Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
File: AD_-289_nHEO9Yuv_uzuA3fxm9M.mft (raw, json)
Hash identifier: vaeW53QDlv5bybDp5Vde6cClxdIYCXR3HRbVH+sAB7M=
Subject key identifier: 29:0E:1F:15:04:F0:B5:B1:5C:06:39:36:94:CD:C0:7C:65:57:89:40
Authority key identifier: 00:3F:FE:DB:CF:7F:9C:71:0E:F5:8B:AF:FE:EC:EE:03:77:F1:9B:D3
Certificate issuer: /CN=003ffedbcf7f9c710ef58baffeecee0377f19bd3
Certificate serial: 01A0F11EB696DF81447B637DC18266FD7787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AD_-289_nHEO9Yuv_uzuA3fxm9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
Manifest number: F7
Signing time: Wed 30 Sep 2026 07:01:56 +0000
Manifest this update: Wed 30 Sep 2026 07:01:56 +0000
Manifest next update: Thu 01 Oct 2026 07:01:56 +0000
Files and hashes: 1: 6qDW6_OYHkue6ocM9JiQxw7eaDA.roa (hash: DI4vkJ8mXMU1gsjZNOcgIX1g1JQ6NES2SMI/VfbnZRM=)
2: AD_-289_nHEO9Yuv_uzuA3fxm9M.crl (hash: UkwvtBLgQDjGyfAQm+OT63Aw7xodTMq9xFOo1fw5yp0=)
3: Ck3rOI6Xa5Gj7dndlxdeh3NrBmc.roa (hash: B5fZHyrENLJkUKcY0cgDv3KWy4P0ZeZxjcroZn03jaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AD_-289_nHEO9Yuv_uzuA3fxm9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:1e:b6:96:df:81:44:7b:63:7d:c1:82:66:fd:77:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003ffedbcf7f9c710ef58baffeecee0377f19bd3
Validity
Not Before: Sep 30 07:01:56 2026 GMT
Not After : Oct 1 07:01:56 2026 GMT
Subject: CN=290e1f1504f0b5b15c06393694cdc07c65578940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1e:fa:d9:3f:5d:f4:3e:f7:5a:2f:c1:59:39:
e6:38:f1:17:ae:db:45:68:55:5d:f3:89:70:43:6d:
b9:3c:3c:e2:71:bc:bb:57:99:5a:c5:ed:f7:ca:bb:
24:1a:dc:2e:a9:fb:13:78:b0:f6:67:8d:de:77:c2:
6e:4d:a4:4e:1c:52:d3:8d:46:7c:f6:df:0a:a0:8b:
54:71:0b:e2:91:45:63:18:0d:0c:cc:1a:50:8d:89:
14:f2:a3:e0:49:2f:84:59:6a:68:c0:a4:09:e8:7f:
8e:bd:2f:ee:ef:d8:c7:ea:eb:f7:6b:90:27:3c:0c:
fe:8f:62:89:a6:2c:c4:c8:8e:8e:a3:1d:06:77:8e:
e8:53:90:5c:83:71:ca:b6:ff:87:3e:88:a9:2e:6b:
bb:c7:22:f6:86:11:fd:29:c7:a2:59:6b:cb:7e:02:
68:4c:eb:65:62:d2:69:85:58:3c:3c:ac:c7:4b:32:
1f:67:85:22:cf:f7:aa:d8:15:ef:bd:3d:62:a1:6e:
9f:2d:4b:93:93:56:1e:fe:a1:83:af:2c:de:8f:04:
c8:bb:4a:fb:02:d9:e6:0d:7e:e2:63:e7:c2:18:90:
80:82:f9:5c:b2:ae:11:9c:89:17:c3:f7:1b:ab:a0:
55:cd:47:65:b0:de:1f:2b:42:7e:6c:1f:c9:04:86:
c1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0E:1F:15:04:F0:B5:B1:5C:06:39:36:94:CD:C0:7C:65:57:89:40
X509v3 Authority Key Identifier:
keyid:00:3F:FE:DB:CF:7F:9C:71:0E:F5:8B:AF:FE:EC:EE:03:77:F1:9B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AD_-289_nHEO9Yuv_uzuA3fxm9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:13:77:0f:7c:12:d5:8f:4c:34:b6:a6:7c:c5:3f:9f:de:bd:
6a:07:83:0a:fe:a5:46:a6:c9:b6:0b:eb:a5:ce:25:41:5f:02:
85:91:01:14:4b:40:49:0d:82:73:86:71:49:92:fa:c4:e1:cd:
a2:4e:d4:f5:1d:bf:95:2d:ef:72:b9:57:3e:4a:9c:a7:7b:19:
06:93:35:7d:a8:2d:2d:dc:3d:8c:ae:f1:61:c2:1b:1b:ec:3e:
ae:16:15:be:a7:ad:f2:15:34:0d:7a:44:d6:d5:cf:d7:f3:31:
d5:55:52:16:30:98:47:b4:c3:81:b2:05:40:eb:78:a6:88:0d:
54:87:58:21:e6:87:9f:f4:1c:03:a6:60:b6:19:50:e0:35:18:
03:6b:1b:54:05:3e:96:40:ab:1b:96:8f:44:e7:07:48:28:23:
ad:22:ed:6e:bd:c6:b9:6b:14:ac:5f:e2:a6:30:d4:e9:c8:ad:
5e:72:5a:3a:eb:6b:61:42:3e:73:ed:d4:f4:31:8a:83:3b:ff:
a0:ab:7d:c1:47:03:9a:99:06:02:cb:b8:99:be:05:62:25:79:
3d:a8:ba:d6:0f:72:6e:a9:a5:5e:f7:b8:3a:c6:36:28:13:67:
a2:9b:38:11:bc:d6:e0:ca:23:3a:7f:c1:cc:0d:08:b3:e1:1b:
17:83:0d:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDxHraW34FEe2N9wYJm/XeHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwM2ZmZWRiY2Y3ZjljNzEwZWY1OGJhZmZlZWNlZTAzNzdm
MTliZDMwHhcNMjYwOTMwMDcwMTU2WhcNMjYxMDAxMDcwMTU2WjAzMTEwLwYDVQQD
EygyOTBlMWYxNTA0ZjBiNWIxNWMwNjM5MzY5NGNkYzA3YzY1NTc4OTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB762T9d9D73Wi/BWTnmOPEXrttF
aFVd84lwQ225PDzicby7V5laxe33yrskGtwuqfsTeLD2Z43ed8JuTaROHFLTjUZ8
9t8KoItUcQvikUVjGA0MzBpQjYkU8qPgSS+EWWpowKQJ6H+OvS/u79jH6uv3a5An
PAz+j2KJpizEyI6Oox0Gd47oU5Bcg3HKtv+HPoipLmu7xyL2hhH9KceiWWvLfgJo
TOtlYtJphVg8PKzHSzIfZ4Uiz/eq2BXvvT1ioW6fLUuTk1Ye/qGDryzejwTIu0r7
AtnmDX7iY+fCGJCAgvlcsq4RnIkXw/cbq6BVzUdlsN4fK0J+bB/JBIbB8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkOHxUE8LWxXAY5NpTNwHxlV4lAMB8GA1UdIwQY
MBaAFAA//tvPf5xxDvWLr/7s7gN38ZvTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQURfLTI4OV9uSEVPOVl1dl91enVBM2Z4bTlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hN2IyMWQtMmI4Yy00MjcwLWFlNTEt
YTcxNjgxNGMwN2UzLzEvQURfLTI4OV9uSEVPOVl1dl91enVBM2Z4bTlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9hN2IyMWQtMmI4Yy00MjcwLWFlNTEtYTcxNjgxNGMwN2Uz
LzEvQURfLTI4OV9uSEVPOVl1dl91enVBM2Z4bTlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBN3D3wS
1Y9MNLamfMU/n969ageDCv6lRqbJtgvrpc4lQV8ChZEBFEtASQ2Cc4ZxSZL6xOHN
ok7U9R2/lS3vcrlXPkqcp3sZBpM1fagtLdw9jK7xYcIbG+w+rhYVvqet8hU0DXpE
1tXP1/Mx1VVSFjCYR7TDgbIFQOt4pogNVIdYIeaHn/QcA6ZgthlQ4DUYA2sbVAU+
lkCrG5aPROcHSCgjrSLtbr3GuWsUrF/ipjDU6citXnJaOutrYUI+c+3U9DGKgzv/
oKt9wUcDmpkGAsu4mb4FYiV5Pai61g9ybqmlXve4OsY2KBNnops4EbzW4MojOn/B
zA0Is+EbF4MNXA==
-----END CERTIFICATE-----
Generated at Wed Sep 30 20:02:44 2026 by rpki-client