Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.mft
File: 11JRo59DDs1oHb_7IQ-wAYkkwoI.mft (raw, json)
Hash identifier: fY3VaJFlBqLO/5SJNFMax9s+lR1eliZOGB/jMIcwxYk=
Subject key identifier: DD:5D:EF:BD:1E:89:99:57:8E:4E:85:1E:7B:3C:5C:61:07:E9:16:AA
Authority key identifier: D7:52:51:A3:9F:43:0E:CD:68:1D:BF:FB:21:0F:B0:01:89:24:C2:82
Certificate issuer: /CN=d75251a39f430ecd681dbffb210fb0018924c282
Certificate serial: 019F8FB4D8D377927B74DE2669747E64C5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11JRo59DDs1oHb_7IQ-wAYkkwoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.mft
Manifest number: 0F
Signing time: Thu 23 Jul 2026 16:00:21 +0000
Manifest this update: Thu 23 Jul 2026 16:00:21 +0000
Manifest next update: Fri 24 Jul 2026 16:00:21 +0000
Files and hashes: 1: 11JRo59DDs1oHb_7IQ-wAYkkwoI.crl (hash: 7S+TN7oO7+F84XCSHg31fFvHVO13XEh0/O/R/TEROtQ=)
2: 5GHGItuWgu2NHBkUyuT1w9sHbLk.roa (hash: UV/ClPkiXHS5oK6NPF6bZeR3cjtsNMceTFI7CQjYMO0=)
3: 8VIP4BNffyhbpmUvr_6dJF_eCJw.asa (hash: 2dMpVVo5jMEK2rWRU+TblyKjIajzwBR1JtK+zbon9OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/11JRo59DDs1oHb_7IQ-wAYkkwoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:d8:d3:77:92:7b:74:de:26:69:74:7e:64:c5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d75251a39f430ecd681dbffb210fb0018924c282
Validity
Not Before: Jul 23 16:00:21 2026 GMT
Not After : Jul 24 16:00:21 2026 GMT
Subject: CN=dd5defbd1e8999578e4e851e7b3c5c6107e916aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:82:7b:55:93:62:5a:ee:f1:74:34:02:dd:8f:
24:39:ab:66:af:5d:5b:cc:40:77:47:bd:38:dc:64:
8a:be:54:ae:6c:ac:c5:da:cf:37:3e:22:bd:ad:3d:
5b:e2:8c:82:20:20:60:ea:63:8f:0f:58:97:72:ae:
9f:5c:06:47:d7:30:cb:c9:b0:85:ac:22:31:fc:5b:
18:01:db:31:d4:d0:08:fe:56:62:8d:a8:01:9f:fa:
5e:ea:67:f6:3a:62:0d:38:01:c9:69:b9:70:95:ac:
ef:36:20:08:18:96:0b:f4:69:7d:91:e8:f9:c1:4b:
00:9b:53:d2:7a:bd:c9:48:a4:61:cb:8b:c5:89:93:
60:3f:5f:88:81:ec:8d:7c:19:0b:71:f2:91:09:d8:
91:3b:20:fa:07:1a:20:7d:83:93:c5:97:e1:e6:ab:
4e:22:60:c1:01:ec:b9:ea:29:16:45:64:ab:f1:fc:
b4:3f:9f:32:90:60:fe:aa:05:d7:c2:71:95:8b:b6:
f3:23:9c:a2:e5:52:45:3f:5c:9a:ec:d5:b1:39:54:
98:21:84:d7:42:9c:ca:49:df:bb:5a:dc:0d:e2:9c:
18:1d:6d:39:c3:e4:24:5b:80:cd:b4:91:9a:dc:93:
37:12:14:1a:bb:34:43:c3:63:a7:56:02:42:2d:6b:
1e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5D:EF:BD:1E:89:99:57:8E:4E:85:1E:7B:3C:5C:61:07:E9:16:AA
X509v3 Authority Key Identifier:
keyid:D7:52:51:A3:9F:43:0E:CD:68:1D:BF:FB:21:0F:B0:01:89:24:C2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11JRo59DDs1oHb_7IQ-wAYkkwoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:06:d4:e6:ce:fc:dc:27:88:39:19:26:65:99:f9:9e:72:54:
2b:a4:85:db:42:16:ad:9a:eb:af:47:dc:54:b8:92:61:dc:bc:
f2:46:d6:e0:15:8b:52:fa:6f:17:9d:e3:28:e2:24:71:cb:fc:
12:60:ee:26:6e:b5:7a:c9:a0:cc:3b:93:b8:3f:d9:03:e4:ab:
27:f3:02:19:6f:bb:c3:74:1b:ed:0b:7a:66:a4:29:d9:c4:1f:
64:24:ed:fc:7f:07:86:26:a1:9c:ce:40:60:c8:9a:00:f8:7a:
72:89:2e:8f:fe:64:4a:d9:e2:9d:1c:c7:9f:8d:34:67:6b:7a:
8c:b9:0e:5a:a1:75:7a:a2:00:0d:9c:7a:1b:c9:3a:2c:50:1b:
2d:ac:68:e1:ed:68:c0:b1:f4:16:90:78:13:54:80:af:6f:d2:
2f:22:95:db:33:ad:e5:00:4e:e2:2b:f0:04:d8:7c:af:77:dc:
b3:4e:c6:d0:8a:d1:04:e2:87:77:d5:1c:20:d9:9b:7d:78:14:
1e:4d:86:29:30:9b:f4:8d:41:b7:96:30:e4:0e:15:d0:71:cd:
ee:da:47:1a:c6:11:f8:bf:67:d7:a7:2d:7f:83:35:fb:5e:1d:
ef:d8:53:04:c1:e9:ff:90:0d:ed:ad:3a:fa:e4:d2:f9:3c:fb:
bd:26:65:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:05:43 2026 by rpki-client