Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
File: ADoNFLA-o0Lt47L0mtjKor904XA.mft (raw, json)
Hash identifier: ungKIq/OjOUe+k/sSoKnVUFSy500scjINicnyZf3Tt0=
Subject key identifier: 20:03:14:3D:CF:3C:BE:AF:5F:05:0D:79:A4:5A:52:3D:A9:B8:A0:CB
Authority key identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
Certificate issuer: /CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Certificate serial: 019D3376163D2B81A6D5EDB9BC66275AF265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
Manifest number: 1820
Signing time: Sat 28 Mar 2026 08:01:10 +0000
Manifest this update: Sat 28 Mar 2026 08:01:10 +0000
Manifest next update: Sun 29 Mar 2026 08:01:10 +0000
Files and hashes: 1: ADoNFLA-o0Lt47L0mtjKor904XA.crl (hash: 8Ijzt9sMLWDGVpui+1rOWepoifcJcIuEuMx2d5h2f40=)
2: u_0x-93wRipLEsiXiJYw22k7HiU.roa (hash: +BCrolIUDpbIUCoEtT/iRhQzDMhtVgzJiegCAfiFXec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:16:3d:2b:81:a6:d5:ed:b9:bc:66:27:5a:f2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Validity
Not Before: Mar 28 08:01:10 2026 GMT
Not After : Mar 29 08:01:10 2026 GMT
Subject: CN=2003143dcf3cbeaf5f050d79a45a523da9b8a0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:68:2f:ce:63:5c:fa:e8:d1:78:06:dc:42:ae:
ad:44:9a:4b:1a:9e:77:f2:b3:9a:39:b8:ee:d9:09:
05:b1:fc:bc:ca:1c:1c:8a:63:0e:3c:74:31:e8:56:
de:d2:51:01:d8:3a:15:00:81:e2:28:29:0a:73:c0:
fc:39:7c:dc:2a:b4:c8:82:0a:6e:ad:82:59:50:32:
80:9d:19:78:3b:37:5e:5f:c2:79:87:a3:9e:ed:0a:
3e:c5:47:ad:27:c4:6f:b2:08:3b:fd:92:b3:44:f0:
d8:45:c4:64:d7:82:a4:f5:61:3e:31:b2:d3:01:6f:
d7:53:1d:94:82:0f:91:ce:e5:20:6d:5d:33:57:46:
7b:22:25:8f:19:2e:97:8c:2a:5f:73:8a:c9:93:c7:
ba:63:8d:1d:c2:60:de:c1:17:8f:c8:f0:d1:c7:54:
c5:a1:f5:68:c9:be:b4:e7:87:bc:56:6c:f0:11:8a:
0f:a7:26:49:7d:e0:22:52:34:d6:ee:a8:e8:b6:91:
91:d2:03:10:5e:89:67:21:df:c8:33:04:4c:5d:9f:
99:28:51:01:c7:38:40:bd:7b:2b:3f:31:bb:01:7e:
91:93:79:62:c7:6d:7a:23:0c:d2:f0:11:bb:62:63:
6b:00:c9:57:7c:32:04:aa:08:7f:45:20:f7:87:43:
15:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:03:14:3D:CF:3C:BE:AF:5F:05:0D:79:A4:5A:52:3D:A9:B8:A0:CB
X509v3 Authority Key Identifier:
keyid:00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:85:53:c0:57:b2:79:1d:ba:44:a1:d4:17:0d:40:61:3f:8f:
1c:de:93:3b:2b:9b:0b:c5:b3:c1:96:88:c7:1a:9a:4b:b3:91:
30:57:55:3a:31:d0:64:19:4b:bf:89:7f:41:ec:3e:62:7d:1e:
3e:f1:27:aa:1d:9a:a3:84:fd:c3:0b:d0:d3:58:96:1c:4c:cb:
5e:f3:b9:eb:ac:a5:f5:e2:22:3f:c3:ec:ad:e5:c8:69:27:03:
d6:24:ea:f0:95:9b:d2:cb:e6:1f:8b:74:25:59:6b:2e:c5:55:
3b:1d:7e:7c:b7:e9:13:01:ca:c0:43:57:1a:f7:fb:13:d2:ff:
c0:47:af:f8:d8:45:5f:8d:c9:e2:3b:68:43:f0:eb:50:7d:b2:
49:12:24:fb:59:f0:cf:3f:91:c1:c2:d4:04:b1:b8:81:ad:18:
14:bc:39:ef:2a:ba:19:69:eb:f1:74:51:fa:03:8a:68:77:fd:
f3:f5:bd:90:28:17:8c:e6:d1:11:a5:7e:72:70:63:f7:a4:70:
0d:c1:8a:57:d1:af:b1:bf:ba:91:cf:66:52:a4:8a:12:d6:bb:
b6:43:34:fc:61:dd:ca:06:85:16:90:f3:a5:9c:f7:08:2e:e4:
9f:d5:3b:01:db:3f:96:af:9c:23:e2:55:60:0a:97:87:74:cb:
98:6c:14:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zdhY9K4Gm1e25vGYnWvJlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwM2EwZDE0YjAzZWEzNDJlZGUzYjJmNDlhZDhjYWEyYmY3
NGUxNzAwHhcNMjYwMzI4MDgwMTEwWhcNMjYwMzI5MDgwMTEwWjAzMTEwLwYDVQQD
EygyMDAzMTQzZGNmM2NiZWFmNWYwNTBkNzlhNDVhNTIzZGE5YjhhMGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmgvzmNc+ujReAbcQq6tRJpLGp53
8rOaObju2QkFsfy8yhwcimMOPHQx6Fbe0lEB2DoVAIHiKCkKc8D8OXzcKrTIggpu
rYJZUDKAnRl4OzdeX8J5h6Oe7Qo+xUetJ8Rvsgg7/ZKzRPDYRcRk14Kk9WE+MbLT
AW/XUx2Ugg+RzuUgbV0zV0Z7IiWPGS6XjCpfc4rJk8e6Y40dwmDewRePyPDRx1TF
ofVoyb6054e8VmzwEYoPpyZJfeAiUjTW7qjotpGR0gMQXolnId/IMwRMXZ+ZKFEB
xzhAvXsrPzG7AX6Rk3lix216IwzS8BG7YmNrAMlXfDIEqgh/RSD3h0MVkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCADFD3PPL6vXwUNeaRaUj2puKDLMB8GA1UdIwQY
MBaAFAA6DRSwPqNC7eOy9JrYyqK/dOFwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYTI1MmEtYWY0Yi00ZWVhLWFjZGIt
MmZkZDFmZDk5NjU3LzEvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8zYTI1MmEtYWY0Yi00ZWVhLWFjZGItMmZkZDFmZDk5NjU3
LzEvQURvTkZMQS1vMEx0NDdMMG10aktvcjkwNFhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqIVTwFey
eR26RKHUFw1AYT+PHN6TOyubC8WzwZaIxxqaS7ORMFdVOjHQZBlLv4l/Qew+Yn0e
PvEnqh2ao4T9wwvQ01iWHEzLXvO566yl9eIiP8PsreXIaScD1iTq8JWb0svmH4t0
JVlrLsVVOx1+fLfpEwHKwENXGvf7E9L/wEev+NhFX43J4jtoQ/DrUH2ySRIk+1nw
zz+RwcLUBLG4ga0YFLw57yq6GWnr8XRR+gOKaHf98/W9kCgXjObREaV+cnBj96Rw
DcGKV9Gvsb+6kc9mUqSKEta7tkM0/GHdygaFFpDzpZz3CC7kn9U7Ads/lq+cI+JV
YAqXh3TLmGwUww==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:35:38 2026 by rpki-client