Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
File: adEXVt0Db1nuEef4Gkh6b90jE20.mft (raw, json)
Hash identifier: g9BnrCtg5IOuVnTB5gf3mB5omuVxNN4wTED0oL336/Q=
Subject key identifier: 47:BB:C2:84:9B:CE:73:FF:1E:E5:6A:28:80:B5:40:55:19:DF:70:37
Authority key identifier: 69:D1:17:56:DD:03:6F:59:EE:11:E7:F8:1A:48:7A:6F:DD:23:13:6D
Certificate issuer: /CN=69d11756dd036f59ee11e7f81a487a6fdd23136d
Certificate serial: 019D2B17285E368FF9BC8930E57EB08815B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
Manifest number: 0A9B
Signing time: Thu 26 Mar 2026 17:00:31 +0000
Manifest this update: Thu 26 Mar 2026 17:00:31 +0000
Manifest next update: Fri 27 Mar 2026 17:00:31 +0000
Files and hashes: 1: adEXVt0Db1nuEef4Gkh6b90jE20.crl (hash: 0F39xJOj5q/HnCZmYn8C5Tc0OD3Jrszh4ZWTjZ6gnm8=)
2: t_-NpvrkXWMv7C05VfgVliOFopk.roa (hash: NqyEdBD2lmR97sQbX1ZX27Jyq9s7SuLfnBHNWVP5NB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:28:5e:36:8f:f9:bc:89:30:e5:7e:b0:88:15:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d11756dd036f59ee11e7f81a487a6fdd23136d
Validity
Not Before: Mar 26 17:00:31 2026 GMT
Not After : Mar 27 17:00:31 2026 GMT
Subject: CN=47bbc2849bce73ff1ee56a2880b5405519df7037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e6:f4:87:7e:42:31:68:7c:07:93:1d:27:9e:
7c:40:03:25:ed:cf:41:4d:64:e9:b1:60:e1:91:eb:
1e:e9:67:93:ea:a3:84:56:45:61:a3:99:a7:90:3b:
a8:35:9b:f3:bc:30:42:02:a1:a4:5a:cb:c8:73:d7:
55:7d:3a:64:33:c3:32:06:99:94:ff:b8:90:03:09:
35:83:d5:19:a2:d9:3f:14:f8:3b:34:49:d8:fa:8e:
07:6e:b0:a4:26:58:aa:c6:76:55:cd:d9:52:fd:f2:
0c:20:9b:e4:b4:79:40:e5:7f:ae:38:0c:d1:68:92:
80:37:11:ff:de:01:1b:f0:02:3b:f8:36:ca:98:f1:
13:48:53:33:60:f5:16:11:87:b7:1a:4a:42:f9:77:
fa:8f:a3:35:2e:34:73:b0:a4:87:cd:dd:f9:1a:21:
58:9d:3f:1d:33:8b:97:d6:eb:1b:d3:d3:2f:c5:7c:
7f:e2:ec:53:08:ab:42:3d:9c:21:21:5d:d5:ad:ec:
13:d6:dc:14:62:89:7e:b1:15:ff:04:70:7e:ac:3b:
01:1a:24:3d:5c:13:4a:6c:cd:a7:49:31:17:42:0b:
a9:a5:d9:d4:6f:77:17:5a:26:de:74:fa:f8:2f:62:
2d:6c:b8:90:3a:f2:23:2f:60:38:f2:9e:b7:47:64:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BB:C2:84:9B:CE:73:FF:1E:E5:6A:28:80:B5:40:55:19:DF:70:37
X509v3 Authority Key Identifier:
keyid:69:D1:17:56:DD:03:6F:59:EE:11:E7:F8:1A:48:7A:6F:DD:23:13:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2e:f6:f7:df:5c:c5:5b:41:91:5e:b4:38:3e:80:ff:26:7d:
54:1a:89:57:93:a8:6a:5a:d4:0b:02:2f:15:c1:11:a6:e2:4d:
d5:f5:60:c3:4c:1d:61:af:4e:32:6e:34:4a:93:0e:88:66:41:
01:91:c2:e7:23:97:10:8d:30:2f:12:f1:2f:03:2c:80:e2:c3:
cf:23:56:38:1e:33:85:16:bf:10:aa:92:5b:f3:4a:b0:a9:99:
f5:16:e9:9e:bd:35:8a:33:b4:04:2c:73:41:1d:cd:04:9b:68:
2e:8e:c1:f3:cb:3f:74:9a:de:b7:62:b1:78:f1:08:2f:c0:2d:
3f:99:dc:39:c9:37:37:98:97:0a:b3:d5:1e:b8:43:8e:c4:64:
46:d8:f6:5d:b9:0c:4b:7d:b8:e8:c6:9f:c9:6a:94:98:2a:71:
0f:13:2f:6d:ed:76:34:b6:e6:56:91:3e:e2:be:a9:f9:20:8b:
42:8d:d4:75:65:17:c2:0c:7b:e4:d6:0d:d1:7d:76:8f:f0:8b:
f0:54:e5:d1:f4:36:bf:6a:8d:8a:ad:a7:9c:0f:ca:59:00:b2:
7f:ce:74:be:aa:60:cf:5d:0c:3a:80:73:d6:f1:23:1d:31:d8:
d6:19:20:f1:00:19:0a:51:b5:48:c2:2f:9e:43:f4:82:77:84:
72:51:a3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:38:33 2026 by rpki-client