Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
File: Ad0iu63J75fJwaOGG21rTE3dhoc.mft (raw, json)
Hash identifier: 7NBaqWOqAW2n9O8oI2l9ZBv5p2FQycBMUtanTYQsDPk=
Subject key identifier: 2C:23:46:63:CC:84:44:56:8B:4E:04:EB:DC:F4:F6:D1:A9:73:2C:EE
Authority key identifier: 01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87
Certificate issuer: /CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687
Certificate serial: 019CAB6BB5BDABA3AD2DB85412361835BCE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
Manifest number: 1237
Signing time: Sun 01 Mar 2026 22:01:28 +0000
Manifest this update: Sun 01 Mar 2026 22:01:28 +0000
Manifest next update: Mon 02 Mar 2026 22:01:28 +0000
Files and hashes: 1: Ad0iu63J75fJwaOGG21rTE3dhoc.crl (hash: uAV+nB1O1m8EfeluIlO61GrpWVuL/xk5urm7v35ZKC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:b5:bd:ab:a3:ad:2d:b8:54:12:36:18:35:bc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687
Validity
Not Before: Mar 1 22:01:28 2026 GMT
Not After : Mar 2 22:01:28 2026 GMT
Subject: CN=2c234663cc8444568b4e04ebdcf4f6d1a9732cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:73:c8:fb:66:79:67:30:f8:dd:bd:1d:b4:
f0:19:fc:a1:8f:22:a1:46:6a:41:3d:46:da:0e:b3:
58:d0:77:95:46:9e:07:31:56:61:59:87:7e:a9:84:
53:17:d7:c4:93:59:f6:3c:45:dd:c3:2a:84:ad:a2:
61:37:ac:8e:7f:fb:cd:96:38:34:e5:12:f9:a6:44:
d2:59:c0:cf:6f:4a:a5:75:c7:67:4b:78:1a:2c:f9:
44:f8:2a:85:39:aa:8c:f5:28:a6:b9:45:b9:bc:6b:
e0:f5:96:c0:5e:55:76:d2:5a:bb:ac:a6:df:79:c4:
20:18:af:3c:5c:13:85:ae:f4:ea:3e:81:12:00:82:
77:bb:3a:0c:64:7c:ca:3e:bd:ac:7a:19:d1:17:94:
70:ea:16:00:c4:f6:28:92:b3:22:c4:c1:ba:ff:6b:
25:24:60:80:e7:ed:0b:2f:40:e7:62:7f:72:06:5c:
cc:1d:10:fd:44:18:64:38:dc:a0:a5:c3:fd:05:08:
e4:4d:d4:c5:f6:07:68:d1:c8:ed:49:83:2b:33:70:
fc:28:b5:77:31:2d:5a:e0:0e:dd:4c:c2:4c:0a:64:
f4:3a:e3:61:88:82:d3:ea:96:44:13:a8:87:40:a1:
d4:7f:c8:3b:96:c2:44:55:27:fc:ac:e6:12:b1:d8:
48:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:23:46:63:CC:84:44:56:8B:4E:04:EB:DC:F4:F6:D1:A9:73:2C:EE
X509v3 Authority Key Identifier:
keyid:01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d5:d9:24:7f:40:c8:50:a8:2e:30:81:c4:c7:0f:6b:2a:15:
fb:4d:21:70:1e:c4:ea:3d:b1:38:ba:fd:e0:0e:79:d0:f5:1c:
90:8c:2a:44:68:ad:ce:59:80:6e:9c:6b:53:58:09:ad:41:20:
0a:6f:6b:21:3d:cd:cd:51:5a:8b:bc:55:3d:cc:4a:d3:6c:a5:
f8:c9:b1:be:0b:7e:a7:69:94:30:0c:91:c8:83:33:55:6a:25:
eb:eb:e7:51:b9:ab:f4:d5:29:f0:d9:bf:62:c1:d4:1d:85:2f:
6f:0f:ee:9b:38:de:1b:bc:78:73:6a:2c:6c:d3:06:7e:5a:f9:
38:d5:13:3f:a0:37:35:f9:d6:fa:b6:96:85:c3:2b:f8:fe:66:
3b:86:3d:ba:ef:a5:d0:ff:12:5f:de:42:eb:78:c4:73:8a:7d:
6f:6c:4f:13:0e:34:06:9f:35:e5:d7:4b:13:d7:29:46:d7:62:
43:26:52:2c:ae:45:53:72:29:ef:73:19:bd:13:3f:90:44:eb:
1e:30:7e:21:6a:8d:27:7c:3b:ac:28:4a:94:69:34:46:d3:d5:
fc:3f:be:32:13:c4:5d:1b:78:60:9f:2e:50:ea:f8:ae:23:d8:
e8:80:03:6c:fb:5d:0d:d0:59:7e:fe:a4:1d:00:c3:73:3e:c9:
f6:2a:04:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:31 2026 by rpki-client