Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
File: adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft (raw, json)
Hash identifier: yZtta8+ugFSuJva8pgvJvF4lg2yNtoaM1TWGxlS3Sc0=
Subject key identifier: E7:A9:E7:7D:6C:D9:B8:BD:8A:5F:C5:6A:1E:36:85:D7:BC:1B:57:65
Authority key identifier: 69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
Certificate issuer: /CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Certificate serial: 019D39AF56B0717E17369C8A08B1085DA355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
Manifest number: 11CF
Signing time: Sun 29 Mar 2026 13:01:25 +0000
Manifest this update: Sun 29 Mar 2026 13:01:25 +0000
Manifest next update: Mon 30 Mar 2026 13:01:25 +0000
Files and hashes: 1: _D3Sx9Q_gbo96AfGIDxHaE95AuY.roa (hash: p9qntnK/kcs265CcfjBLNs1kWk9qAHv/FsQZ2r3slpo=)
2: adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl (hash: VcaQ6a+aEi6KMZiftJzNLF/gKd//34YmeWBAwTSHTtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:56:b0:71:7e:17:36:9c:8a:08:b1:08:5d:a3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Validity
Not Before: Mar 29 13:01:25 2026 GMT
Not After : Mar 30 13:01:25 2026 GMT
Subject: CN=e7a9e77d6cd9b8bd8a5fc56a1e3685d7bc1b5765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9d:9d:66:e2:41:ec:98:a7:71:2d:3f:97:56:
a0:f3:42:6a:21:46:af:af:ed:21:f2:b1:38:a9:0f:
86:10:07:a2:2f:98:f3:31:7c:1d:b4:f9:51:de:e6:
c3:bc:75:e3:76:42:d0:18:89:e1:6a:b2:ee:08:af:
28:52:09:7f:6a:98:4c:4f:53:16:46:a6:38:55:38:
2f:78:7f:4c:b6:a0:6a:df:35:da:48:eb:2a:e2:8d:
e5:6b:97:9c:74:6d:17:9e:81:b7:18:f6:83:a2:4a:
0a:45:4f:fe:37:10:f0:10:14:8a:1d:db:6c:ad:37:
26:64:8f:46:0f:ee:3f:94:3a:ca:4f:75:cc:10:d2:
56:e5:19:8a:14:9a:97:5c:47:53:55:bb:86:c4:c4:
ff:d9:25:15:37:44:30:4a:a4:23:56:63:67:22:12:
2d:13:46:2c:57:af:1e:e9:fe:54:3d:b3:52:77:fd:
4a:39:25:76:cd:02:18:3d:db:bf:c7:a3:93:6d:db:
cc:0a:48:b8:8c:56:5c:1a:a1:4e:f4:e1:dc:d3:9c:
e9:b9:9f:34:27:c7:4b:13:a0:97:23:60:6c:b4:8d:
86:6f:24:d2:fd:25:d6:1c:40:7f:31:02:ac:ec:5e:
9a:e2:dc:64:04:82:14:7a:fb:2b:14:b4:da:a3:95:
6f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A9:E7:7D:6C:D9:B8:BD:8A:5F:C5:6A:1E:36:85:D7:BC:1B:57:65
X509v3 Authority Key Identifier:
keyid:69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:07:5c:a5:8d:ef:ca:56:58:6f:63:a6:6f:3f:83:47:fc:e1:
6d:c9:ee:30:98:02:dc:fd:af:49:ed:bd:54:fe:18:5f:bb:97:
db:d6:e2:1e:4c:21:47:1d:4c:7e:98:0b:fe:1b:67:11:cb:73:
22:48:2d:0f:ea:1f:96:48:fb:3f:09:c3:42:2f:ad:8c:25:b3:
c7:65:f4:c0:a2:bf:e7:5a:9c:36:f8:99:ea:1f:ac:a0:60:f2:
dc:ef:6c:bc:dd:06:3f:6d:fb:19:2a:65:46:9f:7d:04:0d:ef:
3e:ca:c7:21:1b:69:88:20:55:88:58:b7:e2:4e:44:89:44:25:
9d:b1:54:ab:d1:13:5e:bf:d2:92:8d:cf:be:49:42:b9:ee:57:
91:81:1d:26:12:64:dc:06:5c:22:97:b3:6b:a6:0e:32:f6:5e:
c7:ca:51:25:07:1d:b6:e2:af:a8:bb:c5:a4:ce:fd:98:69:c6:
a6:a6:ef:93:6f:17:2c:ff:ef:10:0a:04:bc:8f:e6:9d:58:d0:
3a:c8:ac:79:c5:4a:9a:74:a3:34:1b:97:02:65:6d:db:a2:67:
20:f8:39:2b:94:ae:ba:c9:4b:6d:b9:db:f2:2a:b9:80:5a:49:
5d:30:0b:3e:15:52:ca:fe:f7:3a:02:6b:9e:33:ed:96:f0:52:
a2:51:0c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:49 2026 by rpki-client