Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
File: ADoNFLA-o0Lt47L0mtjKor904XA.mft (raw, json)
Hash identifier: IYWKMtwPx+cyi7q5j8LcroY8846CPImqLshNd243/jg=
Subject key identifier: E0:B8:54:E2:F6:E0:B3:F7:A2:A0:BE:CD:71:44:94:EF:F8:81:39:43
Authority key identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
Certificate issuer: /CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Certificate serial: 019CAA5925F6573FEF9D092F80DBF924F711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
Manifest number: 17D9
Signing time: Sun 01 Mar 2026 17:01:34 +0000
Manifest this update: Sun 01 Mar 2026 17:01:34 +0000
Manifest next update: Mon 02 Mar 2026 17:01:34 +0000
Files and hashes: 1: ADoNFLA-o0Lt47L0mtjKor904XA.crl (hash: kN0/5kGu4VV/xtCySLCQ4mVbgqk0wxawZsMvGkRlXAg=)
2: u_0x-93wRipLEsiXiJYw22k7HiU.roa (hash: +BCrolIUDpbIUCoEtT/iRhQzDMhtVgzJiegCAfiFXec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:25:f6:57:3f:ef:9d:09:2f:80:db:f9:24:f7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Validity
Not Before: Mar 1 17:01:34 2026 GMT
Not After : Mar 2 17:01:34 2026 GMT
Subject: CN=e0b854e2f6e0b3f7a2a0becd714494eff8813943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:46:9e:69:5b:b3:0b:5f:40:02:eb:b8:15:
da:7e:d8:01:c1:79:72:2b:48:4e:47:93:b8:c0:2d:
9a:0e:6d:d7:33:61:00:88:9e:57:ec:b2:3f:c9:5c:
f9:c9:97:22:19:9f:8c:67:0b:2f:ba:9c:9e:52:82:
3d:a9:78:ca:cb:34:d0:b3:10:c1:52:e7:17:b2:c9:
a5:c0:6a:31:92:31:65:b7:89:3b:b8:26:b2:12:bf:
0c:f8:22:63:4b:c2:75:98:59:99:f7:9e:2a:66:ca:
e6:aa:97:e4:42:bf:93:06:dc:e2:2b:ff:1d:5d:19:
6b:53:2e:3f:81:8d:d9:2b:b8:0a:f1:10:ac:6e:91:
61:30:36:30:5d:5d:79:f2:0c:a0:6c:60:91:0c:1e:
c0:63:12:6a:10:cf:f2:b4:8f:ed:ff:29:08:45:cf:
71:cd:ce:ef:f6:e6:ea:fa:65:8a:51:4a:15:d0:2b:
67:6b:97:95:ea:f1:af:93:24:89:dc:71:07:90:2b:
a7:6b:3e:7e:4c:7e:7c:83:fe:2d:9d:b9:b3:a0:ac:
c4:bf:62:de:89:6a:a6:01:8f:a3:55:19:8e:fb:5e:
97:e4:22:a5:9f:ca:70:03:bb:23:13:ff:dc:ea:ab:
b6:96:06:b8:57:33:7b:30:e6:1b:af:2b:df:12:47:
65:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B8:54:E2:F6:E0:B3:F7:A2:A0:BE:CD:71:44:94:EF:F8:81:39:43
X509v3 Authority Key Identifier:
keyid:00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a2:ef:7f:4b:27:98:85:76:d1:d2:d6:1e:35:b2:6b:b8:aa:
d6:cd:72:6f:1c:e6:5e:f9:0f:24:16:e2:2b:d1:73:75:02:70:
1a:2d:33:3e:bd:5d:ba:80:63:f1:8a:38:ee:50:5c:0c:7e:0d:
9d:1e:ce:57:d5:5d:5a:b1:eb:21:d3:c9:11:c3:4d:9f:9a:70:
42:70:d0:c4:89:01:e1:fc:95:01:c0:51:7f:8a:13:25:ab:aa:
37:ac:5d:c4:73:b8:47:ef:e1:20:c4:a6:a1:d5:44:62:be:7f:
5b:85:71:22:09:14:2d:e8:c5:b1:f0:d6:3e:3f:46:dd:27:e7:
f6:9d:00:90:39:5a:b3:c5:3e:95:10:50:ed:11:fc:d7:23:0e:
1d:22:a6:7d:ca:3b:72:fe:1e:5f:11:45:e9:85:a2:64:5f:05:
a4:7d:27:19:55:30:3a:3f:68:31:31:48:f2:23:7c:e1:69:44:
c1:7d:be:34:2e:c6:00:d8:5b:49:50:c1:43:93:1d:4e:64:27:
50:e1:69:a1:83:ba:a2:00:51:cf:cf:ef:12:50:91:d6:3b:60:
91:8b:10:ed:43:25:a4:10:b2:3f:e9:7a:95:83:41:1f:f3:f2:
87:3a:f1:09:0b:df:92:d1:b0:5d:95:0e:0d:e7:fc:b7:1b:ae:
9c:d4:89:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWSX2Vz/vnQkvgNv5JPcRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwM2EwZDE0YjAzZWEzNDJlZGUzYjJmNDlhZDhjYWEyYmY3
NGUxNzAwHhcNMjYwMzAxMTcwMTM0WhcNMjYwMzAyMTcwMTM0WjAzMTEwLwYDVQQD
EyhlMGI4NTRlMmY2ZTBiM2Y3YTJhMGJlY2Q3MTQ0OTRlZmY4ODEzOTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi5GnmlbswtfQALruBXaftgBwXly
K0hOR5O4wC2aDm3XM2EAiJ5X7LI/yVz5yZciGZ+MZwsvupyeUoI9qXjKyzTQsxDB
UucXssmlwGoxkjFlt4k7uCayEr8M+CJjS8J1mFmZ954qZsrmqpfkQr+TBtziK/8d
XRlrUy4/gY3ZK7gK8RCsbpFhMDYwXV158gygbGCRDB7AYxJqEM/ytI/t/ykIRc9x
zc7v9ubq+mWKUUoV0Ctna5eV6vGvkySJ3HEHkCunaz5+TH58g/4tnbmzoKzEv2Le
iWqmAY+jVRmO+16X5CKln8pwA7sjE//c6qu2lga4VzN7MOYbryvfEkdl9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOC4VOL24LP3oqC+zXFElO/4gTlDMB8GA1UdIwQY
MBaAFAA6DRSwPqNC7eOy9JrYyqK/dOFwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYTI1MmEtYWY0Yi00ZWVhLWFjZGIt
MmZkZDFmZDk5NjU3LzEvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8zYTI1MmEtYWY0Yi00ZWVhLWFjZGItMmZkZDFmZDk5NjU3
LzEvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMaLvf0sn
mIV20dLWHjWya7iq1s1ybxzmXvkPJBbiK9FzdQJwGi0zPr1duoBj8Yo47lBcDH4N
nR7OV9VdWrHrIdPJEcNNn5pwQnDQxIkB4fyVAcBRf4oTJauqN6xdxHO4R+/hIMSm
odVEYr5/W4VxIgkULejFsfDWPj9G3Sfn9p0AkDlas8U+lRBQ7RH81yMOHSKmfco7
cv4eXxFF6YWiZF8FpH0nGVUwOj9oMTFI8iN84WlEwX2+NC7GANhbSVDBQ5MdTmQn
UOFpoYO6ogBRz8/vElCR1jtgkYsQ7UMlpBCyP+l6lYNBH/PyhzrxCQvfktGwXZUO
Def8txuunNSJoQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:51:47 2026 by rpki-client