Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft
File: ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft (raw, json)
Hash identifier: PL0GO42YXnid3M0cYsKdUGrz87RHx2+5S2Nf5wOYNBw=
Subject key identifier: 1B:49:8C:BE:92:20:FC:97:A5:40:A1:D6:B7:39:A0:E3:F7:AD:5B:77
Authority key identifier: 00:3B:BC:81:79:61:51:9C:A5:A3:18:E8:4E:75:AD:9B:B3:DC:C7:E6
Certificate issuer: /CN=003bbc817961519ca5a318e84e75ad9bb3dcc7e6
Certificate serial: 019D0741A01F7217BE85B089FD91EA1D9FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft
Manifest number: D7
Signing time: Thu 19 Mar 2026 18:00:34 +0000
Manifest this update: Thu 19 Mar 2026 18:00:34 +0000
Manifest next update: Fri 20 Mar 2026 18:00:34 +0000
Files and hashes: 1: ADu8gXlhUZyloxjoTnWtm7Pcx-Y.crl (hash: gwGIMS4/SPZr3jD2wwDe4M0Qke+AAInURE3T0qn5OW0=)
2: UpKRjChH7E6XgVm5AEhCKw9xUVI.asa (hash: itl4/7Ulh3ulcNHslb/7i9V8CSJ2eDVPnXoQqeOhRyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:41:a0:1f:72:17:be:85:b0:89:fd:91:ea:1d:9f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003bbc817961519ca5a318e84e75ad9bb3dcc7e6
Validity
Not Before: Mar 19 18:00:34 2026 GMT
Not After : Mar 20 18:00:34 2026 GMT
Subject: CN=1b498cbe9220fc97a540a1d6b739a0e3f7ad5b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:34:b9:64:70:e1:98:c5:02:2f:c1:df:d1:b0:
dd:84:0f:32:36:51:d2:ec:b8:0c:33:c3:3a:be:a4:
4a:52:5e:28:35:6d:05:2f:82:68:fb:94:0f:f2:9d:
de:d5:9a:e9:3c:24:19:2a:3d:2c:d3:09:32:12:06:
17:d5:72:ea:34:21:29:2f:ef:a5:34:b2:c5:cd:18:
d8:94:68:a5:58:ba:5c:26:08:70:fa:d6:86:72:da:
29:a1:c4:6b:fd:dc:70:03:07:7b:73:40:67:cf:0a:
39:b2:8a:34:7d:6d:74:6c:fd:0f:49:cc:b8:aa:78:
ab:3e:e4:0e:60:cf:03:02:64:4e:c3:82:88:5c:4a:
50:c6:f1:80:74:8e:8a:92:30:f8:5f:88:4d:df:f3:
d3:04:4e:86:eb:40:2b:90:06:57:c9:90:0a:fa:50:
98:ae:0b:9b:11:a1:cf:50:69:34:aa:92:34:aa:a9:
70:cb:a2:82:a0:91:93:e1:b2:aa:d4:0f:19:c2:d9:
ad:14:6b:de:38:a9:71:c4:2b:b2:54:f9:1c:50:f7:
83:fa:6f:22:5c:3a:3a:4a:7f:8f:6c:f6:c2:30:f1:
07:8a:38:9f:69:46:31:a3:20:29:df:e9:93:04:03:
ba:23:1a:fd:c8:2c:3d:36:5f:4a:d3:91:39:b1:50:
e8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:49:8C:BE:92:20:FC:97:A5:40:A1:D6:B7:39:A0:E3:F7:AD:5B:77
X509v3 Authority Key Identifier:
keyid:00:3B:BC:81:79:61:51:9C:A5:A3:18:E8:4E:75:AD:9B:B3:DC:C7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/ADu8gXlhUZyloxjoTnWtm7Pcx-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:27:5d:43:20:81:45:9f:15:58:bd:ba:88:59:80:ef:de:c8:
bd:c4:7f:d3:db:d4:2f:46:c2:b3:0b:dd:a9:50:ce:e6:af:6f:
b5:70:7f:4f:b9:8e:40:1f:fc:9a:43:c7:f3:72:c8:ee:2d:d3:
fc:c5:24:2f:a2:13:43:9e:25:b2:ce:7f:3f:31:65:ed:46:51:
9d:ce:6c:c4:41:58:2f:9b:6f:87:59:98:33:5a:0f:9e:e1:4f:
b9:b1:22:d4:67:59:e2:36:89:00:20:77:32:d5:fe:a4:5e:95:
6e:d2:41:02:16:21:f6:98:97:f8:0b:8b:b6:47:9d:09:43:13:
90:91:c6:74:87:ff:c8:55:71:d8:2c:8a:ea:ce:3d:dd:34:65:
6e:c6:11:35:95:e0:fa:b4:21:9b:98:64:97:f5:b3:f9:3b:8b:
52:00:45:32:c8:09:23:61:c6:1d:df:a3:41:65:87:e2:5b:61:
6f:78:04:b8:73:5e:43:ab:06:96:34:c6:ac:20:79:be:ea:98:
2c:93:1a:7b:9f:61:8b:02:6d:4f:61:4d:af:15:1f:43:a8:4b:
77:87:70:97:a5:ca:50:9c:66:76:a1:c0:f5:07:e6:09:eb:db:
33:85:3c:18:cf:8f:77:8e:0c:e3:3a:61:ee:cf:47:d0:bf:e1:
a5:12:68:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 04:36:58 2026 by rpki-client