Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
File: AdULmAcVDaOWMiudTc_A0vsrZSA.mft (raw, json)
Hash identifier: DrgxTlzqrgOw4E9yq0UpKNmNS1LEa4AhJPpBuSOuZO4=
Subject key identifier: C0:20:25:09:61:F5:09:53:4E:63:A0:64:8C:3E:76:5D:D0:F0:F2:4D
Authority key identifier: 01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20
Certificate issuer: /CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
Certificate serial: 01A0D0493C102A2FFEBC8570D72618180AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
Manifest number: 0ABE
Signing time: Wed 23 Sep 2026 22:00:55 +0000
Manifest this update: Wed 23 Sep 2026 22:00:55 +0000
Manifest next update: Thu 24 Sep 2026 22:00:55 +0000
Files and hashes: 1: AdULmAcVDaOWMiudTc_A0vsrZSA.crl (hash: woSuSLDCzBWWbY2XPcOBK3h64jOyxUNe+iu0mVgmlRw=)
2: uiwMttqxMzyYLQF8qEOVXUg9Ojg.roa (hash: e2JqwtqqkS6AcVv80pzTttUERY6557Im301R/2ucBQs=)
3: xSMo8UNuABk66wueztspa3AS7aE.roa (hash: 0TgB5/hOvn7dMDflKmn1c8RImHQ34JWH4S779C2eW2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:49:3c:10:2a:2f:fe:bc:85:70:d7:26:18:18:0a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
Validity
Not Before: Sep 23 22:00:55 2026 GMT
Not After : Sep 24 22:00:55 2026 GMT
Subject: CN=c020250961f509534e63a0648c3e765dd0f0f24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9f:b4:4a:ba:d8:fc:9c:3b:82:0f:79:28:2e:
f8:01:fa:fb:78:4a:b6:45:7f:5e:ba:bc:65:22:e7:
1c:13:3a:c0:7a:ca:9d:1f:a1:82:59:ad:00:a6:4e:
e4:6c:ad:b6:e5:87:fc:34:0d:a4:69:fd:63:ea:40:
2a:7b:91:db:eb:4c:76:ca:41:4e:9b:da:a5:48:68:
10:1e:00:84:d6:e1:f7:de:a0:b4:33:2f:ce:02:8f:
db:49:23:a0:df:83:a9:04:d2:e6:9c:be:d9:09:91:
63:54:8b:7d:a7:a2:e7:b7:f3:01:e6:e6:8a:5d:e8:
91:49:3b:40:28:ec:6c:88:81:d9:58:cf:aa:5d:b8:
4d:13:ee:e9:36:70:f8:82:12:e0:18:3a:3c:34:54:
e5:9f:85:56:f9:21:d8:15:94:f1:64:e7:a7:62:ab:
31:f2:e6:67:0b:b5:2b:19:c0:b8:8e:1a:11:a2:79:
ea:70:45:bb:2b:74:55:75:74:f5:50:dc:bc:f1:61:
cc:d2:c9:da:de:43:a6:26:1e:a7:5c:54:b8:f8:19:
b3:30:ac:48:67:5e:45:5f:29:a5:82:6c:db:25:d4:
be:4d:c1:9f:83:35:02:72:83:3e:99:37:28:14:b0:
1f:64:dd:22:d1:9c:0b:50:c7:67:87:38:8f:3f:1a:
64:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:20:25:09:61:F5:09:53:4E:63:A0:64:8C:3E:76:5D:D0:F0:F2:4D
X509v3 Authority Key Identifier:
keyid:01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:73:92:62:4f:86:1a:5c:f7:c4:08:16:d6:d1:d7:62:1c:58:
ea:09:f4:d1:8e:50:3d:0d:66:28:45:31:25:03:29:1f:51:03:
5f:df:22:e2:44:fb:f7:8e:83:58:8c:11:b8:cb:b2:0c:96:68:
1f:24:4b:51:5a:73:d8:68:65:3d:77:f1:19:c3:3d:9b:5b:27:
ce:8f:26:b7:2c:c5:32:cb:4f:b7:8e:78:b0:f4:17:a0:97:bd:
09:58:60:0a:32:18:0a:c9:ef:90:2a:b9:a4:6e:72:cf:fb:89:
11:24:8b:cd:8c:c4:9c:df:e7:4b:50:53:aa:a6:c5:64:d5:66:
d3:6e:34:d2:d9:87:d9:4d:cc:23:40:c5:9a:c6:17:3c:00:d3:
b4:47:1f:1b:d3:c4:07:12:44:07:b2:92:56:bd:3e:c8:e4:14:
fa:15:b4:2d:38:e4:3f:5d:76:2e:87:b9:a6:29:81:9d:fe:09:
cd:e4:25:91:cf:19:df:3a:6d:95:e5:d3:dc:30:f6:4b:88:e7:
5f:03:30:33:9a:95:a4:3b:a4:a2:a6:54:52:11:bb:b6:a1:30:
c0:68:72:a2:a0:5f:25:c5:86:52:70:b7:15:ac:92:0f:4a:2f:
c3:84:50:f2:d6:e6:0f:33:d3:f7:5f:7c:e7:2a:bf:07:c0:94:
3f:5d:eb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:06:04 2026 by rpki-client