Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
File: AD_-289_nHEO9Yuv_uzuA3fxm9M.mft (raw, json)
Hash identifier: haKrGfg/91lRtCbZ0rCoXGSw2knGYs6r3aJbXeyBjiM=
Subject key identifier: AB:32:AC:D2:4F:AE:67:C0:5A:5D:A8:6D:1D:47:E2:3D:FA:C5:92:97
Authority key identifier: 00:3F:FE:DB:CF:7F:9C:71:0E:F5:8B:AF:FE:EC:EE:03:77:F1:9B:D3
Certificate issuer: /CN=003ffedbcf7f9c710ef58baffeecee0377f19bd3
Certificate serial: 01A1065C714284C7D280627901D164EFABE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AD_-289_nHEO9Yuv_uzuA3fxm9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
Manifest number: 0102
Signing time: Sun 04 Oct 2026 10:01:23 +0000
Manifest this update: Sun 04 Oct 2026 10:01:23 +0000
Manifest next update: Mon 05 Oct 2026 10:01:23 +0000
Files and hashes: 1: 6qDW6_OYHkue6ocM9JiQxw7eaDA.roa (hash: DI4vkJ8mXMU1gsjZNOcgIX1g1JQ6NES2SMI/VfbnZRM=)
2: AD_-289_nHEO9Yuv_uzuA3fxm9M.crl (hash: 55nS/n82f8mmqkPT/fmjEW7Fmscv4rGe/4CMqYAVQXw=)
3: Ck3rOI6Xa5Gj7dndlxdeh3NrBmc.roa (hash: B5fZHyrENLJkUKcY0cgDv3KWy4P0ZeZxjcroZn03jaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AD_-289_nHEO9Yuv_uzuA3fxm9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:5c:71:42:84:c7:d2:80:62:79:01:d1:64:ef:ab:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003ffedbcf7f9c710ef58baffeecee0377f19bd3
Validity
Not Before: Oct 4 10:01:23 2026 GMT
Not After : Oct 5 10:01:23 2026 GMT
Subject: CN=ab32acd24fae67c05a5da86d1d47e23dfac59297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d9:f9:79:c8:55:74:0d:c1:94:bb:6e:3f:0c:
9b:be:b2:7f:02:08:38:24:c4:4c:7b:8c:f9:d5:76:
1f:58:6c:61:ef:67:29:83:1b:e7:51:ce:09:c4:1e:
00:34:81:80:6c:b8:c2:12:7b:a3:3a:16:e3:d9:da:
e3:11:f8:4f:ad:b0:09:99:e6:f6:f7:d8:90:34:a1:
75:06:39:74:15:ac:c8:1a:02:02:6d:81:0e:6e:e4:
55:12:e0:dc:3e:9c:b2:cd:4f:b5:37:b7:2d:6e:74:
a8:3f:51:af:44:97:60:15:25:70:22:5b:68:d3:04:
e7:5b:ea:70:8d:2c:08:cf:f4:67:11:e6:da:76:35:
b5:a2:2c:89:be:0c:8a:3f:3a:19:2b:25:d9:e0:e8:
e7:2f:0b:ec:c2:6b:e8:6b:3b:3c:4e:54:cd:70:9d:
e2:7e:86:9e:15:59:9d:b3:48:3a:61:e2:83:79:f9:
39:48:4a:9e:67:7b:b7:d0:1b:1f:22:41:4f:f8:8a:
8b:b1:7d:4f:0e:ad:be:f3:62:e0:51:0a:77:75:5c:
6b:79:fc:e2:bd:af:03:9b:4a:de:3a:57:56:2d:d6:
da:b9:21:64:55:7e:a5:c7:a4:b4:75:a7:26:1e:22:
31:77:7e:eb:ff:da:a6:33:f9:5c:23:c9:22:2d:f4:
4f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:32:AC:D2:4F:AE:67:C0:5A:5D:A8:6D:1D:47:E2:3D:FA:C5:92:97
X509v3 Authority Key Identifier:
keyid:00:3F:FE:DB:CF:7F:9C:71:0E:F5:8B:AF:FE:EC:EE:03:77:F1:9B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AD_-289_nHEO9Yuv_uzuA3fxm9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e4:bd:f4:7f:d0:07:ab:c5:93:12:9a:a1:c5:18:9d:d1:16:
aa:8e:b2:45:a7:f3:60:e2:7e:58:d6:bf:69:d0:02:a7:83:e2:
82:e2:78:5c:e0:6d:c0:50:3c:d4:18:7e:89:6c:b9:67:3d:1a:
7e:55:2f:12:e7:8c:9f:2a:0b:5f:d6:6c:82:86:02:bd:74:2f:
3c:c6:ec:1d:e6:f5:27:92:ba:30:ce:67:e1:53:29:fd:6d:35:
13:ac:e8:55:13:41:10:6e:a9:8a:74:52:e0:65:5e:f2:78:12:
49:b7:56:2e:44:56:31:6d:67:fd:59:ef:5b:d2:ec:33:dd:d2:
63:b9:d3:4a:22:5d:3f:88:ed:c2:5b:14:a1:10:64:f2:01:e6:
76:6b:3d:da:f5:c8:75:c8:43:3f:21:78:85:47:b5:27:92:b1:
59:9f:99:64:27:43:44:2b:8c:d7:54:7b:16:bf:ee:bc:af:38:
45:08:a6:55:5f:d9:a1:ce:42:33:f8:3a:8f:ad:37:c9:00:be:
46:e8:ae:25:d2:5d:59:ad:d4:53:45:23:10:6a:19:40:e5:92:
f0:31:03:d2:83:6f:5f:75:8f:0e:f5:7a:ef:28:52:d4:af:b6:
97:2a:26:3a:a6:e7:37:15:5a:0a:bc:76:04:aa:f9:b9:ca:2b:
4f:15:33:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:21:58 2026 by rpki-client