Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
File: 11d1Kggad4_B0s7hsNaqRdUaLEk.mft (raw, json)
Hash identifier: 8MehIO/P5kDhn2p8j7J12PrVKHgT6cyoMmgxY7WE0LQ=
Subject key identifier: A8:95:CC:E7:45:EA:63:D2:94:43:C9:61:B2:18:F3:98:B2:81:90:39
Authority key identifier: D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
Certificate issuer: /CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Certificate serial: 019D37897032C420506711F7A79C8F75904A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 03:00:47 +0000
Manifest this update: Sun 29 Mar 2026 03:00:47 +0000
Manifest next update: Mon 30 Mar 2026 03:00:47 +0000
Files and hashes: 1: 11d1Kggad4_B0s7hsNaqRdUaLEk.crl (hash: P2p6wU8hn0MEVC6Ruvae6JUTa+NdWrgyV8+ksgDnSyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:70:32:c4:20:50:67:11:f7:a7:9c:8f:75:90:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Validity
Not Before: Mar 29 03:00:47 2026 GMT
Not After : Mar 30 03:00:47 2026 GMT
Subject: CN=a895cce745ea63d29443c961b218f398b2819039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:21:1e:d5:0e:fb:fd:12:aa:43:2e:bd:56:
5a:41:d3:db:1a:e6:d0:21:d8:69:0e:e4:99:bb:d9:
ed:ae:48:be:94:81:59:e9:52:91:d6:a6:b6:82:ae:
4e:06:af:e7:fc:11:8c:62:a2:b7:4a:64:a5:8c:d2:
8d:88:16:d6:a1:9b:b0:a8:a1:ba:69:a6:c3:79:0f:
4d:7c:9e:06:a0:14:a1:1c:9b:49:b3:63:71:9a:9b:
f6:3e:8e:94:3c:1e:6f:46:25:76:a9:14:02:a6:77:
8a:46:c7:43:2a:18:7c:8b:de:5f:f5:7a:8c:78:9f:
2b:a2:fb:e9:ea:fd:6a:d5:e2:d3:cf:aa:7f:d5:55:
12:11:3a:f3:a0:24:21:65:69:d6:b1:7d:06:7f:36:
78:fc:67:d2:29:70:3f:64:74:24:2b:27:d4:8f:de:
9c:02:1f:a9:97:63:f3:e1:ea:ac:e0:93:76:7c:7d:
b8:da:55:14:91:0f:3d:96:07:ea:3b:27:0c:ef:56:
12:f4:0f:c1:75:10:1b:b6:30:82:ef:ae:09:c0:07:
92:79:9a:56:a9:3b:6b:f1:56:87:25:6d:8c:64:c1:
f5:13:2a:13:11:8f:f3:1b:e9:d9:e7:3e:45:47:03:
af:95:3e:7c:6a:af:a9:30:b7:ec:ae:4f:11:be:98:
8c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:95:CC:E7:45:EA:63:D2:94:43:C9:61:B2:18:F3:98:B2:81:90:39
X509v3 Authority Key Identifier:
keyid:D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ad:3f:f3:aa:cc:51:3b:42:f9:17:00:f3:fc:47:58:47:71:
07:e5:6d:a3:86:1e:58:35:90:82:d9:10:84:7b:e8:f1:e6:77:
aa:72:ee:eb:1c:73:59:1d:47:f2:c8:a3:c7:a2:ea:07:94:45:
fe:65:44:b8:31:0b:64:8a:e7:8e:22:24:2b:01:2a:bb:a4:4a:
90:4b:f7:84:25:ee:74:25:da:c3:04:9b:b3:de:7c:42:78:b5:
41:b9:c0:f4:5f:aa:98:b2:c2:fd:5d:9a:d8:97:d1:7c:44:9b:
9e:65:4a:12:8e:2c:07:da:04:07:7d:d3:56:5d:b9:73:e1:17:
19:ae:35:0b:67:e2:f9:79:68:26:b8:83:e0:9f:f6:c2:c8:73:
31:5c:5d:94:51:9f:ad:e0:59:41:5a:81:d9:1c:fe:2a:c7:dd:
e2:b4:1e:3e:9d:43:2d:33:d5:56:c8:e6:be:90:f2:4c:54:82:
e6:c7:2f:ee:06:51:9d:6e:10:6e:0c:3d:b2:13:35:31:e5:5d:
af:de:29:a6:ff:08:44:de:12:c4:87:6e:34:c2:41:24:d9:d8:
89:5c:73:3d:fe:eb:74:89:a3:c8:4e:c9:c7:a1:e3:1b:cc:3e:
2b:0d:b8:e0:03:5b:d8:5e:bd:a4:04:d2:60:c5:f8:d7:c9:45:
e9:09:6d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:37 2026 by rpki-client