Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
File: AD_-289_nHEO9Yuv_uzuA3fxm9M.mft (raw, json)
Hash identifier: BSVAgQfUx8yCsU5yjyfHh6Ctu3YtQSEbV2dNybnRHrk=
Subject key identifier: BD:B7:4E:7D:23:F0:D1:8F:D3:A4:DF:C2:B1:42:C8:45:0A:A7:C8:A4
Authority key identifier: 00:3F:FE:DB:CF:7F:9C:71:0E:F5:8B:AF:FE:EC:EE:03:77:F1:9B:D3
Certificate issuer: /CN=003ffedbcf7f9c710ef58baffeecee0377f19bd3
Certificate serial: 01A08AC3D31921FB3A6AA58CF4916874BCE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AD_-289_nHEO9Yuv_uzuA3fxm9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 10:01:24 +0000
Manifest this update: Thu 10 Sep 2026 10:01:24 +0000
Manifest next update: Fri 11 Sep 2026 10:01:24 +0000
Files and hashes: 1: 6qDW6_OYHkue6ocM9JiQxw7eaDA.roa (hash: DI4vkJ8mXMU1gsjZNOcgIX1g1JQ6NES2SMI/VfbnZRM=)
2: AD_-289_nHEO9Yuv_uzuA3fxm9M.crl (hash: FrzHVI5lyrXLF8cFFHbPtmbff18PEc6K3Bhjed239LQ=)
3: Ck3rOI6Xa5Gj7dndlxdeh3NrBmc.roa (hash: B5fZHyrENLJkUKcY0cgDv3KWy4P0ZeZxjcroZn03jaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AD_-289_nHEO9Yuv_uzuA3fxm9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:d3:19:21:fb:3a:6a:a5:8c:f4:91:68:74:bc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=003ffedbcf7f9c710ef58baffeecee0377f19bd3
Validity
Not Before: Sep 10 10:01:24 2026 GMT
Not After : Sep 11 10:01:24 2026 GMT
Subject: CN=bdb74e7d23f0d18fd3a4dfc2b142c8450aa7c8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:33:b5:27:85:d8:4a:8f:4f:ee:05:4d:fc:
1f:8d:fe:92:8b:fe:b6:7a:44:27:40:4b:6b:88:f9:
42:b0:77:7b:31:35:87:d4:04:c2:19:d1:24:df:30:
1e:aa:d2:b2:8d:27:c7:1e:18:b6:85:79:4d:93:39:
3e:ad:df:fb:0f:29:79:0f:44:a5:88:bc:fc:5b:79:
11:d6:42:85:72:f9:44:26:3e:de:b9:62:46:49:e6:
a9:f1:f0:05:a3:ac:f5:30:de:de:2a:74:02:1f:06:
20:1b:50:e9:48:be:4f:6c:e3:1a:74:53:53:40:4a:
e9:86:ed:29:85:3c:0e:95:0c:87:7b:68:6a:94:7f:
2e:a3:04:f3:10:85:3f:d0:21:ee:15:ae:94:62:56:
4b:65:aa:24:07:ed:56:a3:d9:2a:d7:67:2d:9d:1c:
76:89:3d:6a:6c:15:77:51:27:79:00:74:0e:26:1c:
80:44:18:1f:cf:d2:a0:c5:3f:dd:22:00:df:56:da:
a0:23:10:46:62:68:fe:52:d4:f2:a5:78:ab:4c:7d:
67:e8:f8:9a:f9:e7:0c:55:77:76:eb:96:9a:a8:4b:
bd:1a:6b:03:78:c5:3f:1d:97:80:92:70:f6:6d:1c:
6c:b8:92:7a:3e:7e:df:ed:71:75:0d:b3:27:ac:76:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B7:4E:7D:23:F0:D1:8F:D3:A4:DF:C2:B1:42:C8:45:0A:A7:C8:A4
X509v3 Authority Key Identifier:
keyid:00:3F:FE:DB:CF:7F:9C:71:0E:F5:8B:AF:FE:EC:EE:03:77:F1:9B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AD_-289_nHEO9Yuv_uzuA3fxm9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a7b21d-2b8c-4270-ae51-a716814c07e3/1/AD_-289_nHEO9Yuv_uzuA3fxm9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:54:6e:e1:44:81:34:7e:68:f0:7c:00:f8:e1:78:29:70:79:
42:74:c9:d5:b5:07:40:ea:8d:f7:5b:59:30:42:d2:b1:de:25:
75:96:50:df:37:0f:c8:1d:29:22:81:ef:10:43:a1:c5:0c:2b:
2a:a0:35:5c:07:27:1b:ec:94:00:c4:9c:ef:56:b8:62:dd:4b:
47:4f:26:4f:41:a0:a7:ea:1e:c6:ad:75:0f:55:7f:4a:5d:d0:
2d:a9:f4:81:50:b3:55:4c:0b:c1:99:8b:a4:f2:6b:86:d2:9f:
fb:2b:43:a0:de:48:69:41:9b:53:7a:85:87:81:10:50:8e:f0:
e4:38:b7:b7:e6:9f:26:f2:f3:43:32:63:7e:a6:e5:2b:69:1a:
6a:94:60:54:b2:97:a6:0d:d0:71:af:5b:a4:c7:8a:4f:8d:68:
3b:b2:a4:ca:39:11:16:ad:07:5b:85:77:f7:f7:65:c8:7a:12:
d5:71:a8:c2:2d:8f:21:ed:63:da:b7:f2:11:a5:4a:7b:20:5a:
56:52:af:41:e8:08:ff:37:2f:9c:00:09:a3:b1:a8:f8:70:e2:
68:7c:b2:3e:f5:0a:63:dd:5e:63:79:09:8b:d9:05:8d:a2:32:
4a:84:7e:f8:c3:b6:b3:75:29:c9:7f:b2:28:da:16:21:25:36:
f3:63:ad:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKw9MZIfs6aqWM9JFodLzpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwM2ZmZWRiY2Y3ZjljNzEwZWY1OGJhZmZlZWNlZTAzNzdm
MTliZDMwHhcNMjYwOTEwMTAwMTI0WhcNMjYwOTExMTAwMTI0WjAzMTEwLwYDVQQD
EyhiZGI3NGU3ZDIzZjBkMThmZDNhNGRmYzJiMTQyYzg0NTBhYTdjOGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv74ztSeF2EqPT+4FTfwfjf6Si/62
ekQnQEtriPlCsHd7MTWH1ATCGdEk3zAeqtKyjSfHHhi2hXlNkzk+rd/7Dyl5D0Sl
iLz8W3kR1kKFcvlEJj7euWJGSeap8fAFo6z1MN7eKnQCHwYgG1DpSL5PbOMadFNT
QErphu0phTwOlQyHe2hqlH8uowTzEIU/0CHuFa6UYlZLZaokB+1Wo9kq12ctnRx2
iT1qbBV3USd5AHQOJhyARBgfz9KgxT/dIgDfVtqgIxBGYmj+UtTypXirTH1n6Pia
+ecMVXd265aaqEu9GmsDeMU/HZeAknD2bRxsuJJ6Pn7f7XF1DbMnrHbw1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL23Tn0j8NGP06TfwrFCyEUKp8ikMB8GA1UdIwQY
MBaAFAA//tvPf5xxDvWLr/7s7gN38ZvTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQURfLTI4OV9uSEVPOVl1dl91enVBM2Z4bTlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hN2IyMWQtMmI4Yy00MjcwLWFlNTEt
YTcxNjgxNGMwN2UzLzEvQURfLTI4OV9uSEVPOVl1dl91enVBM2Z4bTlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9hN2IyMWQtMmI4Yy00MjcwLWFlNTEtYTcxNjgxNGMwN2Uz
LzEvQURfLTI4OV9uSEVPOVl1dl91enVBM2Z4bTlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlRu4USB
NH5o8HwA+OF4KXB5QnTJ1bUHQOqN91tZMELSsd4ldZZQ3zcPyB0pIoHvEEOhxQwr
KqA1XAcnG+yUAMSc71a4Yt1LR08mT0Ggp+oexq11D1V/Sl3QLan0gVCzVUwLwZmL
pPJrhtKf+ytDoN5IaUGbU3qFh4EQUI7w5Di3t+afJvLzQzJjfqblK2kaapRgVLKX
pg3Qca9bpMeKT41oO7KkyjkRFq0HW4V39/dlyHoS1XGowi2PIe1j2rfyEaVKeyBa
VlKvQegI/zcvnAAJo7Go+HDiaHyyPvUKY91eY3kJi9kFjaIySoR++MO2s3UpyX+y
KNoWISU282Ot5g==
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:22:02 2026 by rpki-client