
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
File: ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft (raw, json)
Hash identifier: DuNJ9WNNOO3DcbzW98ejxBpAZoMUtrPOo4ZN/cDiitU=
Subject key identifier: CF:91:A0:05:66:30:BF:6D:FA:6E:04:EB:00:2A:9A:A3:6B:3B:BD:A6
Authority key identifier: 00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
Certificate issuer: /CN=0032534e8d560d73553c632bba10344a7c816614
Certificate serial: 019E1DFDEBC8D79BAA66C4D05B738BFDFCFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
Manifest number: 16FE
Signing time: Tue 12 May 2026 21:00:40 +0000
Manifest this update: Tue 12 May 2026 21:00:40 +0000
Manifest next update: Wed 13 May 2026 21:00:40 +0000
Files and hashes: 1: 8gDgcDeShfBdliF1DBTffvxw12U.roa (hash: Fz6nbI88uHxwSxo85BK5DCibUg4PuN/OzYci0coXooc=)
2: ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl (hash: j9L+JUOjChRcspZ8iG9ICL50Yk3TuLCcVnGEq4ILtz8=)
3: jCaGFWRG0k_cfmlAxYZcjUIw_Yo.roa (hash: qpdto+41ybuG4juygcEcToReJEmG6ghtzKbjR0IgkSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:eb:c8:d7:9b:aa:66:c4:d0:5b:73:8b:fd:fc:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0032534e8d560d73553c632bba10344a7c816614
Validity
Not Before: May 12 21:00:40 2026 GMT
Not After : May 13 21:00:40 2026 GMT
Subject: CN=cf91a0056630bf6dfa6e04eb002a9aa36b3bbda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bd:5b:65:e8:f3:64:fc:55:ca:8a:74:62:c9:
a5:46:b8:f1:29:bb:9a:6e:95:e1:3d:2d:b7:42:73:
a3:13:b9:e1:28:5c:39:a9:f6:40:d2:8b:fa:d7:f7:
18:ca:c7:9d:77:54:7a:7a:d3:2b:d9:46:7d:c4:7a:
88:ef:f7:1c:89:59:2e:c6:33:d4:99:35:95:90:f4:
79:a1:89:4a:3b:72:5b:5f:98:01:2a:69:aa:27:d6:
16:60:6b:13:d2:07:b3:9e:7a:b5:12:ab:3e:fc:03:
77:00:c4:e5:9b:0a:99:91:05:9c:fb:30:6e:8b:01:
60:83:a2:57:5e:92:3b:e3:3f:c7:3c:cf:d2:19:f4:
cb:9b:87:3e:c4:0b:12:03:a4:e9:a1:80:74:68:66:
73:e4:75:c4:2b:1a:b0:09:88:8d:5e:d8:51:da:01:
47:f4:eb:2f:71:67:5e:40:bd:91:58:e4:d2:d8:0c:
67:d1:37:c2:53:a7:fe:b8:9e:5d:95:80:8e:0e:6d:
07:2a:60:5d:eb:99:98:1d:0b:2f:6d:a1:c5:0a:9f:
38:75:8c:c0:79:90:29:4e:b9:e4:ba:4a:85:2b:93:
b6:a1:68:cd:8b:bf:91:fb:cf:46:17:32:36:79:1f:
23:56:78:65:9b:1e:e3:ad:37:9e:85:02:ae:18:79:
2a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:91:A0:05:66:30:BF:6D:FA:6E:04:EB:00:2A:9A:A3:6B:3B:BD:A6
X509v3 Authority Key Identifier:
keyid:00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ab:e1:bc:ba:3d:63:bc:cb:37:5f:a6:b3:b1:5e:c5:ae:a3:
26:70:11:9a:ff:13:07:fc:da:8b:3f:bc:00:74:c7:07:c2:37:
a6:81:49:3e:a4:f3:8e:4f:c7:90:57:f8:7d:fa:20:c2:05:18:
12:74:f5:66:44:27:df:ea:08:82:a2:ca:67:40:a5:6f:b0:ef:
f2:b8:0b:35:c6:62:5f:8b:35:01:c0:84:5a:38:a0:f5:b5:ee:
be:c7:05:f8:a9:c3:f9:96:37:3d:b3:19:83:b8:d6:72:cb:02:
8e:af:28:e8:a3:5b:ef:e1:67:89:78:71:96:45:6a:6b:f6:d8:
32:47:c9:6e:bf:6d:5e:d4:fd:3c:f8:bc:49:59:77:76:d7:c0:
7a:b2:eb:d1:1b:3d:80:92:ba:d8:51:6d:d8:01:a5:a2:43:48:
1e:4c:15:41:c8:df:30:67:5c:46:58:11:7e:ff:28:dc:c7:98:
be:3d:4a:45:bf:f2:53:2c:92:e6:fd:6c:7a:f6:93:ff:c4:a6:
a0:5d:af:25:37:bd:6d:2e:6f:08:f5:9e:f5:fb:2a:78:eb:80:
0f:94:cc:a6:c7:9a:cb:f2:de:02:55:9a:65:8e:36:92:d2:9e:
09:51:26:fc:9c:db:8e:3f:e3:f2:8e:00:0d:90:03:11:ed:11:
60:35:f5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:01:43 2026 by rpki-client