Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
File: dADVATwShSJCNDCTy_UUjU6uqvk.mft (raw, json)
Hash identifier: YhnVXscQ2NqA+ZgdbK7a9dUOm0VLFOY1oSn36zgFWGE=
Subject key identifier: 13:9F:BF:BE:E8:4A:3D:59:82:D7:B0:C9:23:3B:30:DB:21:45:E6:B4
Authority key identifier: 74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
Certificate issuer: /CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Certificate serial: 019D28F2D844DC58E17299381C9B535A3912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 07:01:36 +0000
Manifest this update: Thu 26 Mar 2026 07:01:36 +0000
Manifest next update: Fri 27 Mar 2026 07:01:36 +0000
Files and hashes: 1: BJ7HazHaGccfvxTQc_w6SKWhZEA.roa (hash: Pl+4ZXeFDCtsyZiimkR12UecWLcE8XYpnlEtA132eQ4=)
2: dADVATwShSJCNDCTy_UUjU6uqvk.crl (hash: UsNJZ8VoBPFbTUIEPJ/yP6Q7gtSIMAyTyHEHPj+b6OI=)
3: vF10V7lqg_z1ClW_JFRqKWSSSgs.roa (hash: 5LcZLtIG267Hhy192bqk2cmUen7W8721AugGcNOPgeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:d8:44:dc:58:e1:72:99:38:1c:9b:53:5a:39:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Validity
Not Before: Mar 26 07:01:36 2026 GMT
Not After : Mar 27 07:01:36 2026 GMT
Subject: CN=139fbfbee84a3d5982d7b0c9233b30db2145e6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bb:91:5c:a5:1b:34:3f:db:8e:99:4a:72:13:
11:1c:d6:20:46:15:98:2f:51:bf:ac:17:82:19:6d:
93:32:de:07:17:75:26:79:a4:45:06:cd:f6:46:11:
a9:f6:ab:90:51:b0:4c:f6:91:59:84:2b:d7:26:b6:
71:14:cf:c2:d9:48:bb:b3:a2:88:b6:e0:e2:4c:75:
2a:a3:25:cd:a5:b2:6e:12:0c:ff:b2:06:2d:63:26:
88:eb:64:67:70:fa:b4:5d:58:17:95:84:af:33:4f:
9f:51:52:ec:5a:9e:9e:7c:60:61:42:a4:c7:56:f7:
f3:21:60:2f:4c:6b:72:e0:41:a2:6b:92:24:a2:c1:
91:d9:fa:2c:d6:84:49:71:55:36:9c:b3:bd:08:4d:
7b:15:c5:9d:b2:b3:86:18:f5:22:16:89:b6:8a:be:
dc:2f:e7:a3:d1:a9:e6:4f:55:5c:35:b7:03:52:ff:
45:97:62:a7:f8:06:43:19:99:b6:68:14:b8:de:26:
45:9f:e6:62:73:2e:7e:9f:ce:e9:94:50:14:e7:55:
f6:bd:9d:8d:25:7d:98:39:40:78:f6:80:4a:3c:8e:
05:2f:16:85:2e:93:23:11:17:63:ad:6d:2b:50:42:
7f:b5:84:f8:a6:72:15:17:1d:f9:15:a7:cb:bb:31:
8f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9F:BF:BE:E8:4A:3D:59:82:D7:B0:C9:23:3B:30:DB:21:45:E6:B4
X509v3 Authority Key Identifier:
keyid:74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1b:85:d9:8b:60:8f:09:b0:f6:9e:d7:1a:d9:26:2f:f2:3e:
c5:db:36:06:3f:d5:63:78:8b:fd:de:cd:f2:48:90:0c:6c:19:
f0:e7:08:f2:b9:de:26:1b:77:f0:d8:7c:1b:0a:27:40:74:06:
32:63:4f:32:30:bb:15:92:75:63:e6:c5:ad:e5:f6:1e:8c:43:
ee:c2:36:05:e1:4b:de:e2:79:59:95:a8:6a:89:4b:0a:29:63:
9e:be:c1:d5:66:c7:76:55:aa:c7:95:4c:7b:9b:96:a5:73:b7:
9a:0a:94:0a:60:2d:88:0c:9c:65:c4:22:46:c1:61:a9:0b:5c:
24:7e:b2:51:46:f9:bf:4f:0d:fc:56:d4:01:bb:4c:db:79:39:
81:11:a8:a8:4c:f2:41:aa:79:7c:bb:84:95:14:0a:c8:25:96:
92:c1:41:75:eb:d0:49:be:ec:c6:83:a5:73:4c:04:40:83:25:
81:bf:37:7c:ac:1c:e4:35:bd:49:04:a6:96:d2:23:9a:3f:22:
95:58:f2:a6:c4:83:3c:75:85:29:60:f5:2c:f9:38:8a:65:9b:
00:db:c0:66:e3:59:e1:90:3b:66:b6:d9:5e:c1:63:ff:fa:d7:
17:f2:20:cf:0d:58:6f:e9:3a:bc:f6:44:92:1a:4e:5b:8d:b8:
00:48:0a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:59:44 2026 by rpki-client