Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
File: aDCZAOZItlowenhgECv3ixb1XXU.mft (raw, json)
Hash identifier: n+W1rTWvKPaWg46b/LSzOFbDJeu6i5Vi1woPnbOqt7c=
Subject key identifier: 42:EB:F6:9F:AB:01:A3:BE:B7:EB:82:52:DE:F4:A9:F9:AB:4E:06:CC
Authority key identifier: 68:30:99:00:E6:48:B6:5A:30:7A:78:60:10:2B:F7:8B:16:F5:5D:75
Certificate issuer: /CN=68309900e648b65a307a7860102bf78b16f55d75
Certificate serial: 01A13AB74AE4EA8223FA19413F4AA0D3A552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDCZAOZItlowenhgECv3ixb1XXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
Manifest number: 0701
Signing time: Wed 14 Oct 2026 14:00:52 +0000
Manifest this update: Wed 14 Oct 2026 14:00:52 +0000
Manifest next update: Thu 15 Oct 2026 14:00:52 +0000
Files and hashes: 1: HbShzM3qrknCQZp2Tx1NZiWf1jk.roa (hash: YTGorDk65orDuOJJBzhtTtRRAT8YSucZuGLA7eX2VpI=)
2: aDCZAOZItlowenhgECv3ixb1XXU.crl (hash: QMMlB8eZdX1HFQZTxlb6nMP2KPshWJFM04YHtyFh7Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDCZAOZItlowenhgECv3ixb1XXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:b7:4a:e4:ea:82:23:fa:19:41:3f:4a:a0:d3:a5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68309900e648b65a307a7860102bf78b16f55d75
Validity
Not Before: Oct 14 14:00:52 2026 GMT
Not After : Oct 15 14:00:52 2026 GMT
Subject: CN=42ebf69fab01a3beb7eb8252def4a9f9ab4e06cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:04:b9:cc:52:2a:3e:41:45:7a:ef:82:be:4d:
5a:0b:ca:9e:7f:70:60:83:2f:51:82:11:32:eb:ca:
fa:a4:69:6d:22:ad:bd:0e:e2:a0:19:da:a6:33:be:
7a:c6:63:62:b9:14:ff:f0:d3:09:a0:9a:4a:60:61:
66:10:ef:c9:ab:89:22:a6:95:48:90:47:e4:e6:a3:
c0:ad:eb:69:ee:fa:72:73:35:e0:b1:c8:16:89:11:
fb:8f:6f:1b:13:25:52:60:c5:8a:63:d3:a5:1f:cd:
62:80:82:44:1e:d6:83:70:ff:bb:8b:34:7f:53:b2:
3b:63:03:1d:2e:28:33:a2:d7:d2:da:1a:b9:f9:41:
e4:f9:c6:3c:ba:94:1e:f8:c7:6f:0f:d0:97:a1:54:
9d:6c:1f:df:05:5a:7f:91:7a:3f:3b:4d:04:1b:17:
f9:a4:ab:1c:bd:9e:73:a1:99:e7:1a:a9:50:cc:6b:
49:cc:68:5e:f3:bc:d6:dc:03:1b:10:3d:01:02:dd:
51:37:d5:5e:d7:bd:e6:0c:db:d6:46:73:f4:8f:01:
b1:ea:fc:3c:1b:56:47:0c:fc:0a:15:75:09:e8:f0:
1d:74:52:70:d9:5b:49:96:6f:67:cf:7d:2e:2d:d8:
0b:a8:c1:9a:e4:69:98:b4:55:20:e4:d5:f8:76:55:
34:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EB:F6:9F:AB:01:A3:BE:B7:EB:82:52:DE:F4:A9:F9:AB:4E:06:CC
X509v3 Authority Key Identifier:
keyid:68:30:99:00:E6:48:B6:5A:30:7A:78:60:10:2B:F7:8B:16:F5:5D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDCZAOZItlowenhgECv3ixb1XXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ae:59:79:0a:6d:79:4e:0a:f1:c0:f8:74:c7:76:4d:ba:ef:
58:05:1b:bd:5d:97:e1:b7:56:14:1c:36:68:21:01:73:e0:57:
1b:e7:91:16:7e:b5:b0:d8:01:b3:f6:26:7a:b7:2d:79:41:5b:
a4:43:a9:7f:1d:9a:f1:65:0a:c3:0f:7d:3c:4f:b6:76:30:00:
f5:98:9c:ea:33:70:ea:a4:e5:bb:fa:cb:46:2b:e0:7d:41:bb:
d3:36:58:a8:0d:c9:b6:fc:c0:e1:60:35:c5:fe:77:7d:bc:f2:
ae:a7:d2:f4:64:ec:78:54:63:b7:56:be:7b:27:6d:18:bf:a0:
0e:86:09:44:7f:02:90:da:47:14:f7:91:f7:3a:f3:9a:f6:25:
81:d1:a0:c7:cf:e8:2e:28:13:11:0a:3c:15:c2:51:28:2b:06:
b1:89:b0:81:41:91:57:84:ee:03:31:2e:86:0f:bd:06:0a:b7:
8a:69:45:e6:79:b2:bb:57:8d:d7:92:3a:14:e9:92:22:a9:9a:
35:88:33:a4:b9:d8:0e:04:52:3a:08:af:0a:29:0a:3e:b2:fd:
47:2c:77:e5:13:8e:e2:25:94:e7:fa:a1:57:8e:5f:bb:cf:ae:
5d:ca:54:fe:8e:57:e1:65:92:70:1d:69:4c:45:a5:1b:08:84:
01:b3:03:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:04:14 2026 by rpki-client