Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
File: AdGZIUQMLysip3d4ApO8J_pH81o.mft (raw, json)
Hash identifier: aei6v/6DURedvGJlSQQkmDBgkvOc/XNIlCwugyIhO7M=
Subject key identifier: 44:B7:46:20:A6:28:BD:30:80:D5:68:7D:92:7E:B0:37:0C:DC:84:37
Authority key identifier: 01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
Certificate issuer: /CN=01d19921440c2f2b22a777780293bc27fa47f35a
Certificate serial: 019D273AC18F74E4997494D40180C9089CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 23:00:55 +0000
Manifest this update: Wed 25 Mar 2026 23:00:55 +0000
Manifest next update: Thu 26 Mar 2026 23:00:55 +0000
Files and hashes: 1: AdGZIUQMLysip3d4ApO8J_pH81o.crl (hash: gt6iMJMFRhV78LRhGRfCKsc96vyGhuN80oPZxH34atQ=)
2: vqx4rvgcwKRJYoIkEyxywbhGZIo.roa (hash: c2b87ljEpUBFoq5WYxAZjcHq9LKBdj40xam1g1KVDXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:c1:8f:74:e4:99:74:94:d4:01:80:c9:08:9c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d19921440c2f2b22a777780293bc27fa47f35a
Validity
Not Before: Mar 25 23:00:55 2026 GMT
Not After : Mar 26 23:00:55 2026 GMT
Subject: CN=44b74620a628bd3080d5687d927eb0370cdc8437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d3:61:f0:f5:ef:1d:f2:77:26:33:05:31:4c:
1f:24:a5:f7:e1:76:ab:d5:80:27:3a:ed:99:c5:45:
4b:de:87:c0:a6:22:fc:a2:7e:d2:66:7b:62:13:5e:
92:29:72:b3:73:24:2e:32:94:a4:2e:e5:9a:d3:fb:
ab:ad:80:7c:f3:33:b8:cc:98:37:6d:87:fc:8c:01:
d1:91:cc:09:94:e8:95:8f:04:4f:da:01:8f:e7:e7:
ac:6c:41:88:47:fc:c7:12:bd:ff:1f:ba:f0:8a:0e:
44:46:80:30:f9:02:52:88:34:6f:1c:e2:4a:7c:e9:
ae:34:1b:e3:9d:07:7b:da:fb:07:9b:4e:19:65:25:
50:b4:5d:db:6d:15:c3:58:62:5a:d0:29:a6:84:2a:
fd:9d:81:b4:91:84:52:6a:38:54:7e:c9:c3:44:43:
20:07:9f:c1:db:f2:cc:fd:eb:0b:57:20:06:1e:5a:
fc:cf:e6:f9:0e:39:6e:cb:a1:03:ed:b6:95:25:d3:
3d:7e:1a:68:fd:c2:f4:27:59:a4:01:5f:76:f4:89:
cb:a6:af:e2:d8:98:5f:53:22:ba:5b:c6:85:f2:7f:
a9:a5:dd:c4:61:09:00:20:72:b2:c9:93:f7:1b:f3:
ab:e3:8d:61:f7:06:88:7e:60:04:72:50:ca:84:06:
e7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B7:46:20:A6:28:BD:30:80:D5:68:7D:92:7E:B0:37:0C:DC:84:37
X509v3 Authority Key Identifier:
keyid:01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:f7:5c:2f:0f:75:6d:05:84:01:a4:26:1d:a3:7b:f8:4d:c2:
4f:4b:95:e4:10:6b:4f:4e:aa:43:10:18:0b:4a:4d:14:f5:af:
08:12:34:99:39:9f:fe:98:4e:4c:e8:0f:d4:80:f1:f0:3a:5f:
84:f7:41:bd:81:34:9e:57:d9:94:08:ca:0f:a8:9e:d4:4e:f6:
7b:c2:ed:a5:ce:d7:be:5c:eb:8d:53:47:cf:0c:ec:ff:4f:cb:
e8:7a:86:f2:76:72:cf:13:14:e4:cc:1c:e9:fa:ac:5b:8e:12:
83:d6:5f:9e:02:c6:b0:4f:5f:31:dd:b0:cf:4c:0c:54:31:6a:
1f:f6:54:b1:02:7e:cb:cb:3d:bc:51:69:d6:44:32:94:0e:3e:
17:de:27:5f:fb:b1:39:d3:61:2f:6e:ee:55:fa:b1:34:23:10:
2e:61:49:9c:2c:d1:e7:1d:24:04:05:a1:9f:34:b7:05:8d:4c:
cf:27:0e:ff:da:71:bc:8e:ae:14:2b:98:96:16:72:4a:29:69:
96:c4:9c:76:7e:ab:fd:78:c5:0c:e9:5d:b1:39:cc:89:97:ab:
02:74:32:b7:3a:c1:f1:d0:f1:8d:c2:69:f2:dc:10:41:7c:a9:
4e:60:5e:ef:30:a3:b2:86:c4:f0:0b:f9:5a:d9:be:df:41:2b:
45:87:0f:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOsGPdOSZdJTUAYDJCJzLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZDE5OTIxNDQwYzJmMmIyMmE3Nzc3ODAyOTNiYzI3ZmE0
N2YzNWEwHhcNMjYwMzI1MjMwMDU1WhcNMjYwMzI2MjMwMDU1WjAzMTEwLwYDVQQD
Eyg0NGI3NDYyMGE2MjhiZDMwODBkNTY4N2Q5MjdlYjAzNzBjZGM4NDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9Nh8PXvHfJ3JjMFMUwfJKX34Xar
1YAnOu2ZxUVL3ofApiL8on7SZntiE16SKXKzcyQuMpSkLuWa0/urrYB88zO4zJg3
bYf8jAHRkcwJlOiVjwRP2gGP5+esbEGIR/zHEr3/H7rwig5ERoAw+QJSiDRvHOJK
fOmuNBvjnQd72vsHm04ZZSVQtF3bbRXDWGJa0CmmhCr9nYG0kYRSajhUfsnDREMg
B5/B2/LM/esLVyAGHlr8z+b5Djluy6ED7baVJdM9fhpo/cL0J1mkAV929InLpq/i
2JhfUyK6W8aF8n+ppd3EYQkAIHKyyZP3G/Or441h9waIfmAEclDKhAbnBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFES3RiCmKL0wgNVofZJ+sDcM3IQ3MB8GA1UdIwQY
MBaAFAHRmSFEDC8rIqd3eAKTvCf6R/NaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWRHWklVUU1MeXNpcDNkNEFwTzhKX3BIODFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9jYWJkNjQtMTg2Yi00MjgyLWIxNGEt
YWE2ZmQ0MzRlMGVmLzEvQWRHWklVUU1MeXNpcDNkNEFwTzhKX3BIODFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9jYWJkNjQtMTg2Yi00MjgyLWIxNGEtYWE2ZmQ0MzRlMGVm
LzEvQWRHWklVUU1MeXNpcDNkNEFwTzhKX3BIODFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0/dcLw91
bQWEAaQmHaN7+E3CT0uV5BBrT06qQxAYC0pNFPWvCBI0mTmf/phOTOgP1IDx8Dpf
hPdBvYE0nlfZlAjKD6ie1E72e8Ltpc7XvlzrjVNHzwzs/0/L6HqG8nZyzxMU5Mwc
6fqsW44Sg9ZfngLGsE9fMd2wz0wMVDFqH/ZUsQJ+y8s9vFFp1kQylA4+F94nX/ux
OdNhL27uVfqxNCMQLmFJnCzR5x0kBAWhnzS3BY1MzycO/9pxvI6uFCuYlhZySilp
lsScdn6r/XjFDOldsTnMiZerAnQytzrB8dDxjcJp8twQQXypTmBe7zCjsobE8Av5
Wtm+30ErRYcP/A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:50:52 2026 by rpki-client