Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
File: ADoNFLA-o0Lt47L0mtjKor904XA.mft (raw, json)
Hash identifier: +wsQBJXZ1QMYOEXroafkXmhrPmpUGxyDpq06S+SPZLo=
Subject key identifier: A3:87:71:5E:DB:36:E8:7F:8B:2F:05:8E:C2:4D:4C:37:71:DC:96:EF
Authority key identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
Certificate issuer: /CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Certificate serial: 01A0BF1E1D354A4E0AF2D75D66FAD873B860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
Manifest number: 19F6
Signing time: Sun 20 Sep 2026 14:00:16 +0000
Manifest this update: Sun 20 Sep 2026 14:00:16 +0000
Manifest next update: Mon 21 Sep 2026 14:00:16 +0000
Files and hashes: 1: ADoNFLA-o0Lt47L0mtjKor904XA.crl (hash: Tvq0uf4EXqppmkX5/8xz1PF1WHTDPcDxKKMaggHjnRQ=)
2: u_0x-93wRipLEsiXiJYw22k7HiU.roa (hash: +BCrolIUDpbIUCoEtT/iRhQzDMhtVgzJiegCAfiFXec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:1e:1d:35:4a:4e:0a:f2:d7:5d:66:fa:d8:73:b8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Validity
Not Before: Sep 20 14:00:16 2026 GMT
Not After : Sep 21 14:00:16 2026 GMT
Subject: CN=a387715edb36e87f8b2f058ec24d4c3771dc96ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:38:1d:be:9f:a0:4a:69:80:a4:33:f6:af:b6:
93:f6:6c:dc:05:26:ad:4d:72:ef:82:a0:b7:6a:7c:
f8:4d:e4:13:65:14:cb:9c:cb:50:a3:ad:da:18:02:
31:c8:7d:fb:24:d6:1c:c9:38:30:d6:24:3f:c8:8f:
e0:eb:c1:90:17:f1:81:d3:ea:82:76:0d:d6:60:fe:
e1:64:f0:b8:f5:fe:a8:d8:2d:78:21:9c:c5:60:be:
d8:42:ba:92:3b:e1:5b:a9:b3:af:5d:2e:24:56:5e:
6b:eb:54:ea:ba:ec:81:5a:e8:6b:98:ff:fc:e6:33:
15:ed:f6:cf:73:25:19:9f:68:74:77:fc:55:89:b4:
1f:3c:fe:3e:f8:3a:69:74:27:60:f5:dc:a3:00:32:
89:1c:18:5b:6a:f4:62:21:0a:7d:2a:2a:2d:7d:83:
37:91:98:6c:f6:05:f6:ff:ee:4e:10:83:d6:d2:05:
82:cb:bc:f4:17:46:c6:ac:a4:14:78:bf:28:1b:d4:
81:77:49:e0:35:69:b3:d7:a7:76:0f:f1:63:06:c0:
be:48:3a:2b:ae:e6:59:ba:21:92:35:55:15:7d:f5:
21:d4:93:73:b6:07:b6:a0:b7:8b:d4:8c:a4:0f:d6:
9c:1e:d5:0a:44:7e:7a:0d:5f:73:0b:46:8c:6d:42:
b9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:87:71:5E:DB:36:E8:7F:8B:2F:05:8E:C2:4D:4C:37:71:DC:96:EF
X509v3 Authority Key Identifier:
keyid:00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:57:dc:94:ed:34:31:c5:1e:04:8c:6f:0e:47:20:93:10:0d:
3a:aa:1d:5a:68:b4:7a:ba:7d:7c:08:40:99:a9:98:4c:85:36:
f7:e8:01:3e:76:9d:9a:f8:78:e2:31:14:99:9c:b8:ab:78:92:
74:36:07:3b:c3:d0:d9:dc:55:77:35:f4:32:81:28:21:01:5e:
ac:f3:c8:90:20:dd:78:03:25:78:fd:ed:7f:7b:56:e8:8d:3a:
a2:89:42:de:24:cf:e7:02:0e:2d:c6:ac:e4:9a:de:41:eb:e0:
2d:52:36:f9:c2:84:eb:8b:73:10:4e:bc:21:f9:37:7a:c6:77:
0f:49:90:4e:97:82:ae:fd:a1:74:71:16:91:e2:3c:1d:24:b6:
c7:30:af:2f:05:90:3f:7f:b1:4e:9d:a8:a3:05:a4:02:c0:62:
d7:4f:1c:3c:11:c5:9b:bf:39:a1:e8:4d:a2:4d:6f:47:63:28:
66:2d:93:3a:b9:e6:ff:60:5c:8c:5a:9b:73:1b:7d:f8:c2:15:
45:6c:68:97:91:b8:ee:7a:2e:b6:32:a0:29:df:5a:bc:77:11:
a1:eb:a2:8b:1d:da:94:77:1f:5e:42:69:18:6f:29:7e:be:57:
81:07:df:dc:2f:d2:00:c5:60:9c:e1:b2:5f:e8:f2:6a:d0:62:
21:57:84:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:14:56 2026 by rpki-client