Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
File: AD_-289_nHEO9Yuv_uzuA3fxm9M.mft (raw, json)
Hash identifier: O9JW+0QFQs/6uVgH8Caa9Lh1jlkRxdnKyUNF+i49cs8=
Subject key identifier: 42:EB:63:3C:F4:8A:F0:15:3A:E5:14:FA:6D:9C:AC:8C:31:4C:03:50
Authority key identifier: 00:3F:FE:DB:CF:7F:9C:71:0E:F5:8B:AF:FE:EC:EE:03:77:F1:9B:D3
Certificate issuer: /CN=003ffedbcf7f9c710ef58baffeecee0377f19bd3
Certificate serial: 019FA8CFF42850C79583CEB6AC65200B3A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AD_-289_nHEO9Yuv_uzuA3fxm9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 13:00:28 +0000
Manifest this update: Tue 28 Jul 2026 13:00:28 +0000
Manifest next update: Wed 29 Jul 2026 13:00:28 +0000
Files and hashes: 1: 6qDW6_OYHkue6ocM9JiQxw7eaDA.roa (hash: DI4vkJ8mXMU1gsjZNOcgIX1g1JQ6NES2SMI/VfbnZRM=)
2: AD_-289_nHEO9Yuv_uzuA3fxm9M.crl (hash: mjrHLjjCNAfdJYvwtJqM6cFsMjnLJKfHaJLfHDlouS4=)
3: Ck3rOI6Xa5Gj7dndlxdeh3NrBmc.roa (hash: B5fZHyrENLJkUKcY0cgDv3KWy4P0ZeZxjcroZn03jaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AD_-289_nHEO9Yuv_uzuA3fxm9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:f4:28:50:c7:95:83:ce:b6:ac:65:20:0b:3a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003ffedbcf7f9c710ef58baffeecee0377f19bd3
Validity
Not Before: Jul 28 13:00:28 2026 GMT
Not After : Jul 29 13:00:28 2026 GMT
Subject: CN=42eb633cf48af0153ae514fa6d9cac8c314c0350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:44:c6:28:d2:79:fc:27:82:5b:06:c9:7e:c4:
4a:26:d0:fa:b4:db:5e:0b:37:0a:74:5a:64:fe:e8:
29:0c:64:59:30:aa:4a:bc:f4:b9:c7:91:c3:4c:28:
94:34:67:15:16:aa:e7:b3:96:2c:af:52:5f:b4:bc:
4c:56:8e:2e:53:84:38:a4:62:af:0e:15:bf:7c:9b:
de:69:b1:2a:b3:9b:18:91:18:50:3b:41:ca:bb:d3:
37:65:57:69:55:8e:07:90:c4:73:56:82:2a:9d:5d:
c0:f7:1a:37:ed:15:04:03:b5:e9:f0:3d:17:1b:99:
84:04:f5:d9:fd:94:ad:ed:2f:10:ad:36:96:16:8d:
98:20:76:b3:fd:ac:81:2b:2e:91:7b:59:d5:35:d3:
bb:97:4e:3d:a5:20:6a:82:94:1e:ba:96:04:7e:c2:
c8:30:74:0a:bf:42:48:fa:77:94:b9:81:12:b9:e7:
7d:5f:39:35:7f:ce:5e:f6:54:b4:04:f1:7f:fa:6d:
e3:c5:67:fd:7f:6e:40:6b:f0:70:61:72:8e:75:59:
5f:c9:75:bc:e5:c0:b0:04:f5:f5:b7:44:87:52:e8:
68:2f:df:e8:e5:cc:e8:a0:53:3b:aa:5f:1b:20:92:
18:c2:bd:23:a2:ba:e7:fd:cc:bd:09:59:37:22:48:
1b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EB:63:3C:F4:8A:F0:15:3A:E5:14:FA:6D:9C:AC:8C:31:4C:03:50
X509v3 Authority Key Identifier:
keyid:00:3F:FE:DB:CF:7F:9C:71:0E:F5:8B:AF:FE:EC:EE:03:77:F1:9B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AD_-289_nHEO9Yuv_uzuA3fxm9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:56:c1:b6:a5:b2:38:44:b4:50:63:8b:2f:84:28:c1:42:25:
87:a0:aa:57:59:42:a8:00:ba:a0:4e:38:f4:8f:be:4c:2c:d3:
56:f3:94:a3:de:80:61:45:e0:7f:92:13:48:ce:a6:fd:ab:d5:
5c:90:b9:4b:f7:12:10:c6:dc:92:3a:ec:3b:18:26:b7:99:a4:
62:bc:da:f6:f5:44:ca:33:e5:b1:b9:da:1d:fd:a0:3b:26:cc:
94:4a:3b:95:f5:b7:2d:26:be:94:65:f8:e5:4a:dd:d9:99:a6:
98:ec:99:e8:e3:c9:af:91:6d:f1:04:a5:88:d1:60:2a:95:10:
1b:f0:db:c7:95:8c:73:09:e9:79:7f:fc:a8:59:77:59:2b:88:
4f:df:96:c2:82:2c:64:1a:11:9f:54:37:3a:e1:fb:64:33:89:
95:e6:2e:0b:4e:d6:9b:72:c0:72:53:2a:22:2e:77:5c:fd:89:
bb:da:5e:e9:fa:0d:a7:60:14:aa:0d:2e:ea:12:42:b3:44:ec:
f2:b3:d6:5f:c7:60:a0:c6:6d:78:23:d0:b9:db:a1:0e:0d:3d:
38:0e:96:68:b8:4d:52:dc:4d:14:76:6d:a1:6c:43:7e:db:57:
e0:15:95:f9:df:9d:c5:db:5f:10:1c:38:69:1c:47:be:4a:4e:
7f:49:c7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:14:21 2026 by rpki-client