Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
File: AdIyzG-yu_d4bZLGxq66oO2aceQ.mft (raw, json)
Hash identifier: FReFtYsN2tyrJYa8aFI9J2c6MS26T7v7OnnojhMR2hs=
Subject key identifier: 4E:CC:2D:BF:0D:34:93:D9:E1:1E:7E:7D:A3:39:58:97:6F:53:AA:C0
Authority key identifier: 01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4
Certificate issuer: /CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
Certificate serial: 019D3A53D4161858B2D35BDF5D1F5D705425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
Manifest number: 188A
Signing time: Sun 29 Mar 2026 16:01:05 +0000
Manifest this update: Sun 29 Mar 2026 16:01:05 +0000
Manifest next update: Mon 30 Mar 2026 16:01:05 +0000
Files and hashes: 1: AdIyzG-yu_d4bZLGxq66oO2aceQ.crl (hash: z/NzcPfPTi0nOQkL/pz+w32RdnbNGc5UY2yoPAvPKZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:d4:16:18:58:b2:d3:5b:df:5d:1f:5d:70:54:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
Validity
Not Before: Mar 29 16:01:05 2026 GMT
Not After : Mar 30 16:01:05 2026 GMT
Subject: CN=4ecc2dbf0d3493d9e11e7e7da33958976f53aac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ae:6e:45:04:54:32:f7:28:88:f2:4d:62:07:
a2:ae:46:fc:7b:90:92:34:3e:26:16:2d:1a:e5:21:
fa:d2:ac:de:07:40:c2:5c:f6:8e:17:c7:51:89:89:
95:28:4c:fa:15:8b:d2:4a:30:03:a2:0b:cb:24:5e:
ba:5c:fd:59:3c:18:b0:4e:b0:29:2e:9f:e9:e0:c6:
8d:99:81:94:cf:98:b7:73:0d:cf:6e:09:ad:95:32:
08:57:f5:c1:cc:42:91:7c:e3:1f:a7:06:8c:d6:61:
d3:29:37:cf:b1:67:8f:bd:b2:e9:2a:0f:11:b6:c4:
a8:0e:e2:4f:92:a9:0e:b6:d9:db:ea:fd:7c:7b:98:
07:af:88:8d:34:f3:b5:14:bb:b8:a5:18:9e:f7:7f:
c2:41:4b:a1:05:e3:c7:e7:71:fb:72:11:49:3d:cf:
65:35:aa:65:9f:b5:76:8e:93:29:0f:83:0f:44:5a:
24:b4:31:61:69:53:5c:02:7a:fe:bf:a0:60:26:ae:
3d:cf:53:ee:5a:35:9d:49:bc:1b:1b:d8:08:4b:1a:
57:16:1e:35:89:18:63:ef:fa:c7:3c:ec:75:1e:74:
92:73:cb:d1:27:38:40:01:01:6a:d5:d7:a8:50:98:
56:f2:f9:b2:f1:df:84:db:77:69:a7:01:69:09:b8:
3e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CC:2D:BF:0D:34:93:D9:E1:1E:7E:7D:A3:39:58:97:6F:53:AA:C0
X509v3 Authority Key Identifier:
keyid:01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ac:29:be:72:e6:5c:d4:ad:a1:39:89:79:59:29:53:f0:5c:
be:ce:9c:f8:94:2d:58:2a:01:46:13:26:21:7f:71:e9:aa:ee:
6c:68:81:91:ce:a6:d7:c9:7c:91:de:79:bb:e0:d9:bc:fe:95:
8c:74:e5:6c:04:3e:72:b3:ff:16:4d:e1:d9:df:37:5b:67:ab:
6e:9f:04:7b:7f:83:d3:46:e7:14:15:d8:dc:cd:3d:2e:2f:44:
98:42:06:8f:c7:60:ef:d7:26:63:52:41:fe:fe:32:d7:d4:38:
b8:e3:a9:48:f3:a8:4a:ea:52:90:c7:db:0b:aa:17:c7:f6:d8:
03:2c:2e:14:84:4e:20:03:3a:88:07:28:d2:50:d1:8b:04:55:
b6:d1:01:07:e5:2c:9e:93:7c:7f:84:1a:65:50:0f:45:6a:7c:
b2:52:4e:f4:b8:20:7b:8c:58:ba:d1:39:c8:3c:31:33:6e:e4:
af:6e:6f:a1:4c:f7:76:1c:68:52:4b:1e:05:0b:bc:58:3e:e6:
da:4d:99:84:2b:c6:00:aa:61:ec:c8:4e:c6:62:f6:22:f9:a9:
b8:a3:8c:3f:85:af:e9:c7:ac:d3:15:08:9a:b4:3a:3b:02:e3:
af:cc:87:b6:b4:bb:ee:3b:c1:a5:27:eb:c9:26:c4:80:9d:a7:
a5:97:dc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:09:25 2026 by rpki-client