Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
File: AdIyzG-yu_d4bZLGxq66oO2aceQ.mft (raw, json)
Hash identifier: mCiio6Z9F+PgEw3PjR3TqGO2ixKzwDqqA6LhL1stMjg=
Subject key identifier: 5C:63:75:7E:B2:F4:81:F1:EE:08:B6:BA:1A:97:E4:CD:FE:19:A9:95
Authority key identifier: 01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4
Certificate issuer: /CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
Certificate serial: 01A1D07E066CA81466DCE4360599A336B908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
Manifest number: 1AEA
Signing time: Thu 12 Nov 2026 16:01:22 +0000
Manifest this update: Thu 12 Nov 2026 16:01:22 +0000
Manifest next update: Fri 13 Nov 2026 16:01:22 +0000
Files and hashes: 1: AdIyzG-yu_d4bZLGxq66oO2aceQ.crl (hash: mM1TvrOyQV+53zO9dFKk6QkLATjBItK1vkXW0+7D570=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 15:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d0:7e:06:6c:a8:14:66:dc:e4:36:05:99:a3:36:b9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
Validity
Not Before: Nov 12 16:01:22 2026 GMT
Not After : Nov 13 16:01:22 2026 GMT
Subject: CN=5c63757eb2f481f1ee08b6ba1a97e4cdfe19a995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0d:86:b8:2d:04:a4:ff:58:5a:33:bd:10:da:
23:de:01:71:c2:21:ba:6a:43:2f:c2:28:f8:17:a5:
37:c6:ac:4d:23:3b:3d:29:45:fe:49:e6:76:cb:34:
da:5c:87:64:7f:41:27:b5:2f:6c:1c:0b:f3:3a:e5:
9b:2e:c4:03:e3:9d:6f:39:ca:ef:9e:02:73:b2:84:
12:93:a5:04:ab:25:6e:8d:33:d7:07:a1:95:1a:35:
03:86:13:24:ea:b5:92:a8:d7:01:e1:7f:38:c5:b6:
ad:5a:37:8d:a2:ac:93:02:cf:61:54:3e:b3:d3:3b:
ee:b7:1a:c6:04:5e:18:d3:e1:ac:b8:b0:4c:e8:7b:
d0:97:5e:1b:5d:ff:c4:cc:5e:1a:86:d7:25:69:85:
8c:17:25:06:1a:68:0e:24:92:d1:c1:34:56:88:1d:
18:ca:39:cb:94:03:11:e1:2a:b6:ac:6c:c7:4e:61:
48:12:80:37:5a:a8:cd:41:97:a9:9a:15:3e:e3:ff:
14:7a:bc:8d:fa:3b:09:92:27:5f:2e:55:2c:39:75:
cd:9a:87:1d:77:ab:34:c4:c8:eb:d7:34:89:ab:3c:
5e:4f:f2:8b:71:96:18:58:49:7e:86:bd:bd:55:59:
a0:be:dd:51:ff:fd:f2:29:79:12:f8:ce:44:c0:dc:
c9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:63:75:7E:B2:F4:81:F1:EE:08:B6:BA:1A:97:E4:CD:FE:19:A9:95
X509v3 Authority Key Identifier:
keyid:01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:67:96:9f:4f:91:57:12:e4:c1:4b:92:64:a1:ad:0c:ab:95:
b5:db:d3:79:aa:2b:ca:16:6e:9d:c2:77:1e:1b:1b:6b:fa:44:
f7:a0:16:be:ad:63:3a:1b:bc:58:28:6b:c7:1c:7c:14:be:22:
36:bd:02:cf:79:ba:76:5c:e2:20:c6:20:b9:da:7e:94:7f:12:
94:c3:f4:e2:98:84:42:c1:ca:c7:f9:eb:a7:0e:f3:bc:49:5b:
b8:b2:da:d7:83:74:2d:ff:6f:49:03:87:94:d6:b4:6a:82:86:
1c:fa:48:d9:2f:68:f5:b2:73:c8:14:16:32:4f:3d:62:52:1d:
8a:4d:70:35:3a:da:51:9a:04:c0:4c:16:59:67:af:56:6b:c7:
c3:a4:88:df:7f:59:07:7e:e4:c0:bc:90:a4:a0:3e:ce:9d:67:
90:48:2e:be:a1:1f:0d:b9:0d:03:ea:6f:36:f6:b5:0a:35:82:
e1:36:de:5c:68:ca:b8:26:ca:3a:b3:74:e7:f8:96:ff:2b:d9:
ca:55:d1:2d:fc:eb:7d:f6:f3:6d:4a:e0:5a:bd:08:10:8f:26:
50:7d:c2:a5:18:40:b9:c5:0b:f5:ed:9a:e3:86:a4:40:37:db:
be:56:83:e9:ac:7f:d6:53:4b:ff:7e:08:48:8d:a9:8b:50:77:
de:45:f2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 20:43:51 2026 by rpki-client