Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
File: AdGZIUQMLysip3d4ApO8J_pH81o.mft (raw, json)
Hash identifier: yeUv9bTEbaz3j0JlhNy6c5c9BQx7DeOK5yMZWxaiyjw=
Subject key identifier: 4F:60:99:B2:49:FC:04:8C:6A:FF:F2:C4:12:A7:A6:B7:F1:3F:A6:86
Authority key identifier: 01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
Certificate issuer: /CN=01d19921440c2f2b22a777780293bc27fa47f35a
Certificate serial: 019CABA2320DF9E05D577A304C2224557A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 23:00:59 +0000
Manifest this update: Sun 01 Mar 2026 23:00:59 +0000
Manifest next update: Mon 02 Mar 2026 23:00:59 +0000
Files and hashes: 1: AdGZIUQMLysip3d4ApO8J_pH81o.crl (hash: /HXFAzDnJKSrx9yiM//76LuucdiQ2/siH01oSnYMqkM=)
2: vqx4rvgcwKRJYoIkEyxywbhGZIo.roa (hash: c2b87ljEpUBFoq5WYxAZjcHq9LKBdj40xam1g1KVDXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:32:0d:f9:e0:5d:57:7a:30:4c:22:24:55:7a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d19921440c2f2b22a777780293bc27fa47f35a
Validity
Not Before: Mar 1 23:00:59 2026 GMT
Not After : Mar 2 23:00:59 2026 GMT
Subject: CN=4f6099b249fc048c6afff2c412a7a6b7f13fa686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:68:75:f8:25:3d:50:07:e1:29:71:8e:58:17:
6e:26:c2:02:0c:3d:24:d5:7d:30:37:f7:84:5d:0d:
25:65:d8:73:1c:9d:f3:68:ea:14:51:78:26:d8:b2:
d7:3e:5e:6a:7a:d4:1a:8c:d6:fb:97:9b:7e:80:58:
4c:07:1c:40:a3:6b:3d:bf:db:dd:da:e0:56:5e:1a:
09:10:45:c7:04:94:7b:4f:0c:8b:28:ef:dc:10:ef:
9b:69:e7:2c:78:03:77:0b:df:68:d9:5c:c1:65:75:
45:5a:7d:31:58:cf:d8:a7:04:a4:3c:86:32:03:49:
84:a7:65:5f:99:40:51:3b:e2:33:b3:d1:8e:7e:9b:
43:c6:aa:53:68:cf:5a:54:31:ac:1b:e8:f0:66:fb:
d4:f1:bc:a9:3f:de:1b:ef:8f:8e:ee:d4:43:c9:ae:
be:07:a1:a9:4b:36:c5:5f:2a:d0:b1:4c:3a:9d:06:
31:d1:9e:f9:f9:7b:b8:b1:ce:d2:65:05:b5:c2:38:
9a:52:c6:ec:89:67:76:4d:69:b7:b9:65:20:e0:90:
a7:09:96:26:a8:b8:58:74:9f:17:81:93:c9:c1:9e:
bc:59:d0:5c:80:de:f6:de:46:25:32:4f:d5:2a:93:
e3:8a:e0:39:af:f4:f5:47:f0:d3:4c:91:80:7b:0b:
b8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:60:99:B2:49:FC:04:8C:6A:FF:F2:C4:12:A7:A6:B7:F1:3F:A6:86
X509v3 Authority Key Identifier:
keyid:01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:53:4a:b7:74:ba:ad:ae:56:af:4c:12:0e:43:13:a3:0b:c1:
8b:fe:9f:13:17:4c:53:50:47:90:a5:e6:f7:74:e4:66:eb:54:
6b:5a:ac:c3:0c:f6:51:64:7a:70:93:73:b8:8f:d2:8d:e5:f1:
24:83:67:0e:71:36:b8:bb:31:73:ce:d7:19:e7:5a:ac:eb:0c:
76:25:06:6b:60:0a:01:d7:2b:18:f6:42:1c:b9:07:29:4d:13:
53:3e:ee:60:8a:d0:f3:85:66:32:41:b8:ac:0d:1b:5b:a8:ff:
00:8c:74:6f:3a:84:ea:fe:4b:86:10:04:ec:df:88:c6:4c:29:
ee:17:1f:15:29:d3:87:b3:20:23:ad:53:c5:b7:10:83:22:e3:
fe:5a:2d:82:08:5d:f5:f5:1e:50:ac:e7:b7:8a:16:a8:c1:97:
09:f9:eb:60:0b:6a:a3:b1:22:d1:41:c9:ad:9d:fc:98:b7:4c:
78:03:a5:4e:b9:c1:81:72:9c:42:25:e6:96:46:82:48:45:78:
71:57:53:d1:48:36:c2:3d:e9:21:cf:7e:70:e4:2d:6b:40:8b:
24:47:f9:82:5b:77:96:de:95:ef:64:34:10:ad:c3:9a:fc:46:
a2:c0:fc:52:5c:2d:7d:b7:05:8b:de:0e:d1:98:eb:6f:03:07:
04:b8:07:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:42 2026 by rpki-client