Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
File: AD_-289_nHEO9Yuv_uzuA3fxm9M.mft (raw, json)
Hash identifier: qTF5RGqNehix+N/srH0RUYYuaB4zgRk9TbRjboY4nnU=
Subject key identifier: B4:0B:5B:27:CE:E0:03:6B:25:ED:21:10:FD:D8:9D:62:6D:13:62:E3
Authority key identifier: 00:3F:FE:DB:CF:7F:9C:71:0E:F5:8B:AF:FE:EC:EE:03:77:F1:9B:D3
Certificate issuer: /CN=003ffedbcf7f9c710ef58baffeecee0377f19bd3
Certificate serial: 019F8FB55F40BC5C6C2C89E3CD02C2416C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AD_-289_nHEO9Yuv_uzuA3fxm9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
Manifest number: 40
Signing time: Thu 23 Jul 2026 16:00:55 +0000
Manifest this update: Thu 23 Jul 2026 16:00:55 +0000
Manifest next update: Fri 24 Jul 2026 16:00:55 +0000
Files and hashes: 1: 6qDW6_OYHkue6ocM9JiQxw7eaDA.roa (hash: DI4vkJ8mXMU1gsjZNOcgIX1g1JQ6NES2SMI/VfbnZRM=)
2: AD_-289_nHEO9Yuv_uzuA3fxm9M.crl (hash: kfop8/4TjNvDfrP1+8jP1B+xPKXquTtyVHoYWISUDDM=)
3: Ck3rOI6Xa5Gj7dndlxdeh3NrBmc.roa (hash: B5fZHyrENLJkUKcY0cgDv3KWy4P0ZeZxjcroZn03jaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AD_-289_nHEO9Yuv_uzuA3fxm9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:5f:40:bc:5c:6c:2c:89:e3:cd:02:c2:41:6c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003ffedbcf7f9c710ef58baffeecee0377f19bd3
Validity
Not Before: Jul 23 16:00:55 2026 GMT
Not After : Jul 24 16:00:55 2026 GMT
Subject: CN=b40b5b27cee0036b25ed2110fdd89d626d1362e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b2:93:30:d6:91:bb:d9:43:dd:4b:47:fa:cb:
97:15:02:28:a5:32:3b:41:7a:af:20:6d:aa:02:dc:
a6:94:4a:b5:7e:24:49:c7:57:eb:e0:6b:4d:ec:c8:
50:23:86:d8:fc:ca:5f:a6:dd:14:27:d5:f0:e1:7b:
d6:ba:c5:02:55:8b:c6:cc:82:14:1a:74:66:57:c2:
84:05:48:9f:b7:c7:91:3b:2d:26:44:cd:c9:87:5e:
b2:a8:5f:f4:c5:f4:cf:3b:59:52:f4:95:a3:09:a9:
11:06:78:81:af:43:21:bf:66:31:8e:46:79:c4:82:
ba:a0:bf:f4:52:6c:4e:55:5b:c8:ed:17:f1:74:38:
f2:12:82:f4:d3:bb:3b:3e:db:ce:a0:44:93:83:48:
a6:1d:96:ae:a1:ce:8e:91:17:e7:97:c9:38:dd:69:
25:7d:f5:cf:3b:cb:84:79:54:f9:10:56:34:50:93:
59:81:ee:69:65:38:87:a1:d5:c4:f6:82:06:73:0f:
12:53:aa:3e:64:c3:e3:3b:2f:3d:62:fa:12:07:cf:
0c:03:9b:48:d6:45:a4:f2:c3:70:61:93:66:71:8d:
dc:1f:2f:a6:0d:6a:b2:36:f2:ce:92:3d:53:50:52:
b7:41:4b:18:f5:ae:41:05:b1:2b:3b:97:5e:3f:dc:
d4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0B:5B:27:CE:E0:03:6B:25:ED:21:10:FD:D8:9D:62:6D:13:62:E3
X509v3 Authority Key Identifier:
keyid:00:3F:FE:DB:CF:7F:9C:71:0E:F5:8B:AF:FE:EC:EE:03:77:F1:9B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AD_-289_nHEO9Yuv_uzuA3fxm9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e5:bd:b1:4e:86:eb:d9:a6:9d:8f:09:7e:20:fe:95:3e:85:
6c:f2:13:3f:c5:23:1d:b9:bd:4c:56:37:b0:53:40:7a:f6:54:
a6:54:ad:98:ca:41:2b:53:d0:a4:e9:64:6f:78:e4:fa:48:0d:
5c:4e:50:51:5e:cc:e4:0f:7c:fe:f7:48:f8:6f:a4:d4:24:8c:
1c:9f:9f:8c:98:cc:ec:86:47:16:86:a1:8f:69:75:ee:2b:bf:
30:82:7c:16:80:ac:39:01:6e:89:3a:9b:81:c4:ff:5c:1b:51:
c0:fd:99:4a:60:6e:07:74:47:a6:fe:29:b3:33:b1:44:40:7b:
65:32:59:26:9c:f8:9f:db:8c:f9:94:80:7c:60:35:30:08:7c:
a2:de:e8:66:47:b3:d2:5a:a1:ad:6b:1f:77:41:6f:e0:bb:55:
68:a1:bb:21:08:95:4c:c5:27:5a:7e:32:0e:c2:59:f4:be:60:
04:7d:47:bc:80:de:7a:e0:18:c6:dd:e2:e9:f8:72:1a:36:e8:
7a:45:69:83:8e:8f:b6:69:61:c8:44:d0:23:1f:6c:d3:da:39:
8f:f8:90:69:26:64:4b:58:12:57:6b:18:cc:22:3e:f2:b8:e9:
e2:39:25:15:8b:e6:89:32:96:02:5f:19:42:51:ba:72:60:5f:
91:ef:b4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:35 2026 by rpki-client