Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
File: aDCZAOZItlowenhgECv3ixb1XXU.mft (raw, json)
Hash identifier: Rsu7Oa7FROaZk6p0ndSKe//G1Cko9IADUtbBFlKjNxQ=
Subject key identifier: 96:45:4F:24:4F:E9:AB:48:83:DE:0E:20:3D:43:F4:87:D9:BC:23:59
Authority key identifier: 68:30:99:00:E6:48:B6:5A:30:7A:78:60:10:2B:F7:8B:16:F5:5D:75
Certificate issuer: /CN=68309900e648b65a307a7860102bf78b16f55d75
Certificate serial: 01A0EB8AAA540F281038DD7DB99EC951359E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDCZAOZItlowenhgECv3ixb1XXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
Manifest number: 06D8
Signing time: Tue 29 Sep 2026 05:02:08 +0000
Manifest this update: Tue 29 Sep 2026 05:02:08 +0000
Manifest next update: Wed 30 Sep 2026 05:02:08 +0000
Files and hashes: 1: HbShzM3qrknCQZp2Tx1NZiWf1jk.roa (hash: YTGorDk65orDuOJJBzhtTtRRAT8YSucZuGLA7eX2VpI=)
2: aDCZAOZItlowenhgECv3ixb1XXU.crl (hash: ro1NTMf1pXYa0DRYVcx7mkrQw6Oz0VsZistEaWZ/qo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDCZAOZItlowenhgECv3ixb1XXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:8a:aa:54:0f:28:10:38:dd:7d:b9:9e:c9:51:35:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68309900e648b65a307a7860102bf78b16f55d75
Validity
Not Before: Sep 29 05:02:08 2026 GMT
Not After : Sep 30 05:02:08 2026 GMT
Subject: CN=96454f244fe9ab4883de0e203d43f487d9bc2359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:e3:8a:10:2c:28:a5:e5:a8:45:62:fe:06:
ac:11:0e:dc:7f:40:e3:59:5e:e8:31:02:dc:b8:3c:
73:05:e8:d3:9a:1f:7f:b4:57:30:0d:12:04:ab:2c:
64:cc:e7:36:04:28:04:ea:46:ff:f5:89:3b:fb:d8:
ce:51:c1:e4:25:ad:f5:18:23:42:56:db:b8:40:7c:
e0:d4:94:58:16:d1:01:01:b6:78:64:bf:70:3d:86:
1d:32:11:9a:2a:79:73:67:a8:b8:bd:0c:c2:81:72:
6c:d8:e3:d5:96:9a:bb:ff:d8:92:60:5d:4c:a3:f1:
e9:1c:28:39:ab:27:69:c5:e3:60:f9:fb:1a:80:3f:
87:96:ed:e9:55:8e:8e:96:d3:aa:ab:3c:9d:0d:35:
62:b4:5b:54:a3:f4:b7:aa:c9:6f:c6:a5:21:48:66:
bb:53:a1:1a:9f:bd:9c:3c:f1:7e:eb:c0:6f:64:ac:
e9:75:d5:83:b3:2d:79:99:a2:af:d4:9c:b4:2b:4e:
fa:f3:17:c1:75:6c:0b:b2:aa:8c:dd:f2:94:b4:b8:
a0:0a:69:79:6d:db:01:b5:b5:65:b0:66:9e:0a:88:
84:8e:dc:22:6e:42:12:1f:9c:9f:43:44:d5:7d:5c:
b5:39:b4:40:a4:5a:7e:af:ae:a9:77:32:8e:98:0c:
c8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:45:4F:24:4F:E9:AB:48:83:DE:0E:20:3D:43:F4:87:D9:BC:23:59
X509v3 Authority Key Identifier:
keyid:68:30:99:00:E6:48:B6:5A:30:7A:78:60:10:2B:F7:8B:16:F5:5D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDCZAOZItlowenhgECv3ixb1XXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d7:64:48:9f:2c:7d:35:af:5a:a2:de:76:30:38:ca:54:87:
d3:d4:bb:6d:90:96:8d:3c:51:eb:a6:9b:1e:19:59:91:b3:b1:
8c:ee:06:74:26:86:6b:93:98:0b:f7:e2:75:b1:47:7a:37:a5:
6c:6d:79:ca:86:89:69:3a:3d:cc:fd:e8:f7:69:f0:c9:2e:ff:
00:bb:47:4a:56:8c:9d:6a:e9:e9:ab:4c:3c:a9:d2:31:49:91:
6b:9b:0f:99:af:0c:14:d0:9c:e7:20:2a:8c:3e:16:ac:ed:a0:
65:50:f4:e8:72:a7:c5:7d:67:21:6f:0b:0d:2b:2b:3b:19:7e:
8c:4c:09:83:65:a9:19:62:0c:d1:81:73:a1:94:a8:86:f3:4c:
4c:10:7d:ac:00:d8:0a:e8:f4:0f:a0:49:fb:8b:f8:4b:e8:90:
36:0c:82:d9:80:e5:7a:0a:cc:e7:34:f3:97:55:74:5e:a0:90:
da:81:6a:9a:c9:02:49:70:eb:9f:4f:00:9d:02:46:55:d4:fc:
f1:31:26:3b:38:fa:c0:04:23:4b:98:d1:bb:ff:6c:32:a2:5c:
1d:9c:63:80:3d:f0:b2:55:35:04:57:c1:fc:e6:b8:44:92:02:
d9:c7:28:93:23:c5:b0:ae:2c:a4:28:b6:e4:a8:7d:fd:0f:25:
60:75:2e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 09:21:14 2026 by rpki-client