
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/fdc52e-debd-4579-9ec1-4995898acb60/1/11daq8dYqWhvnUPnrA7TWuRHj00.mft
File: 11daq8dYqWhvnUPnrA7TWuRHj00.mft (raw, json)
Hash identifier: zMLXKE3FBvws4f82IO/x30R7x/oNWyVusD4Htd3jCUE=
Subject key identifier: BB:60:5D:A4:FB:CD:32:15:F0:1D:F7:03:95:C2:14:2F:6B:F4:DD:CE
Authority key identifier: D7:57:5A:AB:C7:58:A9:68:6F:9D:43:E7:AC:0E:D3:5A:E4:47:8F:4D
Certificate issuer: /CN=d7575aabc758a9686f9d43e7ac0ed35ae4478f4d
Certificate serial: 019E1BD901869E64EEB31DDC7B6534C30ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11daq8dYqWhvnUPnrA7TWuRHj00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/fdc52e-debd-4579-9ec1-4995898acb60/1/11daq8dYqWhvnUPnrA7TWuRHj00.mft
Manifest number: 4C
Signing time: Tue 12 May 2026 11:01:06 +0000
Manifest this update: Tue 12 May 2026 11:01:06 +0000
Manifest next update: Wed 13 May 2026 11:01:06 +0000
Files and hashes: 1: 11daq8dYqWhvnUPnrA7TWuRHj00.crl (hash: 71BrOyB5OX3NtbP99J3u7h0lI+wVY541QggBc0J2w6Q=)
2: Csx9QDzDsQz_aHEulUGMnETy388.roa (hash: C8BP4jzTuTTi1E6V65zQ+3x8Wh6nKEgy7uqDWh2K8g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/fdc52e-debd-4579-9ec1-4995898acb60/1/11daq8dYqWhvnUPnrA7TWuRHj00.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/fdc52e-debd-4579-9ec1-4995898acb60/1/11daq8dYqWhvnUPnrA7TWuRHj00.mft
rsync://rpki.ripe.net/repository/DEFAULT/11daq8dYqWhvnUPnrA7TWuRHj00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:01:86:9e:64:ee:b3:1d:dc:7b:65:34:c3:0e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7575aabc758a9686f9d43e7ac0ed35ae4478f4d
Validity
Not Before: May 12 11:01:06 2026 GMT
Not After : May 13 11:01:06 2026 GMT
Subject: CN=bb605da4fbcd3215f01df70395c2142f6bf4ddce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7b:2d:37:64:37:a3:04:e9:0b:7f:a4:b5:95:
dc:13:e1:7d:33:28:f5:48:ff:c0:26:69:9f:3f:a5:
8f:7a:07:32:34:c6:d0:5f:d1:35:cb:cb:ba:af:99:
c7:25:d9:75:91:bf:c3:a4:3e:d4:e6:0b:88:81:7a:
2c:bc:04:d9:ad:79:63:16:a9:5d:82:4b:f6:cf:00:
a1:e0:ef:da:fd:23:5c:50:29:19:0b:11:99:58:21:
cb:5c:26:84:a9:93:48:39:7b:5e:bd:37:79:e5:5b:
de:72:db:b2:db:95:72:82:fa:44:4a:e7:0f:93:b2:
91:44:4f:4a:0f:d6:d5:60:eb:3d:5f:b2:73:eb:46:
5e:6f:5d:c0:c6:c6:2c:74:bf:dc:46:d7:eb:65:2c:
23:2c:0e:0a:8c:f5:a6:c2:0c:44:9f:f1:fa:59:36:
3e:77:d8:e6:0c:11:c7:a1:70:80:8b:4b:18:e0:84:
08:cf:e0:8d:51:f4:28:12:64:aa:04:00:ce:9a:17:
ae:da:cb:1c:22:25:05:7d:80:51:c7:af:00:b0:88:
e9:8b:11:c1:22:ce:fd:62:67:fa:df:e9:6b:fb:1a:
3d:b4:07:8e:df:6d:1a:01:d9:d6:49:7e:70:fa:f4:
57:08:95:c2:a4:2b:7f:39:5c:5e:db:27:12:3d:dd:
9e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:60:5D:A4:FB:CD:32:15:F0:1D:F7:03:95:C2:14:2F:6B:F4:DD:CE
X509v3 Authority Key Identifier:
keyid:D7:57:5A:AB:C7:58:A9:68:6F:9D:43:E7:AC:0E:D3:5A:E4:47:8F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11daq8dYqWhvnUPnrA7TWuRHj00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fdc52e-debd-4579-9ec1-4995898acb60/1/11daq8dYqWhvnUPnrA7TWuRHj00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fdc52e-debd-4579-9ec1-4995898acb60/1/11daq8dYqWhvnUPnrA7TWuRHj00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:90:3d:bc:3d:cd:9e:4c:44:c1:a2:91:06:16:9a:40:e1:34:
e0:61:d9:5f:ea:fb:51:d1:ff:69:38:a4:22:ae:64:cd:1d:9f:
be:94:e5:e6:97:db:bf:21:fc:25:db:bc:64:b4:2f:2d:a7:c9:
1d:cf:0b:42:b5:14:22:35:1e:4c:1e:a8:ce:24:55:7e:85:2d:
cf:7b:74:dd:d0:cf:5e:a4:8b:67:da:ef:50:94:1e:5e:ed:14:
52:c6:c4:99:f4:80:93:ef:8e:af:78:28:92:07:85:bf:81:2e:
58:c8:6e:07:07:dc:cf:24:d2:82:90:b2:5f:3c:2f:0a:f0:7a:
7b:8a:47:74:1e:b8:09:27:39:84:ac:dd:dc:33:8c:16:ca:90:
29:e5:d5:74:70:6a:25:f5:65:54:78:29:23:21:2c:69:56:c0:
06:be:f6:9b:1d:b5:2f:13:eb:04:56:6c:df:98:7f:82:da:1d:
f7:19:78:ec:18:a8:eb:2b:39:09:f6:19:82:f5:be:73:1c:aa:
9d:1a:78:07:77:7c:dc:90:c0:f8:52:6b:d8:f7:f4:97:d3:3c:
28:20:66:73:64:63:73:57:d3:e7:5f:13:ff:f7:57:f7:55:b5:
d8:6a:f4:be:37:a2:1b:77:cb:34:17:1d:23:63:3c:ee:3b:76:
dc:70:c1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:48:04 2026 by rpki-client