Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
File: adEXVt0Db1nuEef4Gkh6b90jE20.mft (raw, json)
Hash identifier: +n+hsGHcm1sjmAdSLDYLf44niC8/XNPgNd+aKqKqKU0=
Subject key identifier: CA:AE:DA:42:A9:F3:04:12:2C:C0:77:7E:8C:1D:D2:35:18:BB:1B:71
Authority key identifier: 69:D1:17:56:DD:03:6F:59:EE:11:E7:F8:1A:48:7A:6F:DD:23:13:6D
Certificate issuer: /CN=69d11756dd036f59ee11e7f81a487a6fdd23136d
Certificate serial: 019D389C514C0E6E25634F61A15D517DE1CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
Manifest number: 0AA2
Signing time: Sun 29 Mar 2026 08:01:01 +0000
Manifest this update: Sun 29 Mar 2026 08:01:01 +0000
Manifest next update: Mon 30 Mar 2026 08:01:01 +0000
Files and hashes: 1: adEXVt0Db1nuEef4Gkh6b90jE20.crl (hash: 0jpwQvYI3MmQENs3wCW+o4YBTQTC6g3xCDALaCi8PSw=)
2: t_-NpvrkXWMv7C05VfgVliOFopk.roa (hash: NqyEdBD2lmR97sQbX1ZX27Jyq9s7SuLfnBHNWVP5NB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:51:4c:0e:6e:25:63:4f:61:a1:5d:51:7d:e1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d11756dd036f59ee11e7f81a487a6fdd23136d
Validity
Not Before: Mar 29 08:01:01 2026 GMT
Not After : Mar 30 08:01:01 2026 GMT
Subject: CN=caaeda42a9f304122cc0777e8c1dd23518bb1b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:54:b8:50:08:84:1a:73:42:38:49:08:ce:85:
42:f7:68:10:a2:7d:51:4a:f9:9d:fa:52:72:ed:af:
69:f6:41:91:d6:03:bb:14:b6:27:9f:b8:df:45:b1:
8d:e3:b7:8a:c7:2d:bb:fe:17:2a:b4:da:b1:c3:48:
e5:59:5d:b8:97:74:ea:01:f5:60:ef:a8:37:b0:5b:
ab:b3:ac:43:07:00:8c:1e:e9:0d:2e:bd:98:a8:1f:
10:97:8e:93:b5:08:18:7d:f5:74:61:34:94:16:51:
26:45:67:15:14:3d:80:6c:18:32:e4:3e:75:61:0e:
11:35:ed:94:76:95:e4:ce:c9:df:28:9c:52:42:66:
87:c1:b9:d8:95:cd:cb:e8:d7:d0:3d:62:37:da:25:
4f:5a:09:19:00:ec:53:66:a8:bf:c2:ce:3c:70:09:
52:7f:2e:c9:ee:fa:b5:35:21:6f:9c:7b:1a:87:b4:
85:30:73:5d:75:20:28:ca:25:35:8a:ae:ce:78:b5:
e0:8e:8f:10:2c:5c:f1:06:6e:54:f1:a7:87:de:5a:
32:56:40:bd:89:32:cf:8c:c1:44:fa:4e:3e:86:45:
1e:92:7b:94:16:5b:46:3c:8e:d4:0f:c1:fe:84:1a:
1c:79:b0:c8:a2:aa:7f:ad:fa:ac:fe:d2:9d:1e:f3:
68:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AE:DA:42:A9:F3:04:12:2C:C0:77:7E:8C:1D:D2:35:18:BB:1B:71
X509v3 Authority Key Identifier:
keyid:69:D1:17:56:DD:03:6F:59:EE:11:E7:F8:1A:48:7A:6F:DD:23:13:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:15:28:59:02:e6:38:05:fd:8c:19:4e:d3:cc:f9:77:03:75:
02:89:94:a4:78:d4:f0:a4:8a:51:70:fd:18:e0:77:94:32:1a:
6e:09:25:65:48:6b:3e:06:ef:be:19:18:c7:f2:d2:a9:97:81:
83:0c:a9:b0:87:b1:f9:0a:09:4e:92:9c:d5:75:60:8c:36:d3:
88:35:e9:0a:a0:d6:b1:10:be:33:22:2a:15:f4:e7:03:dc:37:
9e:b6:bf:f5:1b:fe:63:3f:1b:42:a0:2a:21:e9:2a:15:f4:c3:
b4:41:4b:a1:85:f5:b0:29:f7:17:33:46:1c:b1:c6:1f:7f:07:
ab:61:f8:8d:29:08:74:a8:0c:5f:97:2b:88:49:c3:42:c4:06:
79:04:80:45:8e:cc:55:bc:7a:dc:f7:ea:bc:a8:fa:02:37:54:
5b:7d:92:ae:c4:6e:85:8a:1c:74:74:4d:c4:c7:b9:50:90:7b:
65:11:26:c5:e4:09:dd:eb:b0:b9:43:cc:ee:dd:4d:8e:2c:14:
4b:ab:3e:02:d1:df:07:3d:19:e0:e1:54:25:2a:58:b8:72:0a:
7f:66:3b:dc:b3:4a:bc:9e:de:75:12:15:ea:27:67:19:69:6f:
82:e3:c8:aa:0c:fa:8a:79:53:7c:0a:c3:b9:88:a1:e3:fd:51:
5d:f7:44:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nFFMDm4lY09hoV1RfeHKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDExNzU2ZGQwMzZmNTllZTExZTdmODFhNDg3YTZmZGQy
MzEzNmQwHhcNMjYwMzI5MDgwMTAxWhcNMjYwMzMwMDgwMTAxWjAzMTEwLwYDVQQD
EyhjYWFlZGE0MmE5ZjMwNDEyMmNjMDc3N2U4YzFkZDIzNTE4YmIxYjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFS4UAiEGnNCOEkIzoVC92gQon1R
Svmd+lJy7a9p9kGR1gO7FLYnn7jfRbGN47eKxy27/hcqtNqxw0jlWV24l3TqAfVg
76g3sFurs6xDBwCMHukNLr2YqB8Ql46TtQgYffV0YTSUFlEmRWcVFD2AbBgy5D51
YQ4RNe2UdpXkzsnfKJxSQmaHwbnYlc3L6NfQPWI32iVPWgkZAOxTZqi/ws48cAlS
fy7J7vq1NSFvnHsah7SFMHNddSAoyiU1iq7OeLXgjo8QLFzxBm5U8aeH3loyVkC9
iTLPjMFE+k4+hkUeknuUFltGPI7UD8H+hBocebDIoqp/rfqs/tKdHvNorwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqu2kKp8wQSLMB3fowd0jUYuxtxMB8GA1UdIwQY
MBaAFGnRF1bdA29Z7hHn+BpIem/dIxNtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRFWFZ0MERiMW51RWVmNEdraDZiOTBqRTIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC80ZmUyODctMDk4Ny00MjBiLWE4NTUt
Y2ZiNDcyOWM4OTk0LzEvYWRFWFZ0MERiMW51RWVmNEdraDZiOTBqRTIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC80ZmUyODctMDk4Ny00MjBiLWE4NTUtY2ZiNDcyOWM4OTk0
LzEvYWRFWFZ0MERiMW51RWVmNEdraDZiOTBqRTIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvRUoWQLm
OAX9jBlO08z5dwN1AomUpHjU8KSKUXD9GOB3lDIabgklZUhrPgbvvhkYx/LSqZeB
gwypsIex+QoJTpKc1XVgjDbTiDXpCqDWsRC+MyIqFfTnA9w3nra/9Rv+Yz8bQqAq
IekqFfTDtEFLoYX1sCn3FzNGHLHGH38Hq2H4jSkIdKgMX5criEnDQsQGeQSARY7M
Vbx63PfqvKj6AjdUW32SrsRuhYocdHRNxMe5UJB7ZREmxeQJ3euwuUPM7t1NjiwU
S6s+AtHfBz0Z4OFUJSpYuHIKf2Y73LNKvJ7edRIV6idnGWlvguPIqgz6inlTfArD
uYih4/1RXfdEJg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:03 2026 by rpki-client