Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
File: ADoNFLA-o0Lt47L0mtjKor904XA.mft (raw, json)
Hash identifier: Zr9ZaROOtcOwUBPQ8dUExu8JBt9kuc64aSXKT8UCxJA=
Subject key identifier: 01:EF:18:D8:B4:DC:17:3C:B5:8C:F6:76:36:A8:0A:8E:8C:DE:7C:D4
Authority key identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
Certificate issuer: /CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Certificate serial: 019CAC46B8E525B6D5F28B6A5F8851A585FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
Manifest number: 17DA
Signing time: Mon 02 Mar 2026 02:00:41 +0000
Manifest this update: Mon 02 Mar 2026 02:00:41 +0000
Manifest next update: Tue 03 Mar 2026 02:00:41 +0000
Files and hashes: 1: ADoNFLA-o0Lt47L0mtjKor904XA.crl (hash: ZAiKXGkGK6cTrWfS1gkZbdsWDEQWWxXh5q7FvbwOQ3Y=)
2: u_0x-93wRipLEsiXiJYw22k7HiU.roa (hash: +BCrolIUDpbIUCoEtT/iRhQzDMhtVgzJiegCAfiFXec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:b8:e5:25:b6:d5:f2:8b:6a:5f:88:51:a5:85:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Validity
Not Before: Mar 2 02:00:41 2026 GMT
Not After : Mar 3 02:00:41 2026 GMT
Subject: CN=01ef18d8b4dc173cb58cf67636a80a8e8cde7cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:b5:d2:79:a5:e9:11:ae:33:d7:29:15:53:
ce:5d:56:6b:f4:e4:10:62:60:56:65:be:06:9a:21:
7f:c6:91:39:60:04:a3:80:4a:c3:61:2d:da:74:40:
9d:f1:10:24:49:03:09:8f:8e:4c:73:d0:dd:36:21:
2e:43:6d:6b:ba:cc:34:07:b7:69:b8:9e:49:77:a7:
b9:55:9b:c9:e6:6e:15:6d:f2:33:98:a4:e5:57:5d:
f1:34:1b:eb:1e:39:00:bb:87:76:e5:fa:83:54:24:
08:7e:f5:d0:dc:89:0b:2d:3c:84:32:c2:9c:57:60:
4d:78:d8:0f:98:19:ab:fd:22:94:74:fa:69:a9:16:
24:a8:40:3c:0a:18:0f:31:4e:86:00:bd:27:24:b8:
b7:89:a8:da:b6:2d:50:b0:6c:19:0c:ae:2f:1f:43:
6d:34:1a:2b:00:ae:31:ed:52:a3:6e:01:6a:9e:a5:
b2:8e:4d:65:8c:16:0c:e8:53:3c:c4:2e:f2:72:3d:
92:18:cc:99:59:98:e2:00:c3:49:0b:cc:f1:59:83:
57:de:4d:72:e4:12:ca:62:47:b0:f2:0f:52:bf:81:
42:7c:b0:d3:c3:a8:ee:10:81:5c:97:70:0f:87:dc:
63:63:b1:f2:bd:b8:23:07:7c:8d:3d:7d:6e:cd:37:
80:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EF:18:D8:B4:DC:17:3C:B5:8C:F6:76:36:A8:0A:8E:8C:DE:7C:D4
X509v3 Authority Key Identifier:
keyid:00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d2:a4:65:ce:98:b6:81:cf:e3:ee:2b:f8:74:f2:b7:46:96:
3f:86:05:0d:4d:e2:19:76:7a:7e:7c:f1:cf:a5:ee:4f:f7:32:
2e:16:76:b7:6f:c3:da:e5:89:6c:1d:8a:83:e0:01:6e:40:98:
ab:94:eb:30:b4:9f:90:ed:56:d9:ca:ff:73:55:93:66:1d:6e:
7b:89:83:dc:f5:b3:2c:47:e4:37:0c:c9:9a:4d:a1:07:8d:81:
49:ff:cc:27:3c:fb:5b:77:85:f5:c1:5c:61:d4:77:1d:14:90:
76:50:e1:02:34:b1:4b:f7:fe:50:b3:36:41:a4:42:9f:1b:59:
8d:57:37:17:d5:d8:65:22:37:a8:bc:3a:98:a7:47:c2:c7:b3:
00:a9:ab:6b:e3:01:77:7f:99:69:54:c4:3d:cb:5d:19:e6:2f:
95:44:0e:2c:a8:28:f7:58:a4:81:49:85:26:4e:c7:de:31:06:
5c:04:64:70:ea:1f:e5:09:bf:02:59:97:a4:f3:8e:f9:f7:22:
d8:e4:5d:0b:7a:79:4e:8a:a2:14:91:ff:1d:9d:ec:52:39:89:
3d:c3:d6:63:ca:be:35:36:f6:8f:8d:ef:9e:60:8c:fb:c2:17:
a3:9a:df:de:57:41:14:59:0b:1d:ae:30:8e:a2:6e:ed:e9:55:
29:4d:0c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:00 2026 by rpki-client