Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
File: 11d1Kggad4_B0s7hsNaqRdUaLEk.mft (raw, json)
Hash identifier: nBr1/jJnQAY/SvHDmvkwhPG9Vvh9bu9l7GsgjqOeiQU=
Subject key identifier: 95:9A:C5:8C:8A:CC:4E:AA:86:35:33:32:5A:43:67:26:E6:AA:85:03
Authority key identifier: D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
Certificate issuer: /CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Certificate serial: 019CAA8FD943B8E1CB64146F8954C6FCB603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 18:01:19 +0000
Manifest this update: Sun 01 Mar 2026 18:01:19 +0000
Manifest next update: Mon 02 Mar 2026 18:01:19 +0000
Files and hashes: 1: 11d1Kggad4_B0s7hsNaqRdUaLEk.crl (hash: 7Teu67i0drP9YprT+xD2WlBWgm7kkH/DxCHWjRrYsr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:d9:43:b8:e1:cb:64:14:6f:89:54:c6:fc:b6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Validity
Not Before: Mar 1 18:01:19 2026 GMT
Not After : Mar 2 18:01:19 2026 GMT
Subject: CN=959ac58c8acc4eaa863533325a436726e6aa8503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:8c:ac:e2:87:e8:af:bf:f8:8e:1b:4d:2b:
35:ca:24:d0:52:1a:5b:5f:f0:cf:c3:79:f5:c6:25:
ad:13:4a:df:7f:04:59:63:15:23:4e:44:cc:23:b6:
a5:a4:34:25:f4:f3:14:01:16:c1:cf:9c:dc:4e:ad:
45:e1:c3:dc:1b:3e:ba:2a:53:c1:13:dd:0a:35:e5:
0c:da:63:f3:d5:f4:d2:c7:c0:ba:07:72:f6:b0:6f:
43:4a:6d:b2:4a:79:78:22:74:a3:5e:1f:c4:59:9b:
bb:ea:7f:04:32:2a:01:4c:34:ac:f6:60:06:5e:03:
04:bd:68:a5:93:ed:6b:41:77:e6:80:fb:4c:b9:90:
47:96:7e:78:2a:8d:08:61:57:10:66:81:1c:21:2f:
2a:3c:57:a3:de:74:ca:2b:3c:7d:7b:2e:9f:65:04:
c4:a0:46:a7:f5:85:2b:e0:50:8d:90:44:42:b8:b9:
4d:51:13:1a:f1:18:9c:1f:f6:22:b5:72:fd:2e:1a:
62:8d:39:fd:31:fb:f3:79:1b:6d:bd:8e:75:20:99:
5f:0b:cd:2a:d8:b2:3a:14:01:4f:eb:66:13:07:33:
e8:38:06:5a:62:8d:6b:74:36:96:07:8d:af:2f:3f:
31:11:e7:30:ef:cb:02:6d:86:34:2d:36:3b:a0:1e:
41:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9A:C5:8C:8A:CC:4E:AA:86:35:33:32:5A:43:67:26:E6:AA:85:03
X509v3 Authority Key Identifier:
keyid:D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:cf:f4:7b:48:bd:d9:6a:02:32:0c:6c:4f:dc:53:b5:84:e6:
9a:7c:5a:92:e4:ff:a2:8d:9c:6a:01:39:fd:09:af:88:86:16:
90:ff:a1:2a:00:65:a9:ce:9f:4d:08:08:46:2c:c7:66:6b:c9:
86:d6:82:08:f4:f4:14:f4:ec:f3:68:59:a3:bf:8f:14:70:11:
92:4c:ad:5c:22:85:cb:14:93:e9:e5:95:a9:6d:f0:ac:c4:e6:
e1:90:65:38:b3:f0:01:a2:8d:15:a0:53:b8:62:00:87:a9:3b:
9d:29:51:b9:71:5c:95:9e:1f:48:8e:a4:2d:c1:6d:67:15:de:
11:fc:dc:9d:0d:84:6b:8b:cb:8c:91:c1:4d:83:6e:a1:5d:58:
26:14:31:86:e4:b1:26:54:82:9e:95:2d:fc:d7:5c:2a:bc:c6:
0f:2d:15:10:f0:42:b6:ca:ae:90:5a:87:1b:10:6c:aa:1a:0e:
06:e9:67:11:ff:66:97:fc:54:b5:0f:d8:b6:f7:e6:25:3b:55:
53:ea:38:99:7d:2e:c4:05:9d:59:a4:6e:38:f8:df:3a:2f:8e:
85:56:b1:ab:10:25:f9:1e:ca:75:83:a9:c2:07:16:8c:bf:40:
6d:05:a4:1c:9a:fd:5f:a3:a8:51:8d:4d:11:84:fd:fc:76:69:
ee:da:56:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:47 2026 by rpki-client