Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
File: ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft (raw, json)
Hash identifier: eY3pQMBxS3QON/NCyjkoGWm2vCxq981iWUZbbbQiQ9I=
Subject key identifier: AE:8F:DB:01:0E:CF:57:EB:64:91:56:E3:45:60:0D:01:9E:58:B5:7B
Authority key identifier: 00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
Certificate issuer: /CN=0032534e8d560d73553c632bba10344a7c816614
Certificate serial: 019D28BB671941683484E0F9B450C6BFD6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
Manifest number: 167F
Signing time: Thu 26 Mar 2026 06:01:03 +0000
Manifest this update: Thu 26 Mar 2026 06:01:03 +0000
Manifest next update: Fri 27 Mar 2026 06:01:03 +0000
Files and hashes: 1: 8gDgcDeShfBdliF1DBTffvxw12U.roa (hash: Fz6nbI88uHxwSxo85BK5DCibUg4PuN/OzYci0coXooc=)
2: ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl (hash: kYwtmjHxh9aOtmW7/GYGSkSObHMtpqxSM1DCin75JAw=)
3: jCaGFWRG0k_cfmlAxYZcjUIw_Yo.roa (hash: qpdto+41ybuG4juygcEcToReJEmG6ghtzKbjR0IgkSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:67:19:41:68:34:84:e0:f9:b4:50:c6:bf:d6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0032534e8d560d73553c632bba10344a7c816614
Validity
Not Before: Mar 26 06:01:03 2026 GMT
Not After : Mar 27 06:01:03 2026 GMT
Subject: CN=ae8fdb010ecf57eb649156e345600d019e58b57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0b:ad:3f:da:26:0b:c6:1d:3d:7d:bc:45:53:
e6:78:35:4e:f8:d0:ed:55:f0:4d:ac:ea:e6:01:3e:
45:ad:15:5a:81:37:3c:5e:8f:b4:b8:b0:23:01:73:
4d:e8:00:de:41:f9:b2:0f:3d:7e:91:31:ad:ef:b4:
7b:d8:e2:a0:9b:8e:e0:ff:ec:6a:a5:5d:65:66:77:
e0:cf:06:58:e4:53:72:16:07:12:51:d7:1a:a0:f4:
69:e9:96:f5:00:ef:27:03:d4:57:43:da:e9:24:82:
da:5b:8a:f8:bf:d8:71:62:1d:f1:45:15:f0:90:a2:
4c:d4:20:43:81:42:6a:c7:88:38:ce:ea:88:2e:df:
2f:14:bb:fc:50:62:45:ba:80:ef:e5:0f:ed:3d:32:
d8:d4:3c:d4:01:a5:f8:88:2a:8c:32:e1:ef:75:cc:
83:38:aa:32:d4:a1:cd:7d:6f:18:30:66:5b:64:1d:
ca:eb:b5:f3:0d:09:12:90:95:59:4c:fd:a1:18:35:
6a:b1:fe:bb:5e:a0:92:92:37:14:6a:73:71:ca:f1:
de:2d:f7:02:f3:24:02:51:c4:61:f2:74:57:af:3b:
db:cb:f2:5f:72:db:f2:b2:9c:14:03:c6:31:30:47:
da:57:1f:f4:8e:e1:fc:b6:83:c0:c5:e1:43:0d:f7:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8F:DB:01:0E:CF:57:EB:64:91:56:E3:45:60:0D:01:9E:58:B5:7B
X509v3 Authority Key Identifier:
keyid:00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e9:13:97:1f:9a:f9:f4:33:74:af:54:af:f5:19:f2:dd:6d:
7c:f6:8b:5d:85:20:0c:bc:2d:04:de:e1:47:9e:4b:4a:7f:14:
27:5d:1e:63:aa:01:db:5e:38:a6:13:1b:b8:e7:80:5e:50:48:
c5:22:cd:6d:08:d7:18:c9:f0:49:d9:4e:2e:fb:c1:34:a1:33:
fe:37:83:a1:6d:b0:b7:85:25:b4:8f:ed:74:0f:aa:9f:13:b8:
ce:a5:32:b6:7e:93:e0:c3:74:06:33:61:35:fc:c5:86:0a:6b:
31:43:0a:32:57:18:c5:1b:18:7f:7b:fd:0e:ec:86:fa:f8:01:
13:15:ff:c8:4b:21:3c:6a:90:76:6b:34:32:e2:25:d8:5c:57:
e7:00:c6:e3:2a:ef:7f:91:b7:a6:e3:36:c9:d6:20:8d:6a:3c:
39:95:a0:38:dc:d8:9d:91:a6:2f:5d:cd:10:f1:d7:db:b9:42:
df:5a:37:07:69:ad:16:05:df:b1:5f:2d:7f:f2:ed:fa:da:10:
e2:4b:16:62:85:23:c3:72:70:ac:d1:93:59:39:04:c0:24:f1:
21:60:1d:48:09:8e:ba:01:0c:63:42:fb:22:2d:2f:19:e6:04:
b3:1b:2c:17:70:bd:2d:23:3d:80:36:20:c8:b7:56:fd:ff:48:
a4:b7:72:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:27:12 2026 by rpki-client