Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
File: adEXVt0Db1nuEef4Gkh6b90jE20.mft (raw, json)
Hash identifier: k6t/0416zubeydTa2ZbuZOpR6ZIyXwn3B+BqTfEBBWU=
Subject key identifier: D5:C8:3C:0D:4D:A9:57:DC:05:EB:DF:95:8F:5E:60:C8:36:B7:E5:51
Authority key identifier: 69:D1:17:56:DD:03:6F:59:EE:11:E7:F8:1A:48:7A:6F:DD:23:13:6D
Certificate issuer: /CN=69d11756dd036f59ee11e7f81a487a6fdd23136d
Certificate serial: 019D992B7E74FBC5C813AAE0921383967C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
Manifest number: 0AD4
Signing time: Fri 17 Apr 2026 02:00:57 +0000
Manifest this update: Fri 17 Apr 2026 02:00:57 +0000
Manifest next update: Sat 18 Apr 2026 02:00:57 +0000
Files and hashes: 1: adEXVt0Db1nuEef4Gkh6b90jE20.crl (hash: NkmLPkCZGQg4Ul6rTocD9zpxLI2arM2qT8jvHywoB54=)
2: t_-NpvrkXWMv7C05VfgVliOFopk.roa (hash: NqyEdBD2lmR97sQbX1ZX27Jyq9s7SuLfnBHNWVP5NB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:7e:74:fb:c5:c8:13:aa:e0:92:13:83:96:7c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d11756dd036f59ee11e7f81a487a6fdd23136d
Validity
Not Before: Apr 17 02:00:57 2026 GMT
Not After : Apr 18 02:00:57 2026 GMT
Subject: CN=d5c83c0d4da957dc05ebdf958f5e60c836b7e551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:be:9b:92:c3:93:76:c1:08:70:42:17:45:
85:f1:ba:b3:97:70:96:c9:a0:d5:71:d0:dc:bc:9a:
83:ba:c2:e9:03:13:16:d8:15:38:02:60:8b:fe:48:
f2:e4:17:55:c5:8e:4d:8c:38:34:4e:f3:eb:c1:42:
cd:4d:45:e8:a6:25:97:48:28:2f:85:e8:e5:47:c9:
b3:dd:bc:1f:85:f9:2f:eb:f9:3e:9c:f4:f9:e3:6b:
fc:5a:b9:b2:f9:f8:33:69:ac:01:05:ab:6a:f5:c2:
5b:71:65:9d:82:98:8a:8f:81:09:b1:03:38:68:a7:
8c:52:3c:90:d6:7b:69:5c:a1:f4:52:73:23:de:c5:
89:ab:5b:16:d7:43:80:65:15:f2:72:bb:a7:5b:75:
65:24:d2:95:cb:50:55:e0:0c:e7:d3:90:40:6d:13:
8d:32:95:4a:e3:07:80:36:45:2c:49:21:58:fd:01:
64:56:99:33:94:04:75:63:79:dd:24:6c:86:7c:df:
9f:a8:fe:cd:16:f4:d6:7c:83:49:96:ae:c9:aa:e9:
e9:6b:0f:96:8f:7e:9b:43:16:39:cf:6a:91:ce:1e:
d1:28:c3:31:76:7d:75:b4:e2:66:49:c1:c6:67:c8:
c5:79:9d:b2:d8:46:2e:e6:55:50:c3:dc:5c:fd:37:
e5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C8:3C:0D:4D:A9:57:DC:05:EB:DF:95:8F:5E:60:C8:36:B7:E5:51
X509v3 Authority Key Identifier:
keyid:69:D1:17:56:DD:03:6F:59:EE:11:E7:F8:1A:48:7A:6F:DD:23:13:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:cb:c1:38:99:d5:42:a4:7f:b3:a5:e7:4f:e7:e7:40:73:6d:
87:06:52:94:1c:eb:f6:76:37:ce:aa:24:c7:6d:f7:0f:3d:c2:
e1:78:73:0a:d8:4e:a2:c7:70:df:f6:20:e8:80:cd:c9:d2:e9:
56:78:9e:46:af:4b:52:15:75:84:a4:34:6f:a8:28:e0:6f:2b:
67:b1:4e:ed:3e:84:b7:6c:b4:ff:b0:33:3e:d0:f1:0a:4b:0f:
59:77:97:bf:fd:1a:01:60:1a:79:51:b3:9e:46:b6:a1:34:ba:
81:37:f6:aa:9f:db:db:cb:3b:c7:6b:f0:02:3f:cf:fa:79:76:
b8:3f:cb:77:eb:a1:62:be:84:ea:dd:24:7d:ee:9c:8f:c2:4f:
8c:4d:94:d2:d7:14:f7:be:65:6c:8a:45:99:60:23:ac:51:51:
53:ce:4c:91:48:9a:0c:1f:c0:da:90:da:a8:da:6c:4f:31:7d:
34:a5:c7:8c:b3:05:19:9d:d2:ae:62:e9:7c:36:c8:cf:d9:cd:
5a:c0:f5:9f:44:f4:34:ea:5a:54:8f:62:a3:0a:1e:6f:7a:aa:
6a:22:47:0d:c0:41:60:0c:ea:9d:00:e8:b5:d8:3a:7c:7f:e6:
d4:6b:ec:ba:17:1f:d1:b2:be:58:22:9e:cd:01:fc:7f:22:e8:
31:8b:a3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:24 2026 by rpki-client