Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
File: 13BmKFIPfdrO9yQ276VGNcUs_ck.mft (raw, json)
Hash identifier: xUTtT8NtTKzQQlsaH/3wZRP9TuP5yC/3hT53fwIWKU0=
Subject key identifier: 59:0A:1C:29:D0:F9:49:EE:70:CD:70:ED:CF:58:60:75:CE:FC:A0:92
Authority key identifier: D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
Certificate issuer: /CN=d7706628520f7ddacef72436efa54635c52cfdc9
Certificate serial: 019D37BFF38E374BC9C32655338E50803E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
Manifest number: 0F63
Signing time: Sun 29 Mar 2026 04:00:19 +0000
Manifest this update: Sun 29 Mar 2026 04:00:19 +0000
Manifest next update: Mon 30 Mar 2026 04:00:19 +0000
Files and hashes: 1: 13BmKFIPfdrO9yQ276VGNcUs_ck.crl (hash: Tnpm4xEYz9KK0o9t2TxgQNjcgCvLzXnDrRofwvaOeko=)
2: Nu3peWDWrg8B9TZmbC7e-FKE5u0.roa (hash: XwlZgv/uZ1480t7jqmTSWZk9U5cuFEim7w/uA9kUOv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f3:8e:37:4b:c9:c3:26:55:33:8e:50:80:3e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7706628520f7ddacef72436efa54635c52cfdc9
Validity
Not Before: Mar 29 04:00:19 2026 GMT
Not After : Mar 30 04:00:19 2026 GMT
Subject: CN=590a1c29d0f949ee70cd70edcf586075cefca092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b5:2e:33:9c:d4:27:ba:6a:1a:04:2a:c3:c0:
7e:16:ff:67:6e:06:dd:4d:f2:50:6c:96:4f:05:f6:
15:84:51:6d:99:ff:38:e5:36:bc:3e:6e:77:4c:dc:
ed:e9:98:d6:bb:80:df:c6:9b:c5:bc:c1:4d:5f:71:
06:4f:be:d8:cb:55:d6:58:c1:53:c6:b3:45:86:08:
9e:73:97:46:93:c2:bb:e0:23:36:f9:84:11:95:e0:
74:63:a8:ce:6b:fc:2a:da:74:d8:62:f0:aa:71:61:
c1:33:3f:d5:3a:8e:99:9b:21:75:b7:46:d2:ef:a9:
6e:fc:84:8d:d2:9d:67:fb:51:53:ed:4c:d9:53:df:
8c:32:6a:2f:7a:d9:a8:e7:d7:27:2f:ca:06:2a:d2:
04:63:26:dc:ac:2c:31:e4:2a:7d:85:57:de:4a:88:
13:36:0d:90:54:cb:9e:c1:ef:8e:a8:5c:88:0d:64:
de:c8:ae:59:23:00:76:ae:74:ec:98:7f:97:10:97:
2c:58:01:bd:68:78:09:13:b3:65:08:ce:f4:b4:1f:
d1:f6:54:18:20:5a:95:d5:8e:0e:90:ed:cc:84:a9:
07:00:7c:c2:72:a5:a0:37:eb:81:d0:2d:25:14:7e:
95:fe:55:ee:1e:eb:1b:98:4a:5d:38:fc:ef:50:83:
ed:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0A:1C:29:D0:F9:49:EE:70:CD:70:ED:CF:58:60:75:CE:FC:A0:92
X509v3 Authority Key Identifier:
keyid:D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0a:92:59:8d:d2:b0:1f:68:68:56:77:30:0c:da:cc:68:1c:
05:b9:a3:93:6e:07:b0:cb:a2:d7:08:5b:b6:38:ea:9b:2e:4b:
03:77:01:1f:87:1a:a2:b4:37:94:b2:c2:bb:4e:17:4f:84:6e:
6e:a4:de:f6:40:b5:d9:8e:e7:db:fc:7f:14:b9:0c:8b:5c:bb:
85:da:2a:63:c1:e8:f3:36:c3:60:c7:b0:0e:18:ec:22:51:34:
43:88:04:51:a2:60:0a:16:46:e1:56:23:a6:96:08:43:2b:50:
c7:27:a2:2a:71:72:1b:1e:85:de:f1:b8:fd:ad:d6:6b:75:de:
06:63:12:d3:f2:22:63:17:4e:2a:4c:ac:0d:9a:0e:2d:ab:75:
1d:d4:e3:0c:02:a0:70:38:26:c1:79:d5:59:70:fe:1a:3a:97:
d3:3f:36:ef:a9:82:d7:e6:1e:a6:81:44:d4:04:e9:03:7c:16:
7c:63:ab:30:4a:3f:bf:48:2b:98:af:b9:33:8a:68:68:ea:b8:
6b:c2:3b:86:d8:36:d4:f5:ab:b1:92:c2:ea:92:81:46:c2:46:
a2:7a:dc:a2:16:c6:03:82:f6:c7:b9:da:ea:65:0e:e1:cf:a7:
2c:d3:f0:15:01:c9:16:c2:85:51:06:29:bd:8a:41:10:61:c8:
52:2d:53:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:25 2026 by rpki-client