Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
File: ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft (raw, json)
Hash identifier: JoZUGyJxdNwRgjArpi6s4Y9eB0MRS1BWoEGoo/Tu6RE=
Subject key identifier: FA:08:43:1D:18:0D:BC:8E:D6:15:4C:86:67:CA:DB:25:70:B2:3F:D1
Authority key identifier: 00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
Certificate issuer: /CN=0032534e8d560d73553c632bba10344a7c816614
Certificate serial: 019D9AAC1D0922581E6ED1F165F6CBE119A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
Manifest number: 16BA
Signing time: Fri 17 Apr 2026 09:01:03 +0000
Manifest this update: Fri 17 Apr 2026 09:01:03 +0000
Manifest next update: Sat 18 Apr 2026 09:01:03 +0000
Files and hashes: 1: 8gDgcDeShfBdliF1DBTffvxw12U.roa (hash: Fz6nbI88uHxwSxo85BK5DCibUg4PuN/OzYci0coXooc=)
2: ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl (hash: sPgUYay62K5n1fNpkfBkwl9SMHlOnWnqHunvkqfLa3M=)
3: jCaGFWRG0k_cfmlAxYZcjUIw_Yo.roa (hash: qpdto+41ybuG4juygcEcToReJEmG6ghtzKbjR0IgkSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:1d:09:22:58:1e:6e:d1:f1:65:f6:cb:e1:19:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0032534e8d560d73553c632bba10344a7c816614
Validity
Not Before: Apr 17 09:01:03 2026 GMT
Not After : Apr 18 09:01:03 2026 GMT
Subject: CN=fa08431d180dbc8ed6154c8667cadb2570b23fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:37:53:e0:89:bc:34:58:67:c8:40:0e:d7:29:
f1:f2:08:30:bb:cb:30:12:05:6c:37:de:db:43:45:
ab:44:88:10:c7:49:a4:1b:ae:98:57:ef:63:a9:a8:
b3:c2:36:e9:62:e0:93:ac:4c:db:bf:77:9c:ec:3c:
c2:a7:43:14:67:de:5a:e9:cf:e7:b8:58:a8:b1:9a:
7e:25:ed:b4:12:31:27:11:fb:55:bc:85:fc:b8:d2:
07:43:52:67:dc:e7:92:cf:60:a1:a3:f9:b5:39:33:
61:fd:98:20:88:2a:5a:22:00:dc:a3:bc:9f:cb:87:
80:a2:cb:30:b5:a1:ac:66:e6:8e:f2:95:a9:6d:05:
9a:2f:4d:66:21:b4:77:7b:69:01:66:3a:fc:97:9a:
c3:87:f1:af:f0:c4:fd:41:72:f2:d7:1e:77:fd:c0:
dc:a7:f2:61:5c:c9:3e:7f:69:63:4d:dc:00:c8:86:
b4:34:39:79:4d:6e:7d:86:c3:23:f6:ec:ac:60:20:
63:6e:9e:15:c8:61:9f:c7:29:1d:4d:65:e1:c4:52:
6c:60:54:9e:90:c9:64:a6:e0:94:f3:f9:a1:8f:56:
e2:c6:c0:7e:7f:30:cd:d4:6e:a7:99:57:c6:db:54:
44:e9:52:15:c8:30:85:74:d4:90:65:01:43:f7:67:
5c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:08:43:1D:18:0D:BC:8E:D6:15:4C:86:67:CA:DB:25:70:B2:3F:D1
X509v3 Authority Key Identifier:
keyid:00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:55:a9:4e:45:3e:7c:74:10:08:57:54:88:d5:e8:55:c6:6f:
8b:6e:89:d3:ab:ca:6a:26:a1:74:a1:7e:e6:2a:a1:00:99:51:
2c:96:06:d6:f3:f6:94:18:de:14:de:1c:99:90:42:37:08:40:
c9:7f:43:96:d7:0e:12:8c:f3:88:7f:19:e7:99:1c:dd:b6:08:
4b:51:28:ee:c3:e1:43:e9:18:b2:4f:dd:fb:5f:83:b2:5e:a3:
e4:58:0f:c6:8b:d4:96:99:7b:0d:d4:63:cf:44:e8:97:61:f9:
2c:a5:46:2d:4c:55:dc:c2:15:93:b7:6e:15:db:15:1f:94:f1:
34:dd:d8:7d:50:b7:41:5c:14:f1:e8:34:e3:b1:3a:eb:60:2f:
0e:c5:60:72:88:e3:d5:97:d0:f9:03:2a:ad:b5:68:00:3e:0d:
57:3c:26:7c:36:19:b3:20:46:27:28:97:2a:a0:ca:8e:60:97:
96:8c:14:db:5d:1a:4f:08:14:4a:d0:29:ae:5a:9e:6f:89:0e:
3a:bb:b6:38:ac:c0:48:57:6a:e5:0d:54:a8:d4:69:62:bc:a7:
e0:8e:15:06:0d:86:51:7a:e3:92:22:12:78:17:48:53:51:b4:
40:16:69:9b:5e:7d:3c:99:60:b9:3a:60:b1:ca:3f:90:bf:35:
c1:77:db:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arB0JIlgebtHxZfbL4RmpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMzI1MzRlOGQ1NjBkNzM1NTNjNjMyYmJhMTAzNDRhN2M4
MTY2MTQwHhcNMjYwNDE3MDkwMTAzWhcNMjYwNDE4MDkwMTAzWjAzMTEwLwYDVQQD
EyhmYTA4NDMxZDE4MGRiYzhlZDYxNTRjODY2N2NhZGIyNTcwYjIzZmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzdT4Im8NFhnyEAO1ynx8ggwu8sw
EgVsN97bQ0WrRIgQx0mkG66YV+9jqaizwjbpYuCTrEzbv3ec7DzCp0MUZ95a6c/n
uFiosZp+Je20EjEnEftVvIX8uNIHQ1Jn3OeSz2Cho/m1OTNh/ZggiCpaIgDco7yf
y4eAosswtaGsZuaO8pWpbQWaL01mIbR3e2kBZjr8l5rDh/Gv8MT9QXLy1x53/cDc
p/JhXMk+f2ljTdwAyIa0NDl5TW59hsMj9uysYCBjbp4VyGGfxykdTWXhxFJsYFSe
kMlkpuCU8/mhj1bixsB+fzDN1G6nmVfG21RE6VIVyDCFdNSQZQFD92dc/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoIQx0YDbyO1hVMhmfK2yVwsj/RMB8GA1UdIwQY
MBaAFAAyU06NVg1zVTxjK7oQNEp8gWYUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQURKVFRvMVdEWE5WUEdNcnVoQTBTbnlCWmhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kZWUxZWUtOTM4NC00NWFiLWE3MGEt
NWVhZTZlZDU4Mzc1LzEvQURKVFRvMVdEWE5WUEdNcnVoQTBTbnlCWmhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9kZWUxZWUtOTM4NC00NWFiLWE3MGEtNWVhZTZlZDU4Mzc1
LzEvQURKVFRvMVdEWE5WUEdNcnVoQTBTbnlCWmhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1WpTkU+
fHQQCFdUiNXoVcZvi26J06vKaiahdKF+5iqhAJlRLJYG1vP2lBjeFN4cmZBCNwhA
yX9DltcOEozziH8Z55kc3bYIS1Eo7sPhQ+kYsk/d+1+Dsl6j5FgPxovUlpl7DdRj
z0Tol2H5LKVGLUxV3MIVk7duFdsVH5TxNN3YfVC3QVwU8eg047E662AvDsVgcojj
1ZfQ+QMqrbVoAD4NVzwmfDYZsyBGJyiXKqDKjmCXlowU210aTwgUStAprlqeb4kO
Oru2OKzASFdq5Q1UqNRpYryn4I4VBg2GUXrjkiISeBdIU1G0QBZpm159PJlguTpg
sco/kL81wXfbRA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:53:51 2026 by rpki-client