Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft
File: 11ugWU0GWrciRlz6MF7_jUFhf6g.mft (raw, json)
Hash identifier: aTPj4Vl3mrxaB7fendN29OPYErJ1axmoCntGxPsyZPM=
Subject key identifier: 20:FF:1A:B6:72:0A:49:66:A2:31:9C:B5:AE:93:2B:21:73:3D:E2:40
Authority key identifier: D7:5B:A0:59:4D:06:5A:B7:22:46:5C:FA:30:5E:FF:8D:41:61:7F:A8
Certificate issuer: /CN=d75ba0594d065ab722465cfa305eff8d41617fa8
Certificate serial: 019D284E3C7C722AFF87946FEF7632DC07D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft
Manifest number: 0F3D
Signing time: Thu 26 Mar 2026 04:01:48 +0000
Manifest this update: Thu 26 Mar 2026 04:01:48 +0000
Manifest next update: Fri 27 Mar 2026 04:01:48 +0000
Files and hashes: 1: 11ugWU0GWrciRlz6MF7_jUFhf6g.crl (hash: 0giUQHq1SDcte1gzq5otmDU9fAbGpZcstjVxikvIMys=)
2: Fjq3mkPKrbk3RsZ3yEGKBS9j2hk.roa (hash: /klg+2watJuJzDdXKU5bRhHxFfZdYYFwf9mvG57YuS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:3c:7c:72:2a:ff:87:94:6f:ef:76:32:dc:07:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d75ba0594d065ab722465cfa305eff8d41617fa8
Validity
Not Before: Mar 26 04:01:48 2026 GMT
Not After : Mar 27 04:01:48 2026 GMT
Subject: CN=20ff1ab6720a4966a2319cb5ae932b21733de240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ff:8c:df:f4:04:ca:d3:e6:22:4d:a5:44:49:
05:e3:9c:45:5e:72:be:9c:b1:6a:14:4f:15:6d:eb:
ae:8f:71:df:ae:e0:14:7d:d2:5b:7d:f6:d8:c9:77:
86:81:cd:9e:0e:ba:4f:da:21:65:a2:39:a5:19:78:
7d:4b:2b:71:b8:d6:b2:8f:e0:00:ba:8d:3d:65:eb:
7a:a5:8e:ed:1a:3f:82:73:f9:23:0d:aa:50:f8:a6:
2d:be:f7:80:a0:61:a9:79:97:58:d5:38:dd:2f:cb:
b4:70:05:55:0a:30:97:21:27:40:d1:8e:e6:90:69:
bb:f4:10:42:3e:ba:07:2c:76:d8:ae:10:79:27:a8:
a2:26:72:c5:65:93:5f:70:1a:2a:1d:6c:79:11:9c:
63:f5:e7:af:c0:7f:f0:77:97:92:ff:42:31:4f:ff:
c5:e4:cf:09:ef:99:8e:40:db:34:a5:ed:c1:0b:11:
09:46:66:33:a9:d5:e4:67:d9:f4:34:15:74:86:1b:
b3:af:e9:e7:3e:ab:fb:17:ed:0e:f3:25:64:26:25:
ac:05:59:4d:fb:b9:7c:b2:13:eb:ec:7d:58:22:78:
4d:16:a2:02:a6:d5:22:6c:41:5c:0c:3c:f4:ae:1b:
e4:cd:40:97:7f:93:b9:78:ab:94:49:eb:06:03:16:
ca:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FF:1A:B6:72:0A:49:66:A2:31:9C:B5:AE:93:2B:21:73:3D:E2:40
X509v3 Authority Key Identifier:
keyid:D7:5B:A0:59:4D:06:5A:B7:22:46:5C:FA:30:5E:FF:8D:41:61:7F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f4:77:a1:e6:44:c6:fe:81:8f:14:11:c0:89:64:6e:37:0a:
ee:d9:36:92:81:b0:81:76:ca:98:bf:50:49:cc:32:c5:62:b4:
50:43:9c:a7:c4:1d:52:47:71:e1:81:c9:4d:1c:ff:0a:48:07:
97:fb:89:50:cf:81:d9:61:1f:a2:c0:12:c7:10:0d:16:cc:ee:
00:11:4a:30:dc:83:59:c0:1d:36:c8:5d:4a:0b:6d:dc:a2:c1:
8d:68:f5:ee:f3:ee:77:d2:e9:be:18:d5:3a:b0:90:6b:9f:13:
42:e8:5d:80:24:9a:2a:62:78:00:04:5b:35:47:ca:c7:58:dc:
eb:fa:4f:b1:8f:55:78:84:b6:f1:af:24:9e:ec:52:ba:65:4e:
f5:ef:7c:e8:d5:af:94:9c:a8:b1:10:08:aa:f5:89:76:d7:9d:
9b:fc:1f:17:d8:08:78:b2:9a:69:8a:35:aa:de:d9:2b:ff:81:
08:07:e8:09:71:c4:10:3c:7e:36:ef:fe:8e:c7:9f:7a:a4:f2:
84:ce:fc:1a:5b:38:89:58:cf:48:5b:63:f2:2e:b5:71:1b:9f:
7d:6f:d1:6e:f9:0c:24:6e:05:1f:eb:77:5a:db:bb:60:2a:43:
5b:ff:92:a8:68:86:ad:6f:6e:e8:f7:91:0a:74:02:7c:78:06:
17:78:2c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:13 2026 by rpki-client