Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
File: adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft (raw, json)
Hash identifier: lVzq0K0t/dfGqtcboogMHt2N8a45N4iPaVkkQrl6tBE=
Subject key identifier: 81:09:BD:D9:18:3F:68:31:6B:91:53:28:50:E8:C7:F3:69:20:B3:1D
Authority key identifier: 69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
Certificate issuer: /CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Certificate serial: 019CACB4875C0FC80358D27FF9528D23E787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
Manifest number: 1186
Signing time: Mon 02 Mar 2026 04:00:38 +0000
Manifest this update: Mon 02 Mar 2026 04:00:38 +0000
Manifest next update: Tue 03 Mar 2026 04:00:38 +0000
Files and hashes: 1: _D3Sx9Q_gbo96AfGIDxHaE95AuY.roa (hash: p9qntnK/kcs265CcfjBLNs1kWk9qAHv/FsQZ2r3slpo=)
2: adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl (hash: aHr3EmJgnWsJeEcecuwzbWIS59NQqvh+SYChm9M6028=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:87:5c:0f:c8:03:58:d2:7f:f9:52:8d:23:e7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Validity
Not Before: Mar 2 04:00:38 2026 GMT
Not After : Mar 3 04:00:38 2026 GMT
Subject: CN=8109bdd9183f68316b91532850e8c7f36920b31d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:7c:33:88:d2:d7:33:dd:70:b1:e3:cd:99:
44:9d:ec:1f:da:2c:e4:4e:0c:29:8d:d5:c4:bc:fd:
fc:1f:3a:04:54:aa:d7:7e:fe:63:f3:3d:30:31:37:
ab:4f:36:66:89:4b:80:51:49:d1:3e:a9:8d:fd:f0:
06:4f:05:34:b4:8d:d6:3e:af:ab:93:c3:4b:d5:05:
d4:ee:c3:e1:28:f2:96:9c:bd:81:aa:0f:a5:99:2b:
b3:b3:f2:62:39:67:0a:90:66:94:63:6b:70:6e:7d:
ba:b3:b2:25:22:24:bf:56:13:37:70:a4:52:40:2b:
a1:cf:f9:e2:fd:f2:cc:61:2d:20:d7:63:05:8e:7b:
7a:3e:e7:d6:0c:91:2a:c7:c3:69:7f:92:92:06:96:
f7:8d:c4:e7:75:9c:d8:f8:10:86:2c:d6:ea:54:8e:
20:b6:64:a7:32:45:a0:13:7a:6f:87:14:ea:41:b7:
36:08:66:bd:bd:3d:5f:a6:f0:da:71:57:5f:22:80:
5c:31:44:de:b8:41:f0:16:fd:98:48:8d:91:40:cc:
74:35:c4:03:d0:d9:f5:e8:f5:31:64:c3:6e:a3:cd:
3e:41:38:ba:65:75:73:06:d5:99:36:30:7e:6b:53:
6b:9b:d9:e8:dc:1d:31:90:14:b9:c4:50:bc:e3:1d:
3a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:09:BD:D9:18:3F:68:31:6B:91:53:28:50:E8:C7:F3:69:20:B3:1D
X509v3 Authority Key Identifier:
keyid:69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2b:3e:d1:ee:7a:77:3b:25:26:b1:09:87:e6:18:66:08:2a:
4c:28:5a:e3:15:7d:0f:4b:e3:dc:d3:c1:0d:07:e7:7b:ec:c3:
0f:dd:c1:cb:7d:86:d5:1a:7d:49:f6:c4:4b:63:09:16:b8:ae:
47:f3:d8:f7:ef:78:9b:7e:5c:d7:2d:87:2f:81:0b:44:42:d1:
dd:21:0d:81:5f:64:2d:f0:0e:b8:a1:7b:5e:cb:98:73:fd:2d:
7d:dc:35:08:08:22:69:0f:f2:48:69:e0:50:e5:f9:74:8e:90:
c0:ef:3a:fe:0c:cd:9c:2f:fb:1b:d4:89:00:f0:04:8c:50:05:
4e:52:70:00:82:b9:1c:07:ed:b1:0e:ff:28:1e:e8:6e:1f:d0:
c6:44:db:26:e8:c1:4b:8d:e3:a9:c4:83:35:e7:81:6e:62:ef:
ae:9a:ae:de:78:fb:0e:f5:df:72:ed:20:fb:e1:e9:79:77:09:
cb:ab:3c:ca:b0:7c:de:5b:dc:ca:26:3e:2b:9a:dc:1e:67:30:
c6:fb:9b:e4:16:02:aa:ec:b9:72:5f:51:f8:c5:9d:e7:59:9a:
fa:82:28:b1:5b:97:aa:ba:67:8b:4d:b3:71:26:94:06:8a:ae:
40:39:f8:c4:71:a0:00:29:c0:7a:04:08:c8:85:9d:af:a6:f9:
09:98:9e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:08 2026 by rpki-client