Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
File: AdULmAcVDaOWMiudTc_A0vsrZSA.mft (raw, json)
Hash identifier: 0tuNtR631+fwrlUFKgWELQX+mcKokmhRUHTSR6Z3vBQ=
Subject key identifier: F3:24:77:4C:FC:60:30:10:E7:50:AC:20:5B:5C:E5:E9:7C:E6:DC:B0
Authority key identifier: 01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20
Certificate issuer: /CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
Certificate serial: 01A001A657A8213BE0F950AFF8AF6335FAB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
Manifest number: 0A53
Signing time: Fri 14 Aug 2026 19:01:13 +0000
Manifest this update: Fri 14 Aug 2026 19:01:13 +0000
Manifest next update: Sat 15 Aug 2026 19:01:13 +0000
Files and hashes: 1: AdULmAcVDaOWMiudTc_A0vsrZSA.crl (hash: 5d5wJ9j7YEtfXKfzh4csvPymHq/wojqUiLfCfCfFGS8=)
2: uiwMttqxMzyYLQF8qEOVXUg9Ojg.roa (hash: e2JqwtqqkS6AcVv80pzTttUERY6557Im301R/2ucBQs=)
3: xSMo8UNuABk66wueztspa3AS7aE.roa (hash: 0TgB5/hOvn7dMDflKmn1c8RImHQ34JWH4S779C2eW2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:57:a8:21:3b:e0:f9:50:af:f8:af:63:35:fa:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d50b9807150da396322b9d4dcfc0d2fb2b6520
Validity
Not Before: Aug 14 19:01:13 2026 GMT
Not After : Aug 15 19:01:13 2026 GMT
Subject: CN=f324774cfc603010e750ac205b5ce5e97ce6dcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:e6:f9:28:e5:51:d6:52:7b:2a:42:87:4e:21:
ef:5f:84:52:f3:03:37:63:51:cc:73:ed:b2:a4:e8:
02:fe:65:23:12:0b:3e:23:6c:46:a6:da:27:bc:cd:
18:43:b1:a4:29:3d:e4:b2:0a:c9:7a:a6:a0:0b:03:
49:23:37:92:cf:ad:70:3c:09:13:4b:33:e6:65:5d:
57:93:bf:fe:20:74:25:f9:ce:dd:0f:83:8a:72:6a:
e0:bf:d5:e7:29:76:51:fc:75:6f:5f:8b:3a:55:d7:
26:a7:80:95:0a:3e:2e:1a:a6:34:46:67:c0:2d:78:
82:23:3b:d9:86:47:91:19:17:79:ad:ac:f0:45:f7:
15:91:a0:81:c5:37:f3:0c:ba:b9:ba:21:ef:52:ac:
fa:58:c5:e6:9d:f2:e8:f6:d0:05:5f:a6:09:75:25:
34:1a:36:12:c3:b4:28:82:b0:6c:d1:15:97:27:66:
97:09:a3:08:c9:45:9a:81:a6:cf:a0:6e:37:9c:72:
70:b3:ee:12:17:36:58:37:1b:c8:b8:b1:ce:cf:28:
7a:cf:16:84:91:98:0a:a1:d8:21:08:e1:8f:3f:83:
9a:4d:5d:c7:4b:e2:5e:e1:2f:3b:d5:0b:6f:da:b7:
49:a1:76:84:cf:b3:d8:50:d5:d5:d1:5b:aa:bd:9e:
2d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:24:77:4C:FC:60:30:10:E7:50:AC:20:5B:5C:E5:E9:7C:E6:DC:B0
X509v3 Authority Key Identifier:
keyid:01:D5:0B:98:07:15:0D:A3:96:32:2B:9D:4D:CF:C0:D2:FB:2B:65:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdULmAcVDaOWMiudTc_A0vsrZSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ea71a0-6941-4276-9589-8124bd949b0e/1/AdULmAcVDaOWMiudTc_A0vsrZSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:cf:94:f1:cb:3c:6a:21:e3:8c:5e:ab:52:8e:aa:55:c4:d6:
11:68:88:ed:8d:68:1f:d8:13:18:02:9c:9d:53:1d:e1:2b:84:
34:40:e6:8f:9d:6e:56:27:78:cb:66:cc:09:ff:aa:35:73:4c:
49:27:19:b7:35:09:f4:25:ce:e6:ec:e6:dc:2c:3f:96:ec:d8:
87:b4:c0:36:d5:35:f2:04:05:db:94:e2:08:9c:05:dd:7d:eb:
61:75:ae:68:98:67:ad:03:51:3d:3c:a0:e0:e7:89:37:a5:15:
79:21:85:08:f5:d1:ff:76:e8:19:76:38:eb:98:73:c9:97:0d:
db:71:f8:80:3f:79:7e:d5:ce:f5:8f:f8:e2:43:b8:9f:f5:5c:
23:98:67:ec:96:13:d7:75:08:c6:81:e7:a9:6c:6b:17:0c:b3:
d0:66:63:b6:df:5e:ef:2c:6a:91:54:7e:95:c4:52:7f:88:48:
58:af:9f:5b:65:90:f6:4d:11:07:05:9b:1a:ed:90:d8:14:1d:
c7:40:b9:bf:20:7a:59:b3:6a:2e:d7:2a:c0:e2:79:e2:d7:63:
c7:22:b6:97:d3:58:87:c9:c8:45:b8:4f:65:aa:24:e0:f3:41:
2d:2d:bf:00:49:26:1d:de:d1:35:b1:48:b2:05:8d:4a:80:4d:
a8:9c:0e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:21:08 2026 by rpki-client