Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
File: AD_-289_nHEO9Yuv_uzuA3fxm9M.mft (raw, json)
Hash identifier: k8bRQjrtLF9bTWYFQOxw9zBMUJB+AsvlvqrmqFhv5WM=
Subject key identifier: AD:35:E5:F9:DB:7A:72:9C:2E:34:09:14:EF:D9:6F:13:44:A5:C1:6D
Authority key identifier: 00:3F:FE:DB:CF:7F:9C:71:0E:F5:8B:AF:FE:EC:EE:03:77:F1:9B:D3
Certificate issuer: /CN=003ffedbcf7f9c710ef58baffeecee0377f19bd3
Certificate serial: 01A17E184A07B51967E03CBEDF80883847BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AD_-289_nHEO9Yuv_uzuA3fxm9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
Manifest number: 0140
Signing time: Tue 27 Oct 2026 16:01:23 +0000
Manifest this update: Tue 27 Oct 2026 16:01:23 +0000
Manifest next update: Wed 28 Oct 2026 16:01:23 +0000
Files and hashes: 1: 6qDW6_OYHkue6ocM9JiQxw7eaDA.roa (hash: DI4vkJ8mXMU1gsjZNOcgIX1g1JQ6NES2SMI/VfbnZRM=)
2: AD_-289_nHEO9Yuv_uzuA3fxm9M.crl (hash: WxXKChbAD/WTRH9Y3rSbqF9mxGvARXsZYn5XmcOH8Gs=)
3: Ck3rOI6Xa5Gj7dndlxdeh3NrBmc.roa (hash: B5fZHyrENLJkUKcY0cgDv3KWy4P0ZeZxjcroZn03jaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AD_-289_nHEO9Yuv_uzuA3fxm9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:18:4a:07:b5:19:67:e0:3c:be:df:80:88:38:47:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003ffedbcf7f9c710ef58baffeecee0377f19bd3
Validity
Not Before: Oct 27 16:01:23 2026 GMT
Not After : Oct 28 16:01:23 2026 GMT
Subject: CN=ad35e5f9db7a729c2e340914efd96f1344a5c16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:5e:c4:4b:5e:4d:c9:86:e1:18:30:75:ab:
44:e2:fa:66:8c:55:45:95:4e:58:bd:c9:80:33:06:
96:06:b4:23:44:8e:32:d8:fe:51:bf:58:fe:13:f4:
77:c0:0c:5f:87:68:7f:2e:a9:f8:e1:c0:a9:34:27:
a2:b0:16:cc:2a:d0:6b:14:ec:86:a4:ab:c5:7c:5b:
24:3e:c0:87:0f:22:a8:b6:eb:05:c2:d2:d0:3e:0f:
49:5c:30:00:e2:dd:76:8f:77:06:4a:ad:71:a5:94:
85:a0:32:9d:fa:4f:9b:b3:bd:7b:48:20:26:d2:ed:
b8:2f:5b:c0:7d:4f:7e:04:08:b8:fd:ba:cf:2e:02:
91:c7:4a:68:e7:ea:9d:f8:bd:3b:7e:c6:d7:56:85:
7a:e1:54:d8:e5:ea:b9:4e:98:6f:48:b7:eb:3b:d5:
b9:29:ca:10:0d:14:f6:cc:32:7a:96:92:29:e1:5e:
88:86:9c:a2:b6:4e:40:39:36:47:75:c8:f7:9b:37:
05:35:d3:97:11:60:92:b7:2b:b6:87:11:99:bb:4a:
e3:3f:d8:8a:1e:c7:f3:2b:79:c6:b5:ae:26:03:d1:
b4:a1:eb:54:77:ac:50:6b:c4:c6:c7:8c:a7:65:a7:
8b:53:12:1a:67:bc:79:87:e2:1f:74:90:47:4d:1d:
45:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:35:E5:F9:DB:7A:72:9C:2E:34:09:14:EF:D9:6F:13:44:A5:C1:6D
X509v3 Authority Key Identifier:
keyid:00:3F:FE:DB:CF:7F:9C:71:0E:F5:8B:AF:FE:EC:EE:03:77:F1:9B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AD_-289_nHEO9Yuv_uzuA3fxm9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:dc:fc:71:96:47:b2:29:44:17:98:50:22:dd:53:d7:3e:e4:
00:74:c5:82:00:c1:4e:3f:a5:a4:1e:ac:f9:49:b3:44:a4:da:
60:c7:56:95:57:74:04:e9:ac:94:cf:22:68:0f:b9:f6:5b:9e:
9d:37:e4:81:56:a8:3d:73:67:62:d6:e4:75:2c:f1:71:78:b1:
b2:74:b6:e9:cf:8c:3b:10:8d:73:df:f1:5e:8b:61:d0:bb:ca:
fd:d5:a7:ea:34:4f:77:8b:92:c1:e0:3b:bf:97:42:35:67:5f:
56:cb:34:6e:c8:fe:61:d8:08:11:30:8d:dc:89:c5:98:12:17:
cd:95:e0:d0:c6:99:ff:5e:98:53:24:ee:6e:9a:85:92:99:6f:
65:68:73:48:0b:a1:d1:9d:bd:26:51:fa:5b:e5:9d:df:f9:f6:
3d:5f:c4:01:7e:8d:57:f1:58:ca:69:b5:a0:d4:22:11:ed:9b:
22:6d:eb:15:90:6c:33:d9:3e:1c:31:a2:7b:f9:fb:de:72:08:
9b:32:31:ab:83:dc:ae:2c:a5:ee:d2:8f:66:c8:a7:22:34:1e:
c8:f9:2b:60:4b:6e:8b:33:df:f4:4b:b3:f4:cc:29:56:86:02:
8b:46:ea:c6:92:20:d6:09:92:b5:52:88:aa:dc:8e:6d:0c:ff:
cf:2b:af:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:45:39 2026 by rpki-client