Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.mft
File: 11JRo59DDs1oHb_7IQ-wAYkkwoI.mft (raw, json)
Hash identifier: UWU7P6/sFb4epTrnI2A1vi4bCn59Egvzq47w65Mv7EM=
Subject key identifier: A6:EE:A3:62:5F:C1:72:FA:96:C4:03:41:07:3C:B0:91:21:4B:CB:FF
Authority key identifier: D7:52:51:A3:9F:43:0E:CD:68:1D:BF:FB:21:0F:B0:01:89:24:C2:82
Certificate issuer: /CN=d75251a39f430ecd681dbffb210fb0018924c282
Certificate serial: 01A0DBDFA83D50E3678433824C96008663A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11JRo59DDs1oHb_7IQ-wAYkkwoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.mft
Manifest number: BB
Signing time: Sat 26 Sep 2026 04:01:02 +0000
Manifest this update: Sat 26 Sep 2026 04:01:02 +0000
Manifest next update: Sun 27 Sep 2026 04:01:02 +0000
Files and hashes: 1: 11JRo59DDs1oHb_7IQ-wAYkkwoI.crl (hash: 1li9p0gsVXrj6wXpEByzVo2zjucv0/WSa4qjtfSudDs=)
2: 5GHGItuWgu2NHBkUyuT1w9sHbLk.roa (hash: UV/ClPkiXHS5oK6NPF6bZeR3cjtsNMceTFI7CQjYMO0=)
3: 8VIP4BNffyhbpmUvr_6dJF_eCJw.asa (hash: 2dMpVVo5jMEK2rWRU+TblyKjIajzwBR1JtK+zbon9OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/11JRo59DDs1oHb_7IQ-wAYkkwoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:df:a8:3d:50:e3:67:84:33:82:4c:96:00:86:63:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d75251a39f430ecd681dbffb210fb0018924c282
Validity
Not Before: Sep 26 04:01:02 2026 GMT
Not After : Sep 27 04:01:02 2026 GMT
Subject: CN=a6eea3625fc172fa96c40341073cb091214bcbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:43:62:e9:3b:0f:b4:c2:52:79:6c:f8:d4:50:
cf:88:91:c9:67:0b:ae:63:5e:e5:55:83:07:84:f7:
2c:a0:98:f1:43:43:cd:eb:39:9e:71:df:2b:98:5d:
23:a0:fa:23:91:44:df:d9:86:cc:28:0b:3f:8e:fc:
35:53:1e:a7:6b:b9:36:fa:3f:73:66:c0:94:04:9d:
3b:a9:ba:7c:aa:db:4b:7a:4a:b2:c2:60:79:2f:59:
0a:6c:da:66:81:50:a6:2f:ae:e8:32:17:48:e0:de:
55:cd:ec:28:f4:db:50:a5:ab:2a:5b:ae:11:d4:bc:
92:c9:44:6d:e9:5c:41:0d:a4:29:e8:c6:b9:fe:58:
e3:95:4d:02:92:5a:5e:aa:80:eb:cd:68:f0:26:a8:
23:df:bf:40:67:52:0b:2b:8b:85:ed:57:c8:24:2c:
ea:b8:15:54:39:7a:e5:44:16:97:f9:e1:cf:0b:98:
f6:24:80:77:f4:3c:79:5b:ba:0c:e5:1a:fd:36:80:
1d:eb:40:57:02:15:93:27:bf:e4:52:fc:81:73:48:
60:71:80:0e:99:61:c6:8e:5a:55:5e:7f:fa:55:d2:
fe:de:89:ce:23:ad:3e:94:f5:22:f0:c4:33:03:05:
d3:aa:4f:8e:ff:3d:5e:43:1e:db:b6:09:35:46:8a:
a6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EE:A3:62:5F:C1:72:FA:96:C4:03:41:07:3C:B0:91:21:4B:CB:FF
X509v3 Authority Key Identifier:
keyid:D7:52:51:A3:9F:43:0E:CD:68:1D:BF:FB:21:0F:B0:01:89:24:C2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11JRo59DDs1oHb_7IQ-wAYkkwoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:19:ce:68:2f:15:f0:8d:b0:aa:c4:2c:04:b7:8e:c5:c5:5e:
ea:a5:67:23:2a:fe:fa:a9:5f:22:0a:1e:68:78:fc:07:97:8f:
15:12:8e:54:eb:0b:f1:54:9d:0e:ef:53:ec:9c:d4:09:3b:4a:
12:f1:c5:fd:c7:4d:7f:cc:b6:e6:35:05:50:a1:03:57:4e:e5:
61:90:f1:5a:7f:ff:c3:74:a1:cf:cc:79:75:d3:1a:dc:6e:73:
f9:0d:83:4a:f1:d5:0e:e5:23:c5:f7:19:70:38:02:04:66:e5:
f5:db:49:07:5c:e4:b6:2d:a8:e0:a1:10:8c:fc:db:55:42:59:
6c:15:ea:1e:b3:0e:21:0a:0c:78:cc:29:79:4e:cf:8b:ee:b7:
0e:d6:e9:74:76:79:0a:97:43:18:c9:36:84:ec:43:95:6b:ff:
30:8b:4b:25:34:74:4a:d0:ee:e4:82:cb:5b:7c:63:21:0e:c7:
6e:a5:9b:db:a0:3e:39:cb:ff:6b:35:c5:93:e3:7e:74:d6:71:
75:2f:10:5b:60:30:e7:66:19:aa:60:6c:d0:4a:03:48:fa:d9:
24:26:d6:85:06:c6:5f:de:6e:f1:7b:65:a7:f7:28:bb:bf:ee:
f3:c7:68:08:a0:8b:d0:4b:1b:76:cf:92:1e:3e:94:b7:57:75:
94:d3:5e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:23:01 2026 by rpki-client