Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
File: 11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft (raw, json)
Hash identifier: ryzWfILL6m500b8MhkVvm5voxpmbCJhDCZjkc8wcnBM=
Subject key identifier: 9E:06:6B:41:4A:82:B4:08:3A:AF:4C:E8:CD:E3:B0:A2:C3:80:BA:FD
Authority key identifier: D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F
Certificate issuer: /CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
Certificate serial: 019D38655EFC38B5489FF75A2FDB2880B8A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:01:00 +0000
Manifest this update: Sun 29 Mar 2026 07:01:00 +0000
Manifest next update: Mon 30 Mar 2026 07:01:00 +0000
Files and hashes: 1: 11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl (hash: GX1Cmc4QDsLhD/kdglbWjaCXEfRGa3jLx388BbfiOMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:5e:fc:38:b5:48:9f:f7:5a:2f:db:28:80:b8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
Validity
Not Before: Mar 29 07:01:00 2026 GMT
Not After : Mar 30 07:01:00 2026 GMT
Subject: CN=9e066b414a82b4083aaf4ce8cde3b0a2c380bafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:13:b1:4a:bd:e7:67:1c:d9:b1:3d:27:f1:cd:
c2:4c:7e:6d:3b:94:18:2e:d6:66:a8:ff:62:07:f7:
0b:20:d9:ee:17:0c:2c:94:63:69:5a:7a:00:89:7a:
1b:f7:54:c0:ad:24:22:e1:2c:9c:f5:9c:ac:df:3d:
e6:3b:fa:a0:40:21:f7:af:eb:be:8d:81:2c:f8:8b:
e2:1f:d4:33:b1:71:74:36:99:3b:f1:00:77:9a:61:
e6:90:67:bb:0b:e4:d5:43:da:33:ec:0d:4f:28:60:
fc:1a:85:4d:df:f5:5f:d9:1f:63:a7:d1:c2:de:d4:
33:b0:df:6a:0d:16:04:73:cb:50:74:15:f5:4f:10:
90:e0:a5:e2:a5:9f:b6:97:67:7d:68:b7:8f:af:c6:
9f:74:e5:1e:01:0e:d6:5f:b8:e5:bc:92:3d:f2:91:
be:5c:3a:e1:09:29:06:b6:66:88:25:5f:c5:e2:a9:
3d:6f:30:cd:cd:80:26:be:a3:87:3c:48:ca:f6:ab:
ab:16:39:a1:b7:3e:83:16:e5:1c:ce:92:12:3d:96:
99:01:d3:b8:ac:09:d7:90:67:bd:5f:86:1f:bb:17:
d6:2e:cb:f8:d9:5b:9e:17:ba:02:28:fb:85:ce:75:
97:5e:85:42:eb:6b:f6:c7:db:07:a1:eb:6a:89:dc:
0f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:06:6B:41:4A:82:B4:08:3A:AF:4C:E8:CD:E3:B0:A2:C3:80:BA:FD
X509v3 Authority Key Identifier:
keyid:D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:18:b8:ef:f7:82:e9:d1:43:3b:02:19:a4:60:5d:d2:76:df:
70:d5:23:d2:ee:0d:cc:ab:f0:3e:7a:38:37:bb:44:4f:c4:b6:
26:8f:47:1f:82:82:67:a1:7b:83:c5:c1:c7:30:50:e0:db:66:
b0:28:a4:f0:33:19:7e:ed:a4:7f:2d:e8:d1:43:f3:58:52:79:
bf:e4:c7:02:d6:f6:4b:27:62:85:fc:4e:05:38:4d:9c:a9:cc:
52:f9:b6:a2:f2:65:c3:8a:cc:a6:f9:f3:3b:01:af:4f:c8:4d:
c5:1c:bd:d7:de:d7:92:58:fa:3c:d7:d1:01:3a:c2:c7:93:1d:
1a:44:3f:db:1c:2f:4f:a1:13:5e:35:a8:f6:1d:c9:aa:a6:0a:
b0:a5:11:ed:6f:df:11:e5:56:d6:72:5a:4b:9e:75:bb:0d:cc:
c6:ab:2b:90:64:b2:19:3d:a0:bc:3f:12:78:21:67:b5:7d:42:
5e:0b:ee:f6:2d:b5:f3:73:15:24:54:02:0b:b6:91:00:e3:be:
07:c4:d3:00:63:3a:77:31:de:34:9b:ed:4e:b6:87:71:80:b1:
d9:48:b5:4d:48:76:45:c5:a0:07:76:c4:3a:c9:b4:67:4f:0c:
94:68:9c:85:36:74:29:c5:fe:f1:69:63:16:73:27:df:64:e1:
57:81:6b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:09 2026 by rpki-client