Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.mft
File: 11JRo59DDs1oHb_7IQ-wAYkkwoI.mft (raw, json)
Hash identifier: 1Pn4hg6KPgfrlkNxxgGrGvGgdY1RIeKksegPFHG/l5M=
Subject key identifier: F4:55:D8:E1:8C:B1:FF:16:AD:BB:C9:49:C8:CA:16:04:F2:0C:4C:EB
Authority key identifier: D7:52:51:A3:9F:43:0E:CD:68:1D:BF:FB:21:0F:B0:01:89:24:C2:82
Certificate issuer: /CN=d75251a39f430ecd681dbffb210fb0018924c282
Certificate serial: 019FA8D03575951F4F3DDA6AB1D29CCDE49F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11JRo59DDs1oHb_7IQ-wAYkkwoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.mft
Manifest number: 1C
Signing time: Tue 28 Jul 2026 13:00:45 +0000
Manifest this update: Tue 28 Jul 2026 13:00:45 +0000
Manifest next update: Wed 29 Jul 2026 13:00:45 +0000
Files and hashes: 1: 11JRo59DDs1oHb_7IQ-wAYkkwoI.crl (hash: +BVd+xebZRF1E/p3/59DP8oUITvC5xbB3FRxIKJe7Uw=)
2: 5GHGItuWgu2NHBkUyuT1w9sHbLk.roa (hash: UV/ClPkiXHS5oK6NPF6bZeR3cjtsNMceTFI7CQjYMO0=)
3: 8VIP4BNffyhbpmUvr_6dJF_eCJw.asa (hash: 2dMpVVo5jMEK2rWRU+TblyKjIajzwBR1JtK+zbon9OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/11JRo59DDs1oHb_7IQ-wAYkkwoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:35:75:95:1f:4f:3d:da:6a:b1:d2:9c:cd:e4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d75251a39f430ecd681dbffb210fb0018924c282
Validity
Not Before: Jul 28 13:00:45 2026 GMT
Not After : Jul 29 13:00:45 2026 GMT
Subject: CN=f455d8e18cb1ff16adbbc949c8ca1604f20c4ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:a1:68:e4:63:66:f1:32:31:63:39:40:87:
2a:da:17:d1:be:0a:ce:5b:dd:58:2d:53:f6:8e:30:
35:64:77:64:4e:9a:58:87:d3:a8:da:53:36:05:65:
31:1c:29:e5:7c:65:25:a6:97:b5:46:57:d0:ac:b0:
7b:26:45:51:28:b9:72:97:ba:48:e3:e9:77:4b:f2:
41:9a:fd:90:0c:a0:2c:cc:c7:a6:63:6a:f3:99:f8:
38:bc:da:76:78:45:ab:bd:cb:f3:fb:76:9b:6b:17:
3c:e4:0c:64:7e:8a:46:36:c0:42:b6:a1:47:cf:4f:
59:91:25:e3:44:78:ae:35:af:8e:51:cf:aa:1a:f9:
a1:f3:d4:38:36:86:2b:21:6b:1f:44:f2:36:26:a6:
fa:b5:79:11:f9:94:02:6b:c7:3a:cc:cf:6b:3c:e5:
97:b5:0e:c5:99:ff:d6:4c:29:eb:4f:12:50:3b:2c:
b5:a5:d2:57:92:cd:17:f6:8a:e1:ab:a7:64:fc:9b:
12:03:83:a5:91:a9:3f:98:e9:1b:a0:66:e3:13:23:
5f:24:c1:83:8d:c2:2e:a5:28:eb:a5:de:0c:f1:fa:
3d:84:45:96:b7:63:1f:0b:94:80:eb:64:59:4d:16:
0d:ed:00:52:cc:7d:08:ab:bc:80:48:a1:f3:5d:6f:
6b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:55:D8:E1:8C:B1:FF:16:AD:BB:C9:49:C8:CA:16:04:F2:0C:4C:EB
X509v3 Authority Key Identifier:
keyid:D7:52:51:A3:9F:43:0E:CD:68:1D:BF:FB:21:0F:B0:01:89:24:C2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11JRo59DDs1oHb_7IQ-wAYkkwoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:cd:92:62:c5:a9:eb:71:8a:72:7f:5d:70:b5:ce:1f:aa:54:
11:cc:74:cb:8a:bd:4f:69:b7:70:8c:b7:e0:75:d6:76:aa:33:
c3:cf:73:03:b3:c9:ef:18:97:50:10:58:a2:f2:c9:5b:60:77:
f7:29:7d:4d:f8:ff:0d:f1:4f:87:d7:4f:b1:65:7e:eb:55:11:
2b:5e:c1:51:31:c2:42:4d:bd:8e:7d:89:a5:a1:9d:cb:64:a2:
c4:7b:01:de:eb:fc:09:1c:da:bb:91:31:22:7e:c7:35:51:90:
0c:4d:e9:e1:6b:52:de:70:e3:44:df:30:c5:bf:19:9f:0f:08:
04:cc:ef:07:36:3f:a0:34:82:3c:01:1a:8c:28:07:af:d5:d6:
35:ef:10:98:40:4c:4b:41:4f:19:1d:6d:ad:90:d3:92:fa:73:
08:08:75:79:dc:49:65:ae:af:45:07:d8:1f:5d:7b:73:fb:a0:
82:0c:24:9a:09:21:f2:73:d8:8b:b5:7d:fd:d5:a9:aa:8d:3b:
a4:6f:dd:2b:32:11:84:ca:3c:64:f9:79:1b:cd:94:6a:5d:02:
1d:37:dc:b6:16:8a:56:d5:53:26:aa:e7:ae:6e:23:d8:db:73:
0d:f7:24:e7:75:97:92:6f:c3:22:a6:c6:b5:5f:7b:8e:13:4b:
7d:b7:13:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:40:06 2026 by rpki-client