Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft
File: ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft (raw, json)
Hash identifier: kr652UH4vkdnhW15jzkPO6/gNqLNRNXtaZymi+SFqP8=
Subject key identifier: 0C:38:7C:75:6B:A2:94:19:9B:24:DC:03:CE:77:62:98:54:CF:10:E4
Authority key identifier: 00:3B:BC:81:79:61:51:9C:A5:A3:18:E8:4E:75:AD:9B:B3:DC:C7:E6
Certificate issuer: /CN=003bbc817961519ca5a318e84e75ad9bb3dcc7e6
Certificate serial: 019CAC7DE7971CDB652688FC1195EA00EAED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft
Manifest number: A8
Signing time: Mon 02 Mar 2026 03:00:58 +0000
Manifest this update: Mon 02 Mar 2026 03:00:58 +0000
Manifest next update: Tue 03 Mar 2026 03:00:58 +0000
Files and hashes: 1: ADu8gXlhUZyloxjoTnWtm7Pcx-Y.crl (hash: jBC1+hOzUnc7Iy1YrmGzMvXx74aYzB1cnIV3Vh7FpT4=)
2: UpKRjChH7E6XgVm5AEhCKw9xUVI.asa (hash: itl4/7Ulh3ulcNHslb/7i9V8CSJ2eDVPnXoQqeOhRyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:e7:97:1c:db:65:26:88:fc:11:95:ea:00:ea:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003bbc817961519ca5a318e84e75ad9bb3dcc7e6
Validity
Not Before: Mar 2 03:00:58 2026 GMT
Not After : Mar 3 03:00:58 2026 GMT
Subject: CN=0c387c756ba294199b24dc03ce77629854cf10e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f0:07:38:79:cc:92:2e:00:e4:ca:da:26:e0:
c9:a2:c0:6e:e8:54:ca:bb:9e:99:33:a9:85:bb:82:
6f:62:1e:a2:ee:2e:91:40:06:0f:e8:74:43:49:09:
cd:89:3d:af:5c:da:cf:c2:7e:27:81:11:ff:28:00:
0c:35:f6:9d:1b:b7:36:d2:76:f6:fb:df:ba:ab:4d:
6d:d3:83:89:b7:f8:37:65:46:ed:7f:ea:8d:ac:e2:
f5:bb:1c:d7:b3:fc:22:26:48:d9:55:ee:92:af:68:
6d:d3:e2:86:a1:ae:9b:f1:3d:65:42:de:ef:5a:8d:
a4:ff:ba:a9:d4:2e:1f:b4:9f:54:c0:19:b1:14:ef:
8a:ea:47:e9:13:88:3c:1e:6e:23:2c:43:1e:7d:8e:
02:8b:3f:39:f6:28:8a:65:87:a4:52:4a:51:fb:9a:
92:07:1c:ab:00:c9:ef:4f:0b:2b:3f:8a:cb:75:b0:
45:3e:fa:f6:2c:69:06:53:2d:72:e9:9d:f5:f6:50:
29:e0:2d:f5:67:71:47:38:d0:80:24:98:d1:36:c1:
ed:9d:94:48:12:ca:19:77:a2:55:02:7f:72:45:9d:
9c:92:a6:71:1d:98:0e:e6:26:24:f6:01:b6:93:da:
5c:8d:bf:97:01:fc:1e:53:11:98:9d:86:67:60:b5:
7f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:38:7C:75:6B:A2:94:19:9B:24:DC:03:CE:77:62:98:54:CF:10:E4
X509v3 Authority Key Identifier:
keyid:00:3B:BC:81:79:61:51:9C:A5:A3:18:E8:4E:75:AD:9B:B3:DC:C7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5e:5b:b6:a0:4e:6b:51:ee:f9:a9:ce:73:f4:bb:ce:ce:9d:
76:89:78:c3:79:37:e9:8b:5b:82:17:78:27:02:2b:83:31:54:
fb:f4:32:bd:34:10:3f:8c:a7:b3:cc:09:8c:5e:a8:26:53:01:
94:88:ff:de:de:6a:97:25:6a:f2:af:9d:99:22:c9:7b:29:8c:
19:80:e0:d8:9e:73:04:25:18:0d:93:8f:74:d0:48:01:f4:6c:
ec:f8:d1:be:ac:f6:c7:13:2d:6f:80:bb:b4:c4:72:51:6d:38:
fc:0f:26:d5:3b:7d:e1:30:a8:6f:1b:c7:3c:d7:23:dd:bd:48:
53:80:cf:a2:cf:0c:01:09:b7:76:7c:4a:10:33:e3:ee:b0:c4:
33:5f:29:92:e2:58:5d:c2:19:0f:58:7e:9b:a3:a4:40:d1:d7:
26:ca:32:72:d1:47:9b:f4:f0:c3:63:8f:db:8c:63:7b:e4:33:
bb:38:84:b1:7d:04:8c:d2:9a:ab:51:f6:fe:67:74:01:0e:81:
ec:78:0a:d5:d3:ef:f0:2e:d9:35:bb:55:2d:d8:1d:7e:a3:93:
ab:b7:ef:56:4d:40:49:80:8c:c2:77:4b:d5:c8:81:fe:f0:7e:
6a:91:76:4d:dd:98:76:38:47:dd:5c:39:df:a1:e4:0f:57:05:
73:a8:d5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:59:14 2026 by rpki-client