Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
File: 11d1Kggad4_B0s7hsNaqRdUaLEk.mft (raw, json)
Hash identifier: iJg1iArNcKniDSeGX2emSxHBSetFPWtg5Qj6D5wUfFg=
Subject key identifier: A6:CA:6A:0E:23:D8:8A:D7:88:B1:42:54:90:EA:A8:E3:AA:8B:FB:AE
Authority key identifier: D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
Certificate issuer: /CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Certificate serial: 019D9A075E5ABE2A36A19E8CE112933DD559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 06:01:07 +0000
Manifest this update: Fri 17 Apr 2026 06:01:07 +0000
Manifest next update: Sat 18 Apr 2026 06:01:07 +0000
Files and hashes: 1: 11d1Kggad4_B0s7hsNaqRdUaLEk.crl (hash: mDhr1SnikGXhUWH91xE5x5Br9ZSjOLqm4tPuIJA5oLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:5e:5a:be:2a:36:a1:9e:8c:e1:12:93:3d:d5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Validity
Not Before: Apr 17 06:01:07 2026 GMT
Not After : Apr 18 06:01:07 2026 GMT
Subject: CN=a6ca6a0e23d88ad788b1425490eaa8e3aa8bfbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:62:1f:41:36:85:53:70:fd:6a:75:62:26:
aa:a4:45:2d:ab:20:e5:16:18:61:4b:0c:0a:4c:d3:
98:bc:f4:89:04:56:be:6f:1a:72:5d:cb:7f:10:18:
8b:85:29:d2:ef:ba:1b:19:39:91:5f:3e:6e:ea:35:
8b:3e:07:8d:09:1a:3a:e8:4c:fa:46:5d:90:58:f0:
a2:00:de:28:fd:30:3e:2e:28:d0:69:17:ec:d6:14:
ed:40:a1:b7:54:12:32:1a:cd:4d:b2:bb:95:7f:d2:
39:c9:be:26:80:84:e9:d8:02:4f:cf:79:78:df:89:
e9:96:5f:4f:a2:91:3c:14:fe:14:8c:42:6d:a1:e0:
33:64:84:4d:10:97:fd:4b:92:17:04:aa:1b:b6:13:
a3:9e:da:c7:81:a1:f5:af:79:26:80:12:31:7a:78:
5a:1c:97:b6:d3:87:06:8b:82:98:32:58:4a:f7:1c:
16:0e:99:a7:4a:d2:3b:84:35:7d:62:ee:48:75:d0:
2b:a5:e1:c5:04:78:8d:eb:d9:9c:43:66:b3:6e:83:
67:a6:e0:c3:78:35:5a:b5:cb:cd:3d:93:87:fb:31:
25:23:ed:1f:8a:e4:b5:20:4e:15:4a:4f:c1:8d:42:
15:3a:28:2e:ad:12:ce:7a:b6:cf:91:38:09:1f:8a:
77:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CA:6A:0E:23:D8:8A:D7:88:B1:42:54:90:EA:A8:E3:AA:8B:FB:AE
X509v3 Authority Key Identifier:
keyid:D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ba:0c:f6:fa:d3:3e:43:f0:58:40:cd:e8:0b:36:db:f6:67:
be:cb:9b:6f:f7:53:70:70:45:53:eb:b8:a8:26:b9:62:d5:9a:
41:b3:9b:76:3f:3d:99:9a:92:ac:5f:0d:19:6c:20:fc:3e:0f:
d3:f3:2e:2c:c9:6b:17:e7:73:35:4b:57:69:8f:cb:7e:84:ae:
b6:ff:aa:ca:13:7e:61:d0:d0:6f:25:e7:77:04:2f:e0:88:74:
c5:97:db:e0:70:60:85:c8:87:85:ff:89:bd:65:9d:07:a3:83:
77:93:b3:e8:8a:70:78:0d:57:b2:11:5a:37:aa:b1:40:50:00:
73:e6:59:0b:8c:1e:90:9c:a9:c3:f6:72:66:e6:f6:d5:64:fa:
93:ee:17:30:b0:2f:e9:b1:44:db:8a:bb:56:4f:05:1d:78:d8:
b8:44:a9:3b:f6:a1:e3:2b:54:15:db:34:5a:ae:08:aa:e0:99:
a3:78:af:f0:68:3c:f3:70:80:47:3a:3b:50:4d:64:21:21:84:
ef:b8:90:7c:42:3c:76:f2:89:16:43:8c:72:cb:8f:0e:4e:29:
0a:0b:2e:8d:e5:03:c5:13:b6:7b:05:3f:5a:73:23:bb:37:42:
2e:54:78:5a:be:da:8a:9f:31:95:76:cd:7c:a9:96:0d:30:85:
1a:af:2d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:33:22 2026 by rpki-client