Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
File: adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft (raw, json)
Hash identifier: Fg8MAegZ6mLNrJeKfbIl78OD9BqfF6Cv8gPP7nVEZNI=
Subject key identifier: FB:06:22:48:11:86:E3:72:D5:81:92:8B:33:91:46:F8:AA:0B:49:B3
Authority key identifier: 69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
Certificate issuer: /CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Certificate serial: 019D2A3C3F5777BE7EC89C309CE49A3A864A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
Manifest number: 11C7
Signing time: Thu 26 Mar 2026 13:01:24 +0000
Manifest this update: Thu 26 Mar 2026 13:01:24 +0000
Manifest next update: Fri 27 Mar 2026 13:01:24 +0000
Files and hashes: 1: _D3Sx9Q_gbo96AfGIDxHaE95AuY.roa (hash: p9qntnK/kcs265CcfjBLNs1kWk9qAHv/FsQZ2r3slpo=)
2: adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl (hash: q37PHJMe7JSXheEmtFIt4Fry75+Vaq+c50H1dfWMZD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:3f:57:77:be:7e:c8:9c:30:9c:e4:9a:3a:86:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Validity
Not Before: Mar 26 13:01:24 2026 GMT
Not After : Mar 27 13:01:24 2026 GMT
Subject: CN=fb0622481186e372d581928b339146f8aa0b49b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c4:4c:2c:8a:68:64:9b:b9:89:09:6c:f8:6e:
f2:b7:4d:76:5d:7b:57:b8:9d:57:dc:7f:46:49:33:
38:ba:f8:8c:f5:74:a5:17:c6:44:3b:48:64:56:b1:
fe:64:77:d3:7e:07:55:5c:a1:72:9b:59:7c:e1:b9:
89:9b:4a:7a:a2:d8:3b:fa:f8:bd:85:c4:c4:ed:4f:
f9:5e:30:ed:ae:d1:82:11:eb:7e:05:63:71:f7:68:
8a:b0:a7:8e:80:f9:d0:b9:92:8a:4b:c5:1e:5f:4e:
e3:58:4e:89:43:18:64:e2:8d:af:52:e8:4d:ab:e0:
b2:38:ea:35:5e:d4:e2:0c:34:bb:b4:31:e8:7b:b7:
3f:c7:a4:eb:70:b1:13:dc:ea:7d:c6:97:dd:9f:d5:
e7:52:be:67:c4:14:09:ea:be:a0:fc:39:64:fc:c8:
2e:10:91:02:f4:a7:88:60:01:11:dc:f8:52:e5:a9:
1a:19:04:3d:d6:b8:cd:c2:3c:67:78:25:00:3b:fa:
c1:65:ba:63:4f:dd:ea:94:69:73:05:bb:8b:c6:3a:
03:26:7b:d0:bd:4f:7e:dc:30:c1:7d:06:44:bd:b5:
e0:bd:a8:f7:f8:16:16:d5:b8:0d:49:1e:f5:07:46:
c4:9f:2b:9b:61:7a:55:73:39:2d:9e:c0:38:d6:b1:
0f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:06:22:48:11:86:E3:72:D5:81:92:8B:33:91:46:F8:AA:0B:49:B3
X509v3 Authority Key Identifier:
keyid:69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:28:df:ce:e4:7f:62:58:5e:ef:86:23:ef:e7:83:d5:33:95:
37:35:17:ed:7a:34:f9:65:2f:45:d5:14:18:17:4d:f6:fa:f4:
80:7f:50:ca:4b:54:32:9a:d8:6e:ef:15:a5:46:3a:39:cd:bc:
3e:99:ed:8f:15:c3:59:e5:f0:ed:ee:c1:ea:89:3b:75:a7:39:
88:c7:d3:36:69:b8:a4:c5:26:20:22:48:5a:b8:2a:02:3a:07:
85:cc:61:0f:68:97:ee:cd:84:aa:e2:14:16:d1:05:aa:1d:99:
25:51:ba:b7:a1:b6:63:1b:b8:a7:95:28:57:5e:6e:bb:2f:e7:
53:c6:cf:89:32:bb:cb:7a:4b:44:57:1c:c6:01:86:2d:19:fc:
27:81:d8:9b:21:91:20:2f:0f:20:ec:62:07:c8:ad:c5:13:d8:
ef:cf:05:86:82:65:18:48:a1:4d:ec:a3:7f:3f:ad:ba:0a:0c:
9a:eb:fc:99:93:e4:2a:f3:87:17:10:b8:79:32:6b:ef:fc:2e:
56:d5:ed:b5:4b:ec:9b:10:c1:0f:5d:f2:40:c7:23:31:ed:85:
77:94:ec:04:cb:d0:e2:c1:64:67:33:16:52:b6:4a:2a:2d:d6:
39:9f:b5:54:2f:9e:97:19:d0:4c:59:ed:50:7f:ed:82:af:7d:
64:09:ad:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:13:38 2026 by rpki-client