
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
File: AdIyzG-yu_d4bZLGxq66oO2aceQ.mft (raw, json)
Hash identifier: A9IaN6Ma6OTXcN9YHZX1tkrL4TOFJjVxfLmpMiaiqIg=
Subject key identifier: DB:CD:5F:4C:0A:A8:A9:C0:D4:61:3B:C8:73:DB:AF:78:56:AA:32:5A
Authority key identifier: 01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4
Certificate issuer: /CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
Certificate serial: 01A0C5FCA5FFE35D59D086610B71DADB89F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
Manifest number: 1A60
Signing time: Mon 21 Sep 2026 22:01:04 +0000
Manifest this update: Mon 21 Sep 2026 22:01:04 +0000
Manifest next update: Tue 22 Sep 2026 22:01:04 +0000
Files and hashes: 1: AdIyzG-yu_d4bZLGxq66oO2aceQ.crl (hash: KjXJ5OOBwajpQszpsyZyVZYAdjBz46LSZ2gnDkEIGxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:a5:ff:e3:5d:59:d0:86:61:0b:71:da:db:89:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
Validity
Not Before: Sep 21 22:01:04 2026 GMT
Not After : Sep 22 22:01:04 2026 GMT
Subject: CN=dbcd5f4c0aa8a9c0d4613bc873dbaf7856aa325a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:58:96:76:84:3c:75:62:fc:7e:e6:af:51:
04:e4:e8:76:3f:3d:d9:b9:c8:eb:a1:89:f5:54:89:
f2:31:9f:d1:ef:df:42:2b:20:c2:df:65:db:37:72:
5e:dc:6a:fa:9a:da:93:18:dd:d0:91:78:18:fd:b2:
2a:35:72:fd:3e:8a:2d:7f:99:72:bb:2f:89:ae:a2:
3f:80:a8:d8:da:32:39:d2:2c:1c:b6:c5:fb:e7:36:
aa:8b:8b:3b:56:8d:48:a9:e4:10:4c:f9:84:09:e4:
7b:f2:c0:80:96:b2:06:cd:fe:47:6b:23:0d:32:66:
f9:61:70:4b:31:80:9a:08:2b:6b:c0:7a:dc:4f:72:
55:86:77:64:e1:6c:9a:f6:c4:7c:f2:7d:e7:42:2f:
af:03:3c:31:6d:54:a2:ce:72:f8:e8:9e:22:b7:27:
46:f2:87:18:e8:2a:26:5e:a3:49:f1:a6:b2:b7:fd:
73:ce:11:bc:07:50:2d:b0:dd:87:e6:55:67:34:ba:
b1:ba:23:ed:b5:a9:ab:57:2d:66:db:98:76:46:b3:
70:45:3d:25:c6:4b:e3:4f:70:31:6a:fd:82:6b:78:
cd:a8:6b:c1:5c:e0:66:49:bd:51:84:06:fa:df:6f:
bd:74:c8:44:c4:8a:9d:1e:b7:83:11:d1:ad:c9:12:
61:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CD:5F:4C:0A:A8:A9:C0:D4:61:3B:C8:73:DB:AF:78:56:AA:32:5A
X509v3 Authority Key Identifier:
keyid:01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9b:44:ba:9c:a6:c4:40:80:fd:a2:90:64:ad:0d:1f:08:6d:
cd:c1:2e:5d:1c:44:ee:63:18:cb:ff:75:5f:ab:68:07:ef:a5:
8b:4e:95:bb:05:61:32:1d:5a:e0:c6:5e:c9:00:b5:59:8d:c8:
43:ff:5d:03:89:c5:7e:3b:c6:27:c7:ba:c6:17:15:e3:57:af:
59:a1:d9:e1:ab:cd:f3:5c:b8:ca:90:bd:30:e5:5d:96:f9:56:
c9:eb:f8:cf:c1:c4:35:7a:e0:70:8b:68:17:36:79:91:4d:50:
b4:14:8c:62:37:e1:c8:dd:9c:3d:dd:57:25:e8:c8:8c:bb:40:
22:60:0f:63:fc:7c:54:49:56:ae:ef:56:cb:5b:e0:0e:98:8d:
63:4f:da:62:c6:39:e8:a1:b9:73:63:c3:ee:53:11:f0:4b:c6:
1e:04:cc:d7:89:e0:9b:6f:e5:8f:18:63:d7:ae:1a:8e:48:0c:
6a:ea:7b:ec:5e:2d:a1:17:d7:89:80:34:fe:6f:39:89:6e:a0:
d9:40:72:25:44:16:ff:94:3e:01:00:06:77:87:ab:74:50:14:
a9:aa:6c:48:e5:ad:4a:2f:10:5a:31:86:a2:9c:ab:7d:b4:eb:
09:7b:58:f7:94:6e:20:04:3e:79:4f:44:8a:0e:92:aa:a4:7c:
33:a6:68:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:31:43 2026 by rpki-client