Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
File: adXUUqjtU1KH_rNlFLyHwCI1WkM.mft (raw, json)
Hash identifier: ogLsveVPxxqqV8KrXgxabkKbIY0mKwZwBI7y7Skq7Vs=
Subject key identifier: 38:95:C1:E6:A2:BE:5C:6B:A4:FF:01:10:6F:83:C7:FF:41:67:F9:A1
Authority key identifier: 69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
Certificate issuer: /CN=69d5d452a8ed535287feb36514bc87c022355a43
Certificate serial: 019CAC46D7F4395FA99D39AB0FF7BF674D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 02:00:49 +0000
Manifest this update: Mon 02 Mar 2026 02:00:49 +0000
Manifest next update: Tue 03 Mar 2026 02:00:49 +0000
Files and hashes: 1: 99ukKo0G5E-X61ucxhUYzuXviMg.roa (hash: klMpZV7tFP7vNV7veN/nv8e/MQyS41qIS69khsoXMUw=)
2: adXUUqjtU1KH_rNlFLyHwCI1WkM.crl (hash: HUxVG8ocogIej4mn33JGVsFKpBlld1gY9WLrXze/mT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:d7:f4:39:5f:a9:9d:39:ab:0f:f7:bf:67:4d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d5d452a8ed535287feb36514bc87c022355a43
Validity
Not Before: Mar 2 02:00:49 2026 GMT
Not After : Mar 3 02:00:49 2026 GMT
Subject: CN=3895c1e6a2be5c6ba4ff01106f83c7ff4167f9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7d:85:72:29:8b:64:be:1b:ec:e4:1a:ff:ba:
57:6b:d9:d8:42:41:9f:e6:46:87:2b:2d:10:1c:65:
4b:2f:6a:f7:d7:64:4c:71:1b:6f:2a:a4:95:61:88:
73:db:4b:d7:f6:1e:b7:ce:84:28:05:0b:d8:42:eb:
0b:23:7a:01:68:43:92:aa:ba:7e:99:e5:79:15:c0:
58:a7:3c:26:aa:26:95:d4:58:ad:fb:93:b2:fa:f2:
6e:ff:87:40:6e:7a:e9:24:c6:2a:b4:66:6d:0d:61:
e5:d3:0b:5f:00:17:7d:70:51:ae:02:85:2c:6e:6e:
13:c5:39:f1:a6:27:f2:2d:23:2b:07:d8:1b:d7:1e:
b7:bf:e5:d7:d5:c2:0a:30:54:55:0a:46:7a:19:1b:
4a:74:48:9e:5a:a7:43:f1:82:3c:05:cf:a5:d6:02:
29:bc:63:a7:31:7f:2e:3e:8b:df:a3:74:65:c9:b9:
39:a5:bf:b6:f8:82:98:05:2d:50:33:9e:a0:69:ac:
95:a2:55:b0:5a:4b:16:a9:41:c9:13:07:a3:06:4d:
a3:63:10:9c:5d:93:e6:ed:d5:76:dc:83:b9:58:9c:
04:da:eb:3f:5e:28:23:d5:b0:16:74:c2:52:24:ac:
6f:4a:63:d2:28:0d:bf:a0:e6:41:35:37:3a:4f:45:
07:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:95:C1:E6:A2:BE:5C:6B:A4:FF:01:10:6F:83:C7:FF:41:67:F9:A1
X509v3 Authority Key Identifier:
keyid:69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c0:46:62:d1:02:3d:5d:d2:71:be:72:0f:79:45:05:0d:07:
a0:6b:aa:e7:12:b4:e6:7d:83:9e:de:e2:dd:f8:22:01:c9:2e:
cf:06:b6:b8:1c:46:e6:eb:64:7c:ec:35:c2:68:94:90:49:58:
3e:a6:4c:7b:3a:c4:46:8f:2b:84:2f:63:3c:a2:c3:2b:2a:09:
3b:fa:cc:5e:08:46:6c:ba:cc:4b:fb:83:a9:d6:c0:bf:e1:e5:
4c:37:50:d3:80:1f:92:64:5f:e9:da:8e:02:ab:92:c1:a0:28:
ec:fd:d0:20:ce:87:35:3d:c0:95:8f:f3:68:d5:f5:c5:5f:4d:
d3:4d:c4:19:2b:81:73:79:38:00:4c:f3:01:99:94:e3:d5:64:
f0:a1:ac:0d:f8:c8:0e:1e:d0:96:54:b4:31:90:91:35:07:e3:
e5:ac:bc:f6:f8:b1:54:c3:96:3c:14:99:c1:76:e0:16:bf:e0:
a5:f2:8a:52:b8:15:f8:f8:b8:82:bb:cb:a0:5d:f8:0e:a1:ce:
29:8c:2a:7b:d3:5e:0d:a5:8b:3d:4e:63:4a:5f:7d:ca:34:f7:
eb:a9:f2:ca:cb:de:03:01:8b:20:b9:5c:79:17:bf:28:8d:88:
5e:8d:5a:52:59:d3:ac:1a:3c:c1:93:c8:d7:e5:d2:25:81:f9:
31:93:99:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRtf0OV+pnTmrD/e/Z00zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDVkNDUyYThlZDUzNTI4N2ZlYjM2NTE0YmM4N2MwMjIz
NTVhNDMwHhcNMjYwMzAyMDIwMDQ5WhcNMjYwMzAzMDIwMDQ5WjAzMTEwLwYDVQQD
EygzODk1YzFlNmEyYmU1YzZiYTRmZjAxMTA2ZjgzYzdmZjQxNjdmOWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin2FcimLZL4b7OQa/7pXa9nYQkGf
5kaHKy0QHGVLL2r312RMcRtvKqSVYYhz20vX9h63zoQoBQvYQusLI3oBaEOSqrp+
meV5FcBYpzwmqiaV1Fit+5Oy+vJu/4dAbnrpJMYqtGZtDWHl0wtfABd9cFGuAoUs
bm4TxTnxpifyLSMrB9gb1x63v+XX1cIKMFRVCkZ6GRtKdEieWqdD8YI8Bc+l1gIp
vGOnMX8uPovfo3Rlybk5pb+2+IKYBS1QM56gaayVolWwWksWqUHJEwejBk2jYxCc
XZPm7dV23IO5WJwE2us/Xigj1bAWdMJSJKxvSmPSKA2/oOZBNTc6T0UHIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiVweaivlxrpP8BEG+Dx/9BZ/mhMB8GA1UdIwQY
MBaAFGnV1FKo7VNSh/6zZRS8h8AiNVpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRYVVVxanRVMUtIX3JObEZMeUh3Q0kxV2tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS84ZTg4YTctMDIzMi00MDU1LWE1Y2Yt
ZGQ5NDQzNTc5ZWQ1LzEvYWRYVVVxanRVMUtIX3JObEZMeUh3Q0kxV2tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS84ZTg4YTctMDIzMi00MDU1LWE1Y2YtZGQ5NDQzNTc5ZWQ1
LzEvYWRYVVVxanRVMUtIX3JObEZMeUh3Q0kxV2tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsMBGYtEC
PV3Scb5yD3lFBQ0HoGuq5xK05n2Dnt7i3fgiAckuzwa2uBxG5utkfOw1wmiUkElY
PqZMezrERo8rhC9jPKLDKyoJO/rMXghGbLrMS/uDqdbAv+HlTDdQ04AfkmRf6dqO
AquSwaAo7P3QIM6HNT3AlY/zaNX1xV9N003EGSuBc3k4AEzzAZmU49Vk8KGsDfjI
Dh7QllS0MZCRNQfj5ay89vixVMOWPBSZwXbgFr/gpfKKUrgV+Pi4grvLoF34DqHO
KYwqe9NeDaWLPU5jSl99yjT366nyysveAwGLILlceRe/KI2IXo1aUlnTrBo8wZPI
1+XSJYH5MZOZqg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:33:04 2026 by rpki-client