Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
File: aDCZAOZItlowenhgECv3ixb1XXU.mft (raw, json)
Hash identifier: Wjnvv5g7ieN0QG33jWaDRC9R2dNiLhlmBkY4shyQwIU=
Subject key identifier: 8E:AD:4E:5B:E8:CB:D6:DE:C0:D8:8A:2E:50:4C:48:75:B4:BB:28:D4
Authority key identifier: 68:30:99:00:E6:48:B6:5A:30:7A:78:60:10:2B:F7:8B:16:F5:5D:75
Certificate issuer: /CN=68309900e648b65a307a7860102bf78b16f55d75
Certificate serial: 019FACE41D02FA33899F0438716C218C85A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDCZAOZItlowenhgECv3ixb1XXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
Manifest number: 0633
Signing time: Wed 29 Jul 2026 08:00:58 +0000
Manifest this update: Wed 29 Jul 2026 08:00:58 +0000
Manifest next update: Thu 30 Jul 2026 08:00:58 +0000
Files and hashes: 1: HbShzM3qrknCQZp2Tx1NZiWf1jk.roa (hash: YTGorDk65orDuOJJBzhtTtRRAT8YSucZuGLA7eX2VpI=)
2: aDCZAOZItlowenhgECv3ixb1XXU.crl (hash: jLrZ38rjLmEIjaUl/0rnlrx+qb3hI1S2VZiiwf+uhWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDCZAOZItlowenhgECv3ixb1XXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:1d:02:fa:33:89:9f:04:38:71:6c:21:8c:85:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68309900e648b65a307a7860102bf78b16f55d75
Validity
Not Before: Jul 29 08:00:58 2026 GMT
Not After : Jul 30 08:00:58 2026 GMT
Subject: CN=8ead4e5be8cbd6dec0d88a2e504c4875b4bb28d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ed:e2:17:b9:be:2a:82:b1:80:57:9e:74:21:
51:a8:3b:0c:f8:3a:1f:a4:7d:25:71:09:77:ec:c8:
7d:5b:3e:fc:7c:be:1a:20:44:5f:58:7b:0a:8d:49:
bc:f9:ac:3b:f1:da:da:e4:c2:ec:2b:e9:c4:28:ba:
df:51:d6:f2:75:ab:56:8c:f4:10:66:04:8a:eb:67:
f4:7d:09:83:0c:e3:e8:3a:0d:98:4a:ec:7e:ee:0d:
f0:ba:63:cd:20:cd:ea:f6:d3:06:6a:38:23:ae:db:
4a:0b:92:a9:4e:fe:8b:a9:b8:f5:b4:55:dc:10:37:
11:8f:22:a1:c4:72:70:3f:54:5f:23:d9:f0:4c:95:
7e:b6:7e:3c:ad:91:c4:ab:d1:27:df:81:9a:ca:62:
53:f0:b5:43:db:2a:37:da:db:b9:db:e3:f2:46:bd:
f1:1c:2c:9a:ea:f1:bb:b7:f6:c2:f4:79:49:39:b9:
1b:30:83:27:b8:6d:ca:3e:62:22:dd:4e:91:25:18:
a3:ec:d2:e2:a3:6d:cf:5d:94:78:1b:56:59:de:8c:
e1:01:7e:1f:57:41:3b:f4:40:6d:f0:5a:27:d9:92:
d5:89:7a:4e:04:ad:d0:9b:f9:97:e8:5f:29:6a:39:
9b:00:6e:eb:9e:b1:c6:a8:d3:01:40:ee:09:d9:ea:
e7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AD:4E:5B:E8:CB:D6:DE:C0:D8:8A:2E:50:4C:48:75:B4:BB:28:D4
X509v3 Authority Key Identifier:
keyid:68:30:99:00:E6:48:B6:5A:30:7A:78:60:10:2B:F7:8B:16:F5:5D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDCZAOZItlowenhgECv3ixb1XXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:64:3a:ca:9f:fc:af:47:6b:8e:0b:16:f6:f2:78:84:b4:cd:
2a:4c:fb:b5:92:f2:84:c1:ca:f7:b4:89:2c:4e:74:6b:95:ca:
47:a7:02:2e:b6:de:a5:60:b9:d4:3a:52:90:0b:3b:27:c3:21:
fb:e0:4d:c4:cf:e1:48:25:50:eb:50:1c:b6:a6:f0:16:23:0f:
bb:2a:2b:a0:8b:72:02:ff:bd:5d:f7:1d:4b:3d:c9:c6:29:aa:
a8:bc:52:31:26:79:d2:01:3a:d8:96:0d:9a:2d:66:3e:ad:6a:
2c:c0:2d:11:70:9e:e2:15:ef:ab:06:a0:33:95:39:f4:30:40:
bc:16:d8:e8:6f:60:69:9d:76:a2:3f:5e:0d:a6:ca:60:74:26:
04:9c:06:2f:8c:77:0c:b6:57:d5:ab:f0:4f:81:be:3c:a9:f9:
18:d5:77:f9:95:50:d7:d1:76:dc:7e:b5:28:49:51:64:2e:98:
8d:8b:7d:c3:3a:47:7a:f9:15:b6:22:de:9e:0c:ab:fd:27:c8:
9f:3e:25:10:f9:38:3d:0e:7a:87:55:39:ec:f3:c5:4e:af:b6:
25:d4:6d:c0:cc:2d:fa:99:85:52:f1:c2:af:f4:3a:56:00:7f:
19:95:c0:18:cc:66:22:42:f7:95:6e:a7:68:a9:57:bc:d0:e2:
b3:f8:f7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:37:36 2026 by rpki-client