifest number: 117B
Signing time: Thu 15 Oct 2026 15:01:38 +0000
Manifest this update: Thu 15 Oct 2026 15:01:38 +0000
Manifest next update: Fri 16 Oct 2026 15:01:38 +0000
Files and hashes: 1: 13BmKFIPfdrO9yQ276VGNcUs_ck.crl (hash: avQfZaKBzqI/9SEX7NUws/c9mlVEZNWVIEciZPbCoBo=)
2: DQoj2ctBiN_T5FWsMsnqhdItImU.roa (hash: 5///YJpY90e2P/CAZ06dyQ4dMtgO+abo0J7yzIB0xQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:15:48:63:c4:9e:05:3b:73:29:e9:20:c5:cb:0d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7706628520f7ddacef72436efa54635c52cfdc9
Validity
Not Before: Oct 15 15:01:38 2026 GMT
Not After : Oct 16 15:01:38 2026 GMT
Subject: CN=579d08d09a70c8e3a95d262295e84744e440776b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b3:e3:f0:77:13:35:c0:70:06:26:5e:4c:47:
a8:f3:44:15:5c:d5:d6:2d:86:ed:48:8f:1e:33:69:
dc:d8:50:aa:be:4d:a5:a5:65:6d:0e:63:d6:1a:c3:
86:e9:ff:ff:cb:c1:7d:8f:38:89:46:d2:28:9e:1c:
4f:80:06:05:76:a0:01:40:3f:f5:81:7e:a5:01:12:
12:d9:ec:8f:f3:7f:c4:e2:bc:90:1d:7d:2f:4b:ae:
5c:aa:d0:21:93:ed:87:b1:e4:26:ac:a2:84:19:cb:
42:f7:49:76:65:80:59:d0:6c:97:db:86:83:76:f7:
c2:9a:fd:61:d3:2c:bb:d9:1b:77:95:68:0c:d2:d7:
94:7d:8f:46:64:ba:7d:9f:2c:74:a0:5f:82:bc:29:
15:86:2f:ca:66:0c:8a:69:9b:e2:b5:93:90:c1:f3:
39:91:ae:89:87:59:b1:be:ee:27:2d:80:eb:36:7c:
a9:73:49:c3:e9:7c:cf:94:e6:28:bc:a9:11:a3:0f:
4c:47:44:4d:f8:b0:0c:6e:14:38:51:05:25:e6:52:
5c:c9:fb:49:39:1b:8a:66:79:15:82:da:15:b6:9a:
11:8e:1f:f7:98:4a:34:3c:f9:04:61:1d:65:c1:85:
84:19:38:57:3e:19:02:3d:80:58:1c:c3:93:99:49:
98:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9D:08:D0:9A:70:C8:E3:A9:5D:26:22:95:E8:47:44:E4:40:77:6B
X509v3 Authority Key Identifier:
keyid:D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:86:9a:4f:73:ec:58:d2:87:fc:c5:1a:9a:e0:12:e6:fc:d4:
2d:d7:57:17:71:e4:11:68:57:52:ef:49:d4:81:49:2f:ed:90:
db:8b:69:f2:09:c8:23:69:b9:dc:58:df:d8:ba:cc:80:3f:e8:
3d:0f:64:25:7d:56:b5:df:ed:b3:d7:c2:76:e8:96:9c:05:34:
ca:51:13:c3:6d:f9:83:cd:54:c7:b2:bb:51:60:57:0c:93:b4:
33:d0:13:1f:9d:37:69:cd:2e:9e:0a:b8:4c:a8:5f:d7:3e:cf:
08:82:af:94:4c:02:01:08:30:a7:68:fd:85:32:3e:1d:93:e1:
67:7f:a2:aa:16:fc:ff:94:c5:18:09:fd:ed:f3:3b:43:62:26:
53:57:6b:ef:6b:a3:2d:ae:ef:0e:af:32:e6:4e:10:2c:c1:76:
f2:57:01:51:83:8f:11:4c:4f:12:1c:b0:18:6f:7a:17:b8:9d:
8a:c7:43:45:df:fb:14:48:ff:58:b6:ff:79:01:ea:9d:10:36:
d6:53:8f:84:ff:e4:c7:a4:67:65:fa:8d:1f:24:68:ef:9f:05:
92:d3:8e:0a:70:24:1d:c2:ac:b7:fb:dc:a9:e8:29:e3:2d:a0:
42:99:d6:8c:4a:58:ec:c5:58:37:21:b4:e5:6c:26:90:9e:f4:
aa:f4:8b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:22:55 2026 by rpki-client