Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
File: aDei-kt4dzpmIA_qTFhQepLzEgM.mft (raw, json)
Hash identifier: Q9qjIChrfRgH8z8eUQyRfoRyFcb0phyb983NhERw3q0=
Subject key identifier: 93:39:5D:F4:7E:78:D9:CD:8D:94:5F:9D:04:F3:DC:CC:0F:CA:98:C7
Authority key identifier: 68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
Certificate issuer: /CN=6837a2fa4b78773a66200fea4c58507a92f31203
Certificate serial: 019CA9B3BFDBE57CDD055126C6AF125BD9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
Manifest number: 0597
Signing time: Sun 01 Mar 2026 14:00:55 +0000
Manifest this update: Sun 01 Mar 2026 14:00:55 +0000
Manifest next update: Mon 02 Mar 2026 14:00:55 +0000
Files and hashes: 1: 4iNI26R-dGov0Tl2yDZjMNRLbfA.roa (hash: Mbs7tF0S261BkHnLQzWDasyVwFU+7wR+ArpU3P29zD8=)
2: aDei-kt4dzpmIA_qTFhQepLzEgM.crl (hash: DkfT9Xe7+LitQAGDb41BYz24hAOruc+7X07az/hfV88=)
3: dE-JGprnxw6rfyqiHGwVstJ3B-s.roa (hash: P5+Wa8hBNG0OAzbkWpR9P6pZV6VqpgnBr0Mr7oMWvCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:bf:db:e5:7c:dd:05:51:26:c6:af:12:5b:d9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6837a2fa4b78773a66200fea4c58507a92f31203
Validity
Not Before: Mar 1 14:00:55 2026 GMT
Not After : Mar 2 14:00:55 2026 GMT
Subject: CN=93395df47e78d9cd8d945f9d04f3dccc0fca98c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:70:98:d4:49:ba:13:80:ec:60:43:87:34:
c1:01:ce:fb:b7:6e:27:28:35:72:1f:ab:0f:93:d5:
94:2a:61:b2:1e:01:62:e3:69:dd:ce:d6:ca:49:cb:
7b:7b:23:8a:82:ad:b9:e8:d8:11:5e:e7:3f:d8:09:
23:6a:ec:b1:7a:48:b9:e6:4b:87:5b:f9:03:79:81:
eb:1a:18:27:e7:be:1f:f1:ff:23:39:7d:51:78:cc:
80:3f:ee:38:49:4d:7a:10:ce:30:5e:aa:6d:74:f5:
46:3a:62:33:1b:75:ba:d6:2f:c6:06:16:d6:19:09:
79:15:88:0a:67:69:7a:db:12:e2:80:b9:58:1c:23:
d3:b9:22:16:12:da:cd:2b:8a:b6:7c:d5:ca:30:34:
67:63:f7:6e:da:36:98:b0:51:fb:65:dc:76:01:90:
03:26:e4:dd:a6:7a:97:6a:1e:cb:8c:21:fb:fc:dd:
10:c3:dd:5c:64:4f:11:53:7e:c3:83:37:85:9e:49:
39:75:2a:eb:2a:e7:49:29:42:73:8e:e6:2c:45:a4:
68:86:20:c2:3b:95:05:1a:f3:5a:e3:09:67:f5:20:
d8:a3:ee:75:73:03:ad:2b:63:e1:ea:4b:43:a3:50:
72:55:18:74:50:59:59:27:7e:15:b0:ce:78:cf:37:
96:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:39:5D:F4:7E:78:D9:CD:8D:94:5F:9D:04:F3:DC:CC:0F:CA:98:C7
X509v3 Authority Key Identifier:
keyid:68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:55:05:97:52:e1:56:88:d8:7f:68:f8:8f:f1:ba:88:f6:0c:
f5:bb:a1:8d:d0:50:f1:94:b1:f1:3b:08:33:9d:b2:8d:ef:9b:
08:e9:12:a1:d2:02:ef:eb:c0:52:d0:38:18:06:f9:8c:38:fe:
fb:4b:67:41:f9:c7:a4:fb:44:e1:c8:1f:1f:79:9f:9d:b0:4e:
60:1e:95:f7:eb:3a:15:61:81:aa:77:ca:d3:19:98:98:0e:22:
7e:ae:32:5b:fe:70:50:9f:4f:e3:49:73:c4:69:5d:0a:ae:5d:
1e:4c:c1:17:ec:6e:1f:44:05:96:af:d5:db:75:40:13:f2:41:
55:62:ac:1c:e9:52:38:7d:72:3e:44:6f:1b:f5:dd:28:e6:6f:
64:47:62:16:92:89:87:70:66:c0:c6:a5:83:93:c0:1a:89:ae:
76:60:c8:32:43:1a:8a:7d:c3:62:ae:f9:a3:b4:f6:3d:e3:42:
83:97:1c:ce:e2:01:26:be:a1:5d:0b:02:46:8f:cf:bf:53:24:
94:1a:20:3a:eb:9e:4c:3c:58:c3:f2:3c:e2:a2:d0:2e:24:c9:
86:73:d0:8f:df:df:af:d5:bd:0d:47:87:21:9d:c5:6b:e5:8b:
20:fa:1d:b6:99:62:24:08:42:26:dd:c9:ab:17:78:3b:60:bc:
19:d3:e6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:46 2026 by rpki-client