Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
File: wd13fOfXCSaMDFWlnADGrqWyGb0.mft (raw, json)
Hash identifier: mbi1f2Br4YKnCpkTI0bAA30r8DZtMLDUFACAmccKJBM=
Subject key identifier: 2C:F7:38:50:5A:67:2A:D2:DD:B5:DB:B4:0C:DD:C8:40:95:29:CA:47
Authority key identifier: C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD
Certificate issuer: /CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
Certificate serial: 019D382E9D5CCA48186319D822E6D6D53717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
Manifest number: 137D
Signing time: Sun 29 Mar 2026 06:01:12 +0000
Manifest this update: Sun 29 Mar 2026 06:01:12 +0000
Manifest next update: Mon 30 Mar 2026 06:01:12 +0000
Files and hashes: 1: nRmjyxWGF6a7tV1DmVfOj7lLijI.roa (hash: zc3Mo+okKisvH6UwCPx7tW7bSfZdDVD88nKDTYhyQDY=)
2: wd13fOfXCSaMDFWlnADGrqWyGb0.crl (hash: QJy9Lrv/bfaGSUP9wewb+Z8+0SED9M0RVK9tlaGzOvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:9d:5c:ca:48:18:63:19:d8:22:e6:d6:d5:37:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
Validity
Not Before: Mar 29 06:01:12 2026 GMT
Not After : Mar 30 06:01:12 2026 GMT
Subject: CN=2cf738505a672ad2ddb5dbb40cddc8409529ca47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:7e:0d:7f:f1:0c:7e:2d:8e:31:15:fc:99:1e:
3d:7d:a9:00:21:a8:48:29:c9:cc:ec:38:92:cb:2f:
26:c5:45:9c:fe:c9:bc:45:1d:b4:f3:3f:ca:45:d9:
77:46:a0:5e:cc:ee:16:6e:81:c4:e4:d3:c6:0e:0a:
54:1d:c9:b2:f7:a5:94:34:cb:de:df:07:ec:f4:9e:
eb:3e:5c:d4:23:da:55:12:1c:32:8f:7c:38:9a:5f:
df:a6:71:5d:dc:d5:f4:8e:83:7d:0a:25:21:0f:d6:
ba:80:43:8d:9d:42:e6:7f:1c:3b:f3:62:b6:d2:50:
f1:6e:31:ce:53:8f:db:93:e2:d2:86:90:5c:62:2d:
dd:be:c7:fa:f5:89:5f:fc:81:55:04:d3:dd:86:6a:
e0:fd:e1:d0:bc:c0:a1:b5:a1:81:a6:21:d1:55:86:
52:9b:e9:08:6b:78:d4:28:33:ef:c7:e5:44:e7:a7:
1e:26:02:e6:e1:0b:80:18:a0:0d:2f:28:6e:54:4e:
2a:9b:64:d1:f3:9a:21:ff:61:9a:33:2d:54:d9:6e:
c6:51:bc:a0:7d:25:66:6a:71:e3:3c:7c:7d:d4:4b:
69:64:01:f5:06:3a:5b:bb:2f:df:c7:bd:47:4a:39:
f5:b9:6e:b9:0c:ac:a0:85:4b:54:77:fb:e2:35:b0:
f6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F7:38:50:5A:67:2A:D2:DD:B5:DB:B4:0C:DD:C8:40:95:29:CA:47
X509v3 Authority Key Identifier:
keyid:C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b7:13:1e:1b:65:9a:97:73:3f:f0:13:bd:e7:3a:8d:a7:15:
e4:4c:3c:c7:34:ca:76:80:63:9d:a0:0d:8e:94:a3:b2:72:f6:
02:92:f4:7d:b6:e5:71:23:af:9e:82:29:78:fc:22:80:4d:39:
a7:04:99:55:65:90:89:8d:21:fc:1d:c1:80:05:f4:b0:5e:f4:
d6:df:d3:d9:1c:95:cf:b9:a9:00:9a:ed:9b:83:54:57:57:7d:
af:0a:0c:6e:0f:34:94:eb:1a:3c:0d:b9:1c:58:b3:4c:4d:e7:
cc:46:51:c2:7f:22:3d:64:19:f2:7b:b5:f3:4a:84:93:9b:e8:
31:8a:58:aa:8b:d3:00:45:54:f0:42:c5:05:4a:df:98:aa:88:
e1:39:da:f6:a1:8b:1e:d6:96:8a:1e:a8:87:8f:66:d1:ca:21:
68:08:2d:ae:9c:87:93:01:2a:ce:ef:3c:cd:ac:67:f7:2a:59:
63:dc:9f:ff:83:8f:e9:a3:72:ac:33:05:76:6f:1c:49:0d:38:
81:b3:24:a4:51:14:43:ed:1e:db:4b:3d:74:48:d1:c1:5f:b5:
7d:61:15:ea:41:02:a1:dd:6d:61:7f:dd:04:e4:13:51:df:9f:
2f:1b:2d:19:14:19:a9:c4:4e:82:c8:fd:fb:76:d1:5b:89:b5:
a9:45:62:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:40 2026 by rpki-client