Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
File: AdGZIUQMLysip3d4ApO8J_pH81o.mft (raw, json)
Hash identifier: k9Ij2Pce++PAtmNZvDfJcDxapW99lH40o317IDbWl2c=
Subject key identifier: 05:84:40:88:72:94:04:EE:CC:1F:4B:44:AC:A3:C9:8C:62:E5:56:01
Authority key identifier: 01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
Certificate issuer: /CN=01d19921440c2f2b22a777780293bc27fa47f35a
Certificate serial: 019D389BDE69D43DE8051958AFBD0F4E2192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 08:00:32 +0000
Manifest this update: Sun 29 Mar 2026 08:00:32 +0000
Manifest next update: Mon 30 Mar 2026 08:00:32 +0000
Files and hashes: 1: AdGZIUQMLysip3d4ApO8J_pH81o.crl (hash: cYPDb0J8IwKtg5krMd3GUnPh5RgwcRC6FylEH7mz538=)
2: vqx4rvgcwKRJYoIkEyxywbhGZIo.roa (hash: c2b87ljEpUBFoq5WYxAZjcHq9LKBdj40xam1g1KVDXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:de:69:d4:3d:e8:05:19:58:af:bd:0f:4e:21:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d19921440c2f2b22a777780293bc27fa47f35a
Validity
Not Before: Mar 29 08:00:32 2026 GMT
Not After : Mar 30 08:00:32 2026 GMT
Subject: CN=05844088729404eecc1f4b44aca3c98c62e55601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0c:18:66:13:96:b9:18:90:63:1f:6e:ed:bf:
a4:37:d7:b8:ee:bd:f7:26:85:bf:c1:a8:92:17:b5:
d1:15:51:06:82:43:21:01:cd:9a:b6:80:89:ef:ce:
19:fe:95:e8:3b:ca:f3:18:29:35:8d:43:cb:42:f2:
5f:ee:f3:5b:eb:ba:68:6f:ca:ae:65:1e:21:f8:c0:
95:2f:4d:f6:64:2f:c8:ab:7a:04:f0:ee:bc:1a:4c:
98:c5:49:4d:42:6d:8d:96:26:0e:20:39:5e:18:d2:
0e:dc:e3:fe:2f:96:19:f2:8a:60:0b:4f:1a:2e:c4:
ef:21:ff:3e:44:a3:43:ad:25:8b:1f:bc:c9:f2:e2:
c8:49:91:e5:f1:99:37:ac:03:a0:02:77:12:78:89:
4b:7a:4d:23:92:25:c7:bb:21:2a:b9:0b:3e:e4:66:
90:03:ce:ad:90:4a:71:71:f4:d5:09:36:7a:ed:93:
a1:b8:41:08:9d:aa:cb:50:43:81:90:0f:80:ee:c4:
32:3e:96:f6:19:07:40:b9:a5:8e:9d:30:d2:d7:a0:
e5:a2:89:ee:a4:73:08:7a:31:a6:ad:ea:b6:00:85:
2f:96:cd:14:b7:f5:af:e9:18:66:bc:27:f6:69:be:
44:14:6d:16:c6:3a:0f:b3:a5:b1:89:b7:ea:fb:04:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:84:40:88:72:94:04:EE:CC:1F:4B:44:AC:A3:C9:8C:62:E5:56:01
X509v3 Authority Key Identifier:
keyid:01:D1:99:21:44:0C:2F:2B:22:A7:77:78:02:93:BC:27:FA:47:F3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGZIUQMLysip3d4ApO8J_pH81o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/cabd64-186b-4282-b14a-aa6fd434e0ef/1/AdGZIUQMLysip3d4ApO8J_pH81o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a4:0f:cd:d6:cb:ed:85:94:37:ad:5d:13:22:ea:3f:42:c3:
ac:81:fa:0d:05:e8:8b:e0:15:b2:a3:5c:b6:34:12:cc:e3:e4:
b4:ff:cb:ea:43:9f:af:b2:ed:74:f4:c9:f7:02:cc:48:05:4c:
85:78:80:89:67:37:fd:b2:3d:92:51:55:df:e0:7f:48:47:74:
2c:a6:62:02:84:f6:a6:d5:60:11:a1:d7:3b:83:92:c7:c3:fe:
d0:56:97:ea:c2:2b:b3:24:00:be:f4:b0:57:54:58:a8:92:24:
80:a9:01:bf:b2:2a:27:fa:34:e5:2c:30:7c:9b:82:2a:31:02:
e9:14:bf:6c:b3:32:91:b6:e1:10:46:51:d5:36:12:61:62:55:
e2:60:7d:98:2d:a7:7b:93:e6:05:79:00:31:97:4c:c8:65:a6:
6d:52:7c:53:05:3c:8b:2f:9e:7f:e6:88:52:f1:e3:28:ff:c7:
25:15:6b:83:73:5f:a7:06:2a:af:b8:66:59:1d:d8:6b:de:97:
f3:34:c1:6c:2a:a4:72:4b:bb:bd:46:a4:37:f2:cd:f3:12:c6:
cf:94:2b:f4:f4:71:4a:48:ba:86:ed:27:9a:bc:2a:e5:c7:8e:
b3:2d:ef:62:33:21:1a:f0:c9:8a:13:51:d7:82:1e:fa:06:e4:
cb:34:e2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:30 2026 by rpki-client