Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.mft
File: 11JRo59DDs1oHb_7IQ-wAYkkwoI.mft (raw, json)
Hash identifier: azQ9/Wp5c5nZtPCG6vFAFlfcez7i+4afDe4wF/BcS3g=
Subject key identifier: D4:AF:4E:A5:86:AE:F7:99:AB:C5:E8:A5:F3:9F:D0:62:51:D4:90:FE
Authority key identifier: D7:52:51:A3:9F:43:0E:CD:68:1D:BF:FB:21:0F:B0:01:89:24:C2:82
Certificate issuer: /CN=d75251a39f430ecd681dbffb210fb0018924c282
Certificate serial: 01A0CC6BD39CF91C21B4CD5E159451B586B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11JRo59DDs1oHb_7IQ-wAYkkwoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.mft
Manifest number: B3
Signing time: Wed 23 Sep 2026 04:00:13 +0000
Manifest this update: Wed 23 Sep 2026 04:00:13 +0000
Manifest next update: Thu 24 Sep 2026 04:00:13 +0000
Files and hashes: 1: 11JRo59DDs1oHb_7IQ-wAYkkwoI.crl (hash: 3bIU23k0KG1u6dm4sl0nU6SKftiMIYIdHrJpYesKagI=)
2: 5GHGItuWgu2NHBkUyuT1w9sHbLk.roa (hash: UV/ClPkiXHS5oK6NPF6bZeR3cjtsNMceTFI7CQjYMO0=)
3: 8VIP4BNffyhbpmUvr_6dJF_eCJw.asa (hash: 2dMpVVo5jMEK2rWRU+TblyKjIajzwBR1JtK+zbon9OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/11JRo59DDs1oHb_7IQ-wAYkkwoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6b:d3:9c:f9:1c:21:b4:cd:5e:15:94:51:b5:86:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d75251a39f430ecd681dbffb210fb0018924c282
Validity
Not Before: Sep 23 04:00:13 2026 GMT
Not After : Sep 24 04:00:13 2026 GMT
Subject: CN=d4af4ea586aef799abc5e8a5f39fd06251d490fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:55:87:0d:6b:4c:a8:2c:0e:1b:cf:56:18:
d5:08:39:7c:82:1b:74:ea:44:ba:58:30:c9:62:08:
15:48:53:0a:a2:13:e5:5e:b7:1c:09:58:69:13:b7:
64:be:be:65:c9:78:e0:c2:a5:51:92:df:82:c4:65:
95:e7:4d:05:a2:ba:2b:79:79:b6:fd:60:7e:24:46:
87:b7:06:d9:4a:5e:40:80:db:36:b4:66:b3:2b:fb:
17:7d:97:4e:5d:7d:4e:d1:d9:74:39:fc:96:46:35:
13:d7:84:b9:ac:10:19:c7:5a:d1:66:13:72:95:b9:
cd:50:77:88:4f:1f:db:19:86:1a:6e:46:e0:e5:8e:
5d:8e:18:e7:39:19:bd:76:6f:b0:24:b4:52:ea:5d:
2a:b7:64:73:5a:29:dd:14:00:de:f7:42:e7:40:89:
c9:b8:1b:a1:f8:93:a2:8a:ad:a4:63:4a:6d:98:77:
17:1c:8a:0a:8f:92:7c:18:e8:20:2e:a1:bf:9f:b3:
ad:1c:1a:81:25:fd:a1:80:fa:3a:a6:1f:06:17:0e:
d2:fc:53:1b:e1:02:af:77:dd:73:50:b1:24:9b:7d:
cf:9b:78:a7:9f:d2:b6:a8:c1:44:3c:27:5a:5d:f0:
99:67:31:b1:87:2a:a4:18:91:f9:d7:70:8f:0f:a2:
fa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AF:4E:A5:86:AE:F7:99:AB:C5:E8:A5:F3:9F:D0:62:51:D4:90:FE
X509v3 Authority Key Identifier:
keyid:D7:52:51:A3:9F:43:0E:CD:68:1D:BF:FB:21:0F:B0:01:89:24:C2:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11JRo59DDs1oHb_7IQ-wAYkkwoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/7632cf-8e12-43e7-b8c9-20f674a73c7a/1/11JRo59DDs1oHb_7IQ-wAYkkwoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c3:42:a0:0d:c3:91:08:60:13:4e:8a:de:7b:f2:ed:22:f6:
35:f7:78:ef:68:36:17:4f:d0:fa:2a:6a:ef:fe:35:ec:29:74:
4d:d1:80:60:cf:f4:e4:36:11:ed:29:2c:b2:df:f9:a7:85:c5:
1d:5e:5d:0b:d0:56:58:b5:de:1c:6f:94:7e:8e:dc:a3:86:13:
26:95:87:f9:85:05:3e:58:f4:17:91:3b:9e:03:e6:a2:76:8a:
a6:66:71:b5:89:cd:f2:e8:a5:af:b7:11:01:4d:a1:39:8a:9d:
59:ad:98:55:81:cd:e9:b8:3c:5a:41:b4:df:09:91:6b:02:f0:
af:18:68:20:0e:5b:c5:3d:38:2c:4f:0f:19:12:d5:ff:b1:1a:
f0:0d:05:39:0e:df:e5:47:91:cd:f2:d7:92:98:ed:04:ac:06:
b5:54:a7:a7:6d:78:aa:21:a7:1c:34:f8:f0:79:89:ce:49:1c:
9a:5a:a5:90:26:bc:3d:09:f1:63:59:46:38:3f:ee:d0:20:4f:
a9:77:fa:d5:90:59:c8:df:0c:e2:57:19:5b:14:89:15:9d:53:
24:88:fe:46:0a:6b:bb:28:dc:8b:e9:c6:d1:95:c8:82:1a:cf:
44:06:0a:1f:0b:8a:a0:83:5a:72:0a:58:58:20:9b:f5:f3:7c:
7d:0b:db:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:59:38 2026 by rpki-client