
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
File: ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft (raw, json)
Hash identifier: afCtMoC+wYpAlRcON6MaYabAp8BPz1boW/+UWS55PiU=
Subject key identifier: 75:5A:84:39:34:B4:6B:A0:E9:4A:E9:BA:99:E6:DC:A5:7B:AE:15:2E
Authority key identifier: 00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
Certificate issuer: /CN=0032534e8d560d73553c632bba10344a7c816614
Certificate serial: 019CAB348128BEAE4455588510F5AAE68B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
Manifest number: 163E
Signing time: Sun 01 Mar 2026 21:01:10 +0000
Manifest this update: Sun 01 Mar 2026 21:01:10 +0000
Manifest next update: Mon 02 Mar 2026 21:01:10 +0000
Files and hashes: 1: 8gDgcDeShfBdliF1DBTffvxw12U.roa (hash: Fz6nbI88uHxwSxo85BK5DCibUg4PuN/OzYci0coXooc=)
2: ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl (hash: VUuPCkaVx64cddZdt/TusKhG6ZvMqytAdvdgs18mXq4=)
3: jCaGFWRG0k_cfmlAxYZcjUIw_Yo.roa (hash: qpdto+41ybuG4juygcEcToReJEmG6ghtzKbjR0IgkSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:81:28:be:ae:44:55:58:85:10:f5:aa:e6:8b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0032534e8d560d73553c632bba10344a7c816614
Validity
Not Before: Mar 1 21:01:10 2026 GMT
Not After : Mar 2 21:01:10 2026 GMT
Subject: CN=755a843934b46ba0e94ae9ba99e6dca57bae152e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:06:06:0a:22:c8:46:b6:47:d2:e2:31:90:
9c:d0:af:4b:31:7d:a3:f7:bf:21:69:34:94:95:32:
e2:dd:2f:7a:05:bb:0a:82:40:53:4f:d8:b0:fa:32:
b7:bf:af:14:9d:28:fb:ca:4e:41:77:fc:74:ce:eb:
90:15:f3:c6:74:14:9a:e6:79:03:32:06:fe:6c:b3:
56:d2:1c:32:80:5b:9e:f1:bb:13:83:65:b2:62:25:
4b:d1:8d:48:e1:47:2d:1c:e3:04:b5:66:ea:dc:89:
b1:8b:a2:ae:e2:4a:87:16:81:7d:33:8f:f2:ef:28:
d5:7f:d7:4c:9a:ae:32:71:ff:73:97:3d:26:b0:1f:
7d:d2:29:32:59:91:fa:39:7e:cd:48:77:03:01:4d:
4a:22:40:fd:fd:f1:09:2c:f4:88:7a:42:50:ac:c9:
fa:75:a1:64:44:72:7a:0e:a5:fd:3e:74:7c:53:ad:
52:ea:4a:fe:09:a5:d9:53:04:15:f9:16:7f:8e:df:
28:9e:ab:8e:43:32:4f:8e:74:95:36:f6:51:53:c3:
78:34:ce:83:a3:d5:93:9e:dc:c2:3a:0b:da:81:56:
2f:79:aa:95:d3:e6:18:70:73:c0:82:79:12:ae:f9:
da:cf:97:ba:f7:cc:eb:5e:10:ff:16:97:70:fc:3d:
f9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5A:84:39:34:B4:6B:A0:E9:4A:E9:BA:99:E6:DC:A5:7B:AE:15:2E
X509v3 Authority Key Identifier:
keyid:00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ac:52:c1:19:65:2f:30:50:14:36:2d:c0:d6:f7:a2:30:ce:
42:35:c2:f8:13:14:97:9c:e5:f7:d5:66:16:d0:29:12:9a:57:
b1:ff:45:a7:3b:e6:dc:d7:78:1d:42:e3:49:47:e6:86:2d:cf:
53:33:e3:1e:63:cd:d8:b4:fc:19:84:3d:b5:b5:99:d7:56:26:
b6:64:c0:8b:44:f1:e2:2b:b4:8c:7b:52:ae:98:62:78:fe:cb:
a7:28:f9:d1:d9:7e:52:88:b0:a5:ed:d0:96:71:97:a5:1a:14:
11:25:fd:ba:41:f2:0f:c9:ba:dd:93:50:ed:d2:da:cb:16:9c:
a8:fa:ab:2c:bd:dd:9b:78:34:61:b8:22:0c:ca:c8:80:d3:6b:
a4:e7:30:a7:a6:38:75:a6:b2:fa:3b:96:1c:9a:81:8a:66:ef:
45:7d:38:a1:82:22:49:2f:57:0a:98:4c:5f:de:b8:6b:e8:49:
12:a1:8d:84:e4:78:45:ae:e7:11:42:5c:a2:42:75:fa:b4:70:
f2:29:72:08:6b:68:17:89:0d:96:eb:f1:72:30:d0:eb:bf:0c:
17:24:d8:5b:78:95:46:13:cd:80:dc:4b:5a:05:e1:90:cc:04:
4e:d5:8d:7e:67:4e:f6:3a:80:52:35:46:71:63:4c:e9:d1:94:
d5:3e:68:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:51:28 2026 by rpki-client