Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
File: adXUUqjtU1KH_rNlFLyHwCI1WkM.mft (raw, json)
Hash identifier: DcwHGIz1scGn7SuWpsbYajSlv1LuIiK7k7JnYjEOM+E=
Subject key identifier: 2E:73:B9:E1:73:83:3C:E9:54:B4:76:BB:5F:45:40:23:AE:E1:E0:2F
Authority key identifier: 69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
Certificate issuer: /CN=69d5d452a8ed535287feb36514bc87c022355a43
Certificate serial: 019D3940E20C5F6C21F7BC98898C7682E1D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:00:46 +0000
Manifest this update: Sun 29 Mar 2026 11:00:46 +0000
Manifest next update: Mon 30 Mar 2026 11:00:46 +0000
Files and hashes: 1: 99ukKo0G5E-X61ucxhUYzuXviMg.roa (hash: klMpZV7tFP7vNV7veN/nv8e/MQyS41qIS69khsoXMUw=)
2: adXUUqjtU1KH_rNlFLyHwCI1WkM.crl (hash: VsH10ki4V1cWLLaWoP/6eDl80WriX6wvJc57lNQua8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:e2:0c:5f:6c:21:f7:bc:98:89:8c:76:82:e1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d5d452a8ed535287feb36514bc87c022355a43
Validity
Not Before: Mar 29 11:00:46 2026 GMT
Not After : Mar 30 11:00:46 2026 GMT
Subject: CN=2e73b9e173833ce954b476bb5f454023aee1e02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:61:6a:30:1b:00:e3:4f:e4:72:8c:4c:30:
d7:45:32:8f:5f:b4:fd:a8:bb:de:4f:b8:88:cd:53:
8e:ed:87:c1:01:94:2a:e5:40:76:a8:7e:40:83:2c:
fa:13:4c:02:cd:66:32:b9:38:2d:2b:78:f3:6a:a7:
60:70:72:dd:8b:86:75:de:15:f3:a7:b0:92:6b:9f:
8e:de:9a:08:7d:9c:a4:59:9f:90:5e:4f:e7:f9:9d:
0f:c3:ee:45:1a:1a:7b:eb:82:5d:92:87:4f:98:cb:
95:51:a5:6d:b5:86:f4:39:24:6d:5d:11:da:dd:73:
91:de:bb:1b:4b:42:db:5c:12:1e:0b:10:57:20:65:
b6:5d:a4:42:a3:38:49:4f:b4:d3:0c:6c:66:80:b7:
eb:c4:97:5c:bd:3e:60:89:6c:ef:9b:c0:09:e5:95:
ea:79:3a:73:fa:18:c1:8d:73:89:a9:2f:af:11:6f:
37:b6:fc:3d:8f:62:b6:f0:d3:a8:e3:55:ac:88:51:
71:7b:4d:c8:49:13:4f:7f:b7:f3:83:bc:50:ea:f2:
18:d6:d7:56:24:4c:df:fc:bd:8a:47:d3:dd:ab:5b:
f9:17:81:90:19:d5:3c:a1:82:34:09:4a:54:3d:14:
0e:65:71:da:83:c1:dc:8f:49:f3:90:2a:24:b0:74:
2a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:73:B9:E1:73:83:3C:E9:54:B4:76:BB:5F:45:40:23:AE:E1:E0:2F
X509v3 Authority Key Identifier:
keyid:69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a4:f0:c7:a8:7f:9c:64:01:dd:6e:4c:7a:f2:10:7d:29:05:
fa:14:8d:44:99:49:81:0e:23:a8:b5:5a:7e:b5:40:96:57:1d:
f2:e5:56:ce:25:6e:0a:2e:1a:5f:d9:bf:51:10:76:b4:a6:68:
b5:71:dc:64:8e:9a:33:ec:fb:19:fc:f4:87:3a:33:19:3a:7a:
dd:bb:cf:cd:a8:6d:8d:1f:48:47:68:5a:59:e6:da:b3:cc:c2:
91:e8:86:ca:a9:d3:d2:c4:59:60:d2:ef:cf:91:88:d0:70:e5:
f2:7c:94:cf:67:50:ff:8a:ab:c0:ce:cf:bb:ef:f0:6d:1a:c1:
57:49:15:d8:f3:b9:98:b9:c6:ab:5a:ec:16:ea:a5:5b:45:bd:
9b:7e:e0:c7:9b:15:f9:e5:1a:72:e3:c9:fe:80:5a:77:86:3c:
61:0c:87:c2:4d:68:56:61:8a:8c:19:77:03:11:d9:7b:1f:b2:
83:93:f8:ed:6f:94:74:72:67:16:fd:19:13:90:7e:7e:d3:81:
3f:18:3f:25:67:13:e8:39:9a:f8:ca:66:a9:8c:a1:a2:39:f4:
84:b4:e9:12:da:d8:6c:18:1d:ef:93:80:1f:67:d5:c6:71:c6:
e5:14:ea:e8:0c:3a:ae:c5:59:07:b5:87:07:79:17:38:0e:fd:
55:cc:5b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:18 2026 by rpki-client