Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
File: Ad0iu63J75fJwaOGG21rTE3dhoc.mft (raw, json)
Hash identifier: T32qiUjjOYvb8tF4/Sx9ZW+y+o20gYr37L7BNCKvLgU=
Subject key identifier: AF:2F:9F:5B:BC:78:86:C9:F0:B0:B6:11:6F:15:45:94:15:2A:60:E8
Authority key identifier: 01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87
Certificate issuer: /CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687
Certificate serial: 01A0010117C3324E76B8667224B6B0C9072D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
Manifest number: 13F1
Signing time: Fri 14 Aug 2026 16:00:43 +0000
Manifest this update: Fri 14 Aug 2026 16:00:43 +0000
Manifest next update: Sat 15 Aug 2026 16:00:43 +0000
Files and hashes: 1: Ad0iu63J75fJwaOGG21rTE3dhoc.crl (hash: 33GrfjVEk7UUtbbxaVb/buXIRbpnCdQ4Wbek5c6KJSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:17:c3:32:4e:76:b8:66:72:24:b6:b0:c9:07:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687
Validity
Not Before: Aug 14 16:00:43 2026 GMT
Not After : Aug 15 16:00:43 2026 GMT
Subject: CN=af2f9f5bbc7886c9f0b0b6116f154594152a60e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:85:e5:bf:a0:ab:82:78:c0:e7:63:2d:22:
86:ad:b8:10:19:7a:ef:13:ce:06:12:bd:4c:44:eb:
70:99:2c:6e:11:32:7e:90:10:75:61:d5:3b:1b:8f:
29:aa:65:c3:21:5a:02:2d:53:60:ba:d4:22:ba:f4:
0a:d9:86:46:e5:07:c9:8e:b4:8d:a2:d7:e6:3a:dd:
7d:8e:60:0f:c7:f2:00:bb:c4:bb:55:a2:58:aa:8f:
1b:f2:e9:3b:68:54:f8:85:56:26:ab:5d:ca:4b:99:
fe:ba:8c:ae:b0:e1:e0:dc:da:2c:e2:83:53:76:ff:
bd:af:73:cc:1e:43:65:04:d3:d5:5b:4c:b4:40:62:
ec:4e:f7:f0:2b:92:b0:ef:07:ff:2e:66:87:bb:9f:
0c:08:f6:ea:34:28:d8:ce:97:f3:a0:7e:f0:4d:ad:
d7:6d:53:99:31:c2:b1:35:e7:b9:03:48:5e:97:af:
4a:14:c1:0f:d7:89:98:fc:3e:3c:31:66:75:d0:54:
57:46:33:d9:73:5f:a3:cd:24:16:b8:5a:a6:78:78:
cf:2a:1e:c6:83:96:13:e4:5d:42:f1:80:0d:78:91:
c8:db:97:31:64:13:a8:04:6f:94:68:88:2e:e2:05:
a2:cf:ef:77:c7:74:11:04:29:40:d7:3f:45:d2:9b:
b4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2F:9F:5B:BC:78:86:C9:F0:B0:B6:11:6F:15:45:94:15:2A:60:E8
X509v3 Authority Key Identifier:
keyid:01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:10:e7:5c:af:f0:c9:41:a8:ee:ab:8f:fe:6b:60:76:27:33:
77:45:4b:7d:fe:99:79:8b:71:d5:b6:02:b1:a4:c7:6c:2b:0f:
8c:94:bd:36:56:02:87:e7:b1:e7:cd:6a:c4:cb:8e:fd:5f:95:
7a:8e:45:19:67:67:1d:db:cd:b3:bc:6e:e1:29:9d:1a:a6:61:
00:01:02:65:fe:32:d3:79:b4:af:c0:87:89:ac:bd:df:be:0f:
fe:3e:98:3e:dc:c4:a6:61:eb:a6:cb:52:b4:be:58:5f:98:48:
a4:3e:c0:a4:54:e3:c4:98:da:a8:32:b6:52:b9:88:75:52:48:
a6:b5:b3:60:06:63:35:cc:9a:c5:cc:14:2d:89:8c:52:d4:63:
dc:29:0d:28:f3:b1:0e:60:01:4e:50:fa:20:7a:d1:64:ec:a6:
75:72:40:5a:01:9f:14:a4:6c:95:4f:a4:2f:24:6c:5c:79:8f:
57:d8:50:1a:14:48:cb:76:c2:1e:d6:d4:2e:2e:d3:2f:61:9f:
14:70:bd:01:53:01:82:7b:c4:49:1c:b1:02:e5:ca:1a:6f:94:
01:14:55:13:8f:1d:47:77:9d:7f:82:2c:5c:de:dd:ad:c0:05:
b7:b9:ac:1e:26:ad:e2:94:88:cf:17:af:04:2d:a6:b2:07:e9:
2f:50:2e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:59 2026 by rpki-client