Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
File: AdKI5UcwsQk69JmTgDQvhdgZjQo.mft (raw, json)
Hash identifier: Y3zAhQC/cBSiaHnZYGWnZsBBaYY4bA/3z0izvMSliUo=
Subject key identifier: 19:04:5A:88:2D:98:5C:CF:0E:54:45:FF:0A:19:9D:34:20:E8:A6:33
Authority key identifier: 01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A
Certificate issuer: /CN=01d288e54730b1093af4999380342f85d8198d0a
Certificate serial: 019D27DFC4908851820DD3023CCCCB03C24E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
Manifest number: 0AC1
Signing time: Thu 26 Mar 2026 02:01:09 +0000
Manifest this update: Thu 26 Mar 2026 02:01:09 +0000
Manifest next update: Fri 27 Mar 2026 02:01:09 +0000
Files and hashes: 1: AdKI5UcwsQk69JmTgDQvhdgZjQo.crl (hash: mOjqPY02g9LRIECBwSTP7Ig8uU54y9h6mPqNwuM2g5o=)
2: fg1ZDaE-Jw3uqLF5HiZidz3xbjg.roa (hash: EEwrRzOKdmaJZWY6WRbn+FygexN1DQqGjCid31GjTaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:c4:90:88:51:82:0d:d3:02:3c:cc:cb:03:c2:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d288e54730b1093af4999380342f85d8198d0a
Validity
Not Before: Mar 26 02:01:09 2026 GMT
Not After : Mar 27 02:01:09 2026 GMT
Subject: CN=19045a882d985ccf0e5445ff0a199d3420e8a633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:a2:01:9f:5f:3c:17:ac:c5:8e:f3:2f:f9:
64:00:1d:59:de:5a:62:b2:74:db:78:c9:ee:7e:c5:
2b:41:c7:f9:a7:6c:a4:58:63:f5:9c:51:57:d4:d4:
b8:96:bf:59:39:eb:bc:15:36:ee:83:30:52:7e:84:
9b:cc:e5:4f:eb:88:01:fe:af:30:c0:01:7b:46:ae:
56:62:54:01:7a:f8:73:08:ce:d8:30:5c:97:5c:a2:
c5:3b:36:7c:e2:eb:92:b9:50:92:72:c7:b8:fc:5a:
23:91:0e:84:8b:93:15:e6:13:48:ca:5d:78:76:30:
a8:bd:bc:c3:c9:59:d7:48:8d:a7:8c:96:67:0d:21:
2d:d8:bb:f1:bf:56:de:3e:15:bc:52:c8:2f:97:81:
ce:af:5c:b3:94:9a:ca:f5:dc:8b:70:ec:00:28:6b:
b1:df:f4:9f:55:1c:62:a1:ae:19:cb:c7:68:04:8b:
76:52:b9:bb:df:e1:54:5a:5a:f6:d0:e8:f5:74:89:
a2:0c:90:ea:1e:94:c2:d2:58:73:9c:8f:4d:b1:ef:
81:72:ac:de:0f:de:f8:90:ed:df:ef:53:18:a3:77:
21:0d:8a:6e:3f:13:0f:e7:91:26:15:53:05:83:b3:
fc:2d:23:4b:88:a7:b1:ed:3d:47:b9:1f:13:5d:24:
16:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:04:5A:88:2D:98:5C:CF:0E:54:45:FF:0A:19:9D:34:20:E8:A6:33
X509v3 Authority Key Identifier:
keyid:01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d6:c2:a5:18:f2:85:54:0b:47:e4:37:a6:33:13:1d:26:4e:
1b:06:1d:b2:52:a6:5c:01:f6:d6:54:8c:37:32:3e:df:38:f7:
7b:dc:85:1d:f0:82:d6:20:34:0e:fe:4e:26:e0:f0:c5:ec:17:
01:29:6e:70:37:60:a7:2c:1d:10:01:84:9c:1b:77:01:df:26:
84:f8:9e:5b:53:f6:ea:3a:94:50:98:5a:6b:e8:50:6a:a8:87:
91:0b:8c:d3:47:72:44:83:18:70:7f:56:6c:b5:ac:8b:24:58:
68:33:4f:f6:65:c0:fe:7e:77:1a:f8:84:e8:11:d9:40:fc:1c:
af:2f:05:ba:90:a3:16:6b:24:ea:99:85:7c:5c:eb:25:2e:2c:
40:26:ee:02:df:d9:4e:c8:8f:da:39:cf:94:d0:df:70:6e:03:
d3:8b:a5:6a:db:e2:fb:d8:a4:5c:0f:55:f5:e9:cf:21:e4:3d:
13:64:4e:2b:79:cd:57:b0:8c:a9:fa:e4:04:52:bb:f1:ba:80:
ef:e8:b5:33:fc:38:06:a5:50:c5:8f:cc:14:34:eb:2e:5e:4f:
dc:93:32:3c:98:9f:61:94:cc:a4:ea:5c:af:cd:2d:a8:ba:62:
19:0a:49:71:ed:12:02:c7:ea:a0:d7:f5:a2:e7:46:83:f2:0c:
99:ae:52:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:57:01 2026 by rpki-client