
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
File: ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft (raw, json)
Hash identifier: c4JJogTQsx3UzZknusXDi3vzb7/bUcUBF4kkLOYKc1c=
Subject key identifier: EF:3B:C2:45:73:D2:BE:8F:10:5F:FD:84:3A:61:AC:81:26:5C:BF:98
Authority key identifier: 00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
Certificate issuer: /CN=0032534e8d560d73553c632bba10344a7c816614
Certificate serial: 019FA9E2D2FB6534A8572B786705ADAECA4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
Manifest number: 17CB
Signing time: Tue 28 Jul 2026 18:00:42 +0000
Manifest this update: Tue 28 Jul 2026 18:00:42 +0000
Manifest next update: Wed 29 Jul 2026 18:00:42 +0000
Files and hashes: 1: 8gDgcDeShfBdliF1DBTffvxw12U.roa (hash: Fz6nbI88uHxwSxo85BK5DCibUg4PuN/OzYci0coXooc=)
2: ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl (hash: OSs7gnjU5K7BiRv9vSdD7oXc6PPec1lITLRhNuFSzz4=)
3: jCaGFWRG0k_cfmlAxYZcjUIw_Yo.roa (hash: qpdto+41ybuG4juygcEcToReJEmG6ghtzKbjR0IgkSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:d2:fb:65:34:a8:57:2b:78:67:05:ad:ae:ca:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0032534e8d560d73553c632bba10344a7c816614
Validity
Not Before: Jul 28 18:00:42 2026 GMT
Not After : Jul 29 18:00:42 2026 GMT
Subject: CN=ef3bc24573d2be8f105ffd843a61ac81265cbf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:a9:41:b4:bb:8e:17:bd:3a:ab:b9:1f:28:
14:92:7c:23:53:da:f9:c2:98:db:74:86:25:cd:1e:
19:75:0f:f5:07:7b:df:ae:bf:02:98:d8:74:e7:b4:
ae:83:43:59:97:70:47:73:84:a3:28:28:3d:e8:9f:
09:dd:5d:85:39:b0:aa:24:1a:a4:5c:db:9f:85:ee:
9b:72:12:31:ad:b5:41:95:13:3d:0a:db:e7:6a:65:
8c:51:90:bf:91:1d:6a:0b:fd:d5:ec:a9:d0:13:9e:
2c:ee:91:a0:f1:cf:c6:6e:30:84:69:16:5d:45:6e:
f0:88:c8:b3:48:2e:ff:4c:17:c4:e8:2f:9e:2f:75:
cc:26:f6:8e:24:cf:4a:41:62:c4:a2:33:29:ef:05:
25:e5:f5:de:bb:15:4d:33:a1:7c:1c:4a:aa:f1:ec:
24:91:0c:b5:93:45:28:d7:46:3b:c5:92:0d:9a:13:
56:87:11:6b:56:f5:77:ba:60:bc:a2:20:b7:ad:22:
53:22:e2:46:25:42:cf:33:b3:3b:c3:fc:b9:16:e2:
5b:5d:e9:f3:4d:bb:85:19:5d:0c:8b:e1:2e:72:78:
6e:0f:1c:6c:00:c2:23:c9:3a:11:fa:4f:b5:3a:60:
b4:60:f2:98:7d:29:ac:90:0f:d0:9e:d0:81:7f:5e:
02:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3B:C2:45:73:D2:BE:8F:10:5F:FD:84:3A:61:AC:81:26:5C:BF:98
X509v3 Authority Key Identifier:
keyid:00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:91:ff:be:df:78:72:a6:64:dc:9c:14:eb:8c:3a:ce:f0:62:
24:98:0f:84:1c:17:5e:5a:b5:37:11:1f:0b:64:d1:d4:74:c3:
f8:63:c4:45:fc:17:5f:c7:6d:9f:0b:b6:00:53:86:2a:6e:dd:
6a:db:aa:62:d7:e4:47:61:e6:ca:a5:72:20:b9:a2:71:df:2a:
69:ab:bc:4f:e5:37:d2:b7:fc:6b:db:9b:97:52:5a:af:55:78:
17:1b:78:5c:b2:81:17:c2:e1:cd:d7:b2:32:88:1a:b3:8b:4d:
12:87:4f:70:42:83:2c:97:bb:71:58:a0:21:6c:67:e6:49:6a:
2c:ea:96:da:b3:d6:f4:01:e2:38:14:83:32:12:42:64:31:c6:
00:82:51:c8:3b:0a:5c:24:95:5e:59:8d:96:a2:48:d1:79:1a:
d1:69:49:70:df:c1:65:69:b7:ce:2e:32:e4:e2:c9:7a:1b:64:
65:4d:94:be:a9:c5:4a:84:77:cd:e4:b0:2e:2e:72:ec:45:5b:
90:ec:19:09:e8:6b:c6:90:b0:68:01:ea:a3:66:32:0d:4b:5d:
7c:19:f0:69:e3:9e:ed:f5:16:ca:30:fa:60:d7:58:31:28:84:
f3:7d:9e:bc:45:a0:7f:f1:89:5d:2a:8c:a5:21:18:5b:bf:73:
43:c3:a2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:06:27 2026 by rpki-client