Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
File: 11d1Kggad4_B0s7hsNaqRdUaLEk.mft (raw, json)
Hash identifier: D/WUWY3A8BmKKO9hIN/zTnNHbY6GX6vJFKS278idEGk=
Subject key identifier: 70:97:61:36:FF:0F:EE:E7:37:1B:9E:16:F4:12:59:BB:A8:B0:CF:D0
Authority key identifier: D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
Certificate issuer: /CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Certificate serial: 019E1D59DFC3896A598342FF4A6917E071CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
Manifest number: 1903
Signing time: Tue 12 May 2026 18:01:29 +0000
Manifest this update: Tue 12 May 2026 18:01:29 +0000
Manifest next update: Wed 13 May 2026 18:01:29 +0000
Files and hashes: 1: 11d1Kggad4_B0s7hsNaqRdUaLEk.crl (hash: 0M52o1VfUcGAGWMNFZakwIObT3UQVT+Mr701ew51eJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:df:c3:89:6a:59:83:42:ff:4a:69:17:e0:71:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Validity
Not Before: May 12 18:01:29 2026 GMT
Not After : May 13 18:01:29 2026 GMT
Subject: CN=70976136ff0feee7371b9e16f41259bba8b0cfd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dc:c7:7e:fe:39:25:be:52:07:6d:c9:a7:07:
85:3c:76:e3:47:03:7f:a3:81:c6:22:95:4f:7f:ea:
a0:21:da:ed:6d:90:2f:c5:bd:ad:16:59:2a:05:8b:
17:29:0f:09:28:68:01:91:97:36:30:6c:1c:b8:a2:
1e:ae:db:bc:dd:ed:74:ba:eb:79:a2:51:c3:4e:ff:
90:a7:79:d1:c7:7f:b6:e5:77:c8:83:bf:b8:d2:4f:
c1:c5:13:2a:8b:b7:a4:a0:ff:7e:63:41:65:c8:bf:
6b:f3:b3:64:dd:b0:ab:3e:60:06:c5:50:61:ac:53:
a7:e1:59:c1:7a:e3:56:5d:3a:06:6a:e9:3e:eb:27:
71:99:88:9a:63:5c:e2:c6:15:d7:32:c1:79:cd:22:
c4:c4:33:67:28:e9:d2:9a:d4:bf:f9:40:37:5a:7d:
24:5c:66:53:3a:c4:b8:8a:c1:49:70:83:9b:8f:e0:
44:4f:b2:c3:43:7e:45:b8:75:d9:fc:4e:59:11:95:
65:a4:40:ad:99:67:e4:84:0d:c1:70:d1:06:56:a5:
ef:ae:98:dd:3f:58:6f:d6:b6:c9:5d:02:79:7b:92:
7f:ec:92:94:47:ce:c4:5b:f4:4e:83:52:7c:1a:ce:
20:5d:38:ef:78:ce:78:3b:71:cc:3e:b1:c9:cf:5c:
d3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:97:61:36:FF:0F:EE:E7:37:1B:9E:16:F4:12:59:BB:A8:B0:CF:D0
X509v3 Authority Key Identifier:
keyid:D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2c:5d:79:3b:7b:98:a9:cb:16:b7:de:10:97:1b:f6:d0:72:
75:1e:a8:bd:25:a1:f6:9c:08:a1:49:94:1e:d0:b4:19:bd:04:
9e:a0:25:0c:be:f9:17:c6:69:f3:c5:56:59:0a:dd:bf:cd:45:
bd:56:7b:a9:e3:ac:61:97:0f:6a:4b:25:38:b5:f7:a3:fc:db:
ed:79:45:d8:69:67:48:36:07:d0:df:f6:ac:ff:a0:de:9d:6e:
31:1e:ff:73:7d:ef:a7:22:3f:09:6e:02:42:98:17:7e:7c:00:
d4:42:9f:50:51:32:4f:ae:b3:bb:83:af:42:65:d6:2e:0a:5e:
98:97:4d:18:79:d0:f7:b8:bc:7c:d7:f3:b0:6c:dd:8a:66:4c:
4b:fe:ec:a1:93:0b:ee:7f:02:16:d3:33:41:b8:09:5a:5f:75:
61:27:50:f2:ee:cd:72:0e:27:bc:c8:bd:d7:c2:bf:8f:81:57:
de:fc:24:16:11:38:5b:a3:33:70:6b:b4:49:34:30:52:54:b9:
54:14:eb:2b:23:13:f2:39:c3:93:57:4b:0b:82:16:65:bd:9f:
26:d8:28:8c:0c:5e:80:51:90:b9:57:6f:2f:8d:44:1e:b6:df:
75:aa:ee:14:60:02:71:0a:bc:32:ab:f1:3f:d9:2d:76:d2:ba:
6b:72:bc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:58:25 2026 by rpki-client