Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.mft
File: 11JRo59DDs1oHb_7IQ-wAYkkwoI.mft (raw, json)
Hash identifier: epS7eS1EaWocT9zkQKXRMWyHBK7fpSm7V7Ob/XNjbV0=
Subject key identifier: 1D:9A:0A:7B:91:A9:E5:67:D8:C2:8B:13:A0:DA:0A:50:2F:C4:A3:95
Authority key identifier: D7:52:51:A3:9F:43:0E:CD:68:1D:BF:FB:21:0F:B0:01:89:24:C2:82
Certificate issuer: /CN=d75251a39f430ecd681dbffb210fb0018924c282
Certificate serial: 019FF7FEC90FDD8595C3725C109CE5A24C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11JRo59DDs1oHb_7IQ-wAYkkwoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.mft
Manifest number: 45
Signing time: Wed 12 Aug 2026 22:01:37 +0000
Manifest this update: Wed 12 Aug 2026 22:01:37 +0000
Manifest next update: Thu 13 Aug 2026 22:01:37 +0000
Files and hashes: 1: 11JRo59DDs1oHb_7IQ-wAYkkwoI.crl (hash: leu+ao5h/DsuK460ZB1urasX1q7xg3e5SNltp+dghIo=)
2: 5GHGItuWgu2NHBkUyuT1w9sHbLk.roa (hash: UV/ClPkiXHS5oK6NPF6bZeR3cjtsNMceTFI7CQjYMO0=)
3: 8VIP4BNffyhbpmUvr_6dJF_eCJw.asa (hash: 2dMpVVo5jMEK2rWRU+TblyKjIajzwBR1JtK+zbon9OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/11JRo59DDs1oHb_7IQ-wAYkkwoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:fe:c9:0f:dd:85:95:c3:72:5c:10:9c:e5:a2:4c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d75251a39f430ecd681dbffb210fb0018924c282
Validity
Not Before: Aug 12 22:01:37 2026 GMT
Not After : Aug 13 22:01:37 2026 GMT
Subject: CN=1d9a0a7b91a9e567d8c28b13a0da0a502fc4a395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:71:e9:87:3f:9a:a1:e1:64:c6:69:f4:fe:
df:53:70:a2:67:ac:2d:93:48:fa:6e:79:b9:76:6d:
a6:1d:c8:6a:cf:ba:15:0e:ac:c8:6b:8c:df:0f:df:
62:92:e7:27:be:4a:92:78:d9:5c:99:23:43:73:84:
90:d2:6e:86:be:36:bb:24:8b:ec:ca:c8:35:37:2f:
66:a2:25:61:79:6b:9f:fa:b2:af:16:c6:f6:5a:d0:
c0:b5:3a:29:4e:43:6e:af:5e:de:e6:88:29:2f:fb:
e3:34:86:11:66:67:2a:d7:a1:16:8c:8f:ae:15:5f:
79:b4:d1:2f:9e:c1:e7:da:c1:cd:7c:f6:d3:94:bd:
b7:95:0a:3e:2f:29:12:c3:b1:86:43:15:b5:ef:9b:
16:9e:93:41:7b:cc:c6:5b:83:a7:bd:4f:70:c1:6e:
a2:da:d5:a6:a8:01:a5:06:11:9b:db:46:de:f5:1d:
e1:d3:86:34:9c:42:7d:ad:b1:e4:3a:9b:40:1d:90:
a4:9a:42:6e:f2:9a:3d:d4:6d:f3:ad:6a:0b:20:66:
70:f5:5c:ca:f3:65:c2:12:ab:66:dc:5f:94:39:a7:
e1:a5:af:5e:86:92:c6:fd:ee:ea:db:80:f9:97:9b:
2c:8a:c1:80:5e:b3:c8:a3:7a:73:8f:04:cb:6e:a8:
61:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9A:0A:7B:91:A9:E5:67:D8:C2:8B:13:A0:DA:0A:50:2F:C4:A3:95
X509v3 Authority Key Identifier:
keyid:D7:52:51:A3:9F:43:0E:CD:68:1D:BF:FB:21:0F:B0:01:89:24:C2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11JRo59DDs1oHb_7IQ-wAYkkwoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:32:06:35:93:ed:d9:1d:4e:31:73:2d:9d:d2:8c:da:19:84:
4f:d6:9d:27:68:10:b1:a4:6e:a0:4d:39:06:8e:66:0f:5c:fe:
19:e3:e1:27:5b:de:3a:ec:d7:0a:63:b7:57:e9:7e:be:13:af:
61:78:c6:47:af:35:34:0e:2b:12:71:7c:96:66:96:8a:f0:f1:
5e:e1:74:23:46:4a:d0:66:b8:0f:81:d9:fd:e2:8c:48:a1:5c:
21:47:0c:1e:36:74:0d:6a:74:49:2e:91:97:45:c9:64:36:cd:
34:71:06:74:a6:98:77:59:99:b8:3f:72:10:20:4b:99:d4:1c:
82:a2:e3:71:3b:94:d6:5a:7a:5c:83:b6:30:3a:59:2c:85:34:
28:ce:5b:0a:0c:f0:d8:10:02:63:5a:ef:0c:22:7f:bf:97:73:
d8:59:9e:a7:39:17:a8:15:ba:8c:96:ab:86:53:33:8b:73:2b:
82:a7:5b:4c:1a:e2:ea:7b:8b:26:91:ca:49:12:18:04:5d:ac:
09:f1:18:b3:09:84:04:ab:32:e1:97:3f:b9:eb:d1:04:fc:97:
3a:19:5a:94:a6:6e:7f:8e:16:0b:03:0f:c3:4b:ea:9b:c5:77:
91:9b:00:6c:25:b8:23:39:75:46:e3:ae:38:65:5d:a5:31:f9:
63:08:c6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:46:30 2026 by rpki-client