Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
File: A61jZSMe15OWlAkgFJ33HAqgjh8.mft (raw, json)
Hash identifier: SrLirUhaC67PAaDKTum8a9heIIZBh8KC5U7z6sRhITw=
Subject key identifier: BE:ED:74:6E:1B:1C:50:6B:CF:19:4C:6B:1F:35:C5:A0:D7:2E:4A:BE
Authority key identifier: 03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
Certificate issuer: /CN=03ad6365231ed79396940920149df71c0aa08e1f
Certificate serial: 01A001DDA300FB44EED807012D5457DCFF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
Manifest number: 0ADF
Signing time: Fri 14 Aug 2026 20:01:37 +0000
Manifest this update: Fri 14 Aug 2026 20:01:37 +0000
Manifest next update: Sat 15 Aug 2026 20:01:37 +0000
Files and hashes: 1: 1-9EYds5QZQE-vovjbt_drwBxnu4.roa (hash: ul50Tik7XID6y3g8duwa0RTiUsbpmAyvina9WBduoA0=)
2: A61jZSMe15OWlAkgFJ33HAqgjh8.crl (hash: rRZb5QUSum6d+LrR5tlAN+MmxWkbY5+uUCLCAPJdQeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:a3:00:fb:44:ee:d8:07:01:2d:54:57:dc:ff:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ad6365231ed79396940920149df71c0aa08e1f
Validity
Not Before: Aug 14 20:01:37 2026 GMT
Not After : Aug 15 20:01:37 2026 GMT
Subject: CN=beed746e1b1c506bcf194c6b1f35c5a0d72e4abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:2a:00:3d:cb:5a:bf:e1:f0:29:72:0e:c6:
aa:21:0b:b0:ea:31:af:19:e7:0b:01:53:81:7a:9f:
d3:b4:58:80:d9:dd:70:09:12:33:a4:b3:ca:d0:e9:
14:98:e1:1b:01:54:1e:f2:8c:ff:c9:6c:fe:e7:62:
a9:ec:77:18:61:3d:0a:f8:5a:0b:f4:79:14:7f:30:
45:bb:54:17:3e:88:db:82:9b:22:9a:f4:02:56:6c:
b2:a3:a1:8a:6c:73:cd:f4:f8:55:08:19:09:38:e6:
a6:f3:f7:fe:87:c0:f4:6c:bd:f5:5c:1d:21:79:a1:
02:f0:4e:62:02:c7:47:f3:76:4b:0b:22:50:62:0e:
f5:4b:27:99:06:02:e5:34:a5:34:fe:e2:07:a9:fb:
2a:f6:ca:fa:99:e3:f4:d6:c5:1d:b2:1a:94:8b:7c:
2e:08:a4:c5:0f:39:cc:0a:f6:97:ea:e3:43:64:b5:
2a:72:bf:ed:de:31:90:9a:6d:d5:75:2a:7e:42:77:
3d:76:b0:96:b6:f8:8e:bb:12:51:25:9e:70:3c:f5:
a7:ec:16:ea:88:15:69:09:88:f0:f7:5b:4f:7e:a2:
ba:05:b5:db:b6:15:d0:46:bb:66:3a:fb:51:e6:86:
ef:e6:11:2e:66:94:32:68:72:48:73:80:fa:bb:bd:
fc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:ED:74:6E:1B:1C:50:6B:CF:19:4C:6B:1F:35:C5:A0:D7:2E:4A:BE
X509v3 Authority Key Identifier:
keyid:03:AD:63:65:23:1E:D7:93:96:94:09:20:14:9D:F7:1C:0A:A0:8E:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A61jZSMe15OWlAkgFJ33HAqgjh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/233948-f9a3-4b44-a4a9-4149de528833/1/A61jZSMe15OWlAkgFJ33HAqgjh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6c:5f:cb:5c:c4:3e:29:8b:f6:42:6f:1c:f8:34:9a:f3:9c:
2e:84:d9:3f:08:4f:7c:26:31:ae:a1:a1:dc:21:e3:41:00:be:
5f:90:90:a2:2d:e0:a8:4c:e4:1d:75:db:f9:b2:61:7f:51:84:
05:ad:06:db:55:00:6e:e3:1c:c7:b3:19:85:1f:79:b3:15:96:
47:a2:7b:1c:a1:a5:3f:63:a3:e3:85:7c:6a:59:fe:21:81:06:
c5:6a:f1:82:e0:eb:74:1e:4a:74:95:e5:b5:23:8b:8f:05:d1:
34:58:79:15:9a:95:77:94:22:13:07:f1:a7:ab:8a:1a:47:55:
db:54:1b:93:fb:38:ff:e6:23:ae:fe:da:d1:79:be:d9:9c:41:
27:19:9f:da:75:53:e8:de:47:4c:3a:95:71:9c:93:3f:37:ab:
ba:6c:50:68:c8:da:d0:31:a3:4b:e1:f4:4e:e7:ce:43:7a:31:
db:4c:3b:a8:a8:be:3f:9e:7f:fc:d9:ab:54:1b:4a:e3:4b:b3:
af:9f:7a:e7:52:12:17:64:ba:9a:5b:2a:83:0c:c4:51:9b:ad:
15:31:96:63:4b:27:0f:a7:fc:42:8e:18:6e:83:6f:bd:94:fc:
d8:c8:26:83:74:fb:7e:98:6b:aa:35:44:35:f5:36:7d:93:10:
31:67:06:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:50 2026 by rpki-client