Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
File: aDCZAOZItlowenhgECv3ixb1XXU.mft (raw, json)
Hash identifier: 7DLBsx42W3c0fhWyFpeJNkzgwxe5GfIl9i2DOG9SXiU=
Subject key identifier: FC:24:7B:7B:E8:2B:92:FD:BF:EF:79:63:12:0E:79:65:B5:9F:5F:3C
Authority key identifier: 68:30:99:00:E6:48:B6:5A:30:7A:78:60:10:2B:F7:8B:16:F5:5D:75
Certificate issuer: /CN=68309900e648b65a307a7860102bf78b16f55d75
Certificate serial: 019FC9DCE6DF1BB74B554DCA9A2310CAB4ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDCZAOZItlowenhgECv3ixb1XXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
Manifest number: 0642
Signing time: Mon 03 Aug 2026 23:02:05 +0000
Manifest this update: Mon 03 Aug 2026 23:02:05 +0000
Manifest next update: Tue 04 Aug 2026 23:02:05 +0000
Files and hashes: 1: HbShzM3qrknCQZp2Tx1NZiWf1jk.roa (hash: YTGorDk65orDuOJJBzhtTtRRAT8YSucZuGLA7eX2VpI=)
2: aDCZAOZItlowenhgECv3ixb1XXU.crl (hash: rbcQKTs+UZwsJ+7JdLthgGxMGWYwc1n3J7dxf4AYQlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDCZAOZItlowenhgECv3ixb1XXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 18:28:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c9:dc:e6:df:1b:b7:4b:55:4d:ca:9a:23:10:ca:b4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68309900e648b65a307a7860102bf78b16f55d75
Validity
Not Before: Aug 3 23:02:05 2026 GMT
Not After : Aug 4 23:02:05 2026 GMT
Subject: CN=fc247b7be82b92fdbfef7963120e7965b59f5f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:84:06:63:df:50:bd:de:ef:54:42:bc:61:
8d:dd:e5:61:bf:48:8e:63:48:d4:56:0a:e2:2f:c3:
ab:81:d2:56:8b:10:27:64:78:69:1e:88:5d:d9:da:
86:3d:84:de:51:98:2c:4f:c5:ec:4f:59:0c:49:cf:
43:e8:d4:19:1d:9a:a2:03:29:89:42:41:63:7b:53:
87:dd:76:6e:d0:db:3a:ba:45:94:f1:88:59:13:6d:
a6:25:8e:c4:c0:42:a4:e4:fd:12:3d:9c:3c:07:53:
d0:3d:6b:51:e4:f4:c8:92:6a:62:15:ae:73:11:1b:
4a:27:f9:a9:fa:a7:7b:84:fd:b8:78:6d:34:a6:4a:
e1:b8:58:73:66:8b:06:f4:02:09:ac:54:cd:1f:e7:
36:21:4f:7e:c5:4f:30:c3:30:bb:7e:b7:c5:5d:6e:
52:70:e7:94:91:e3:d1:3d:50:2a:be:05:0e:36:64:
dc:78:27:c6:af:0b:45:d7:c3:3e:9a:23:d7:40:5a:
78:48:b1:ae:8b:41:bf:2c:04:07:78:e2:06:6d:a5:
c2:b4:45:6e:cd:c3:dc:ea:e9:c4:06:54:e7:75:ea:
d7:89:1b:5f:ce:1f:57:81:f6:df:ea:1c:a4:e5:16:
da:06:bc:19:2b:a7:1a:6d:6f:5a:26:4e:4a:69:60:
76:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:24:7B:7B:E8:2B:92:FD:BF:EF:79:63:12:0E:79:65:B5:9F:5F:3C
X509v3 Authority Key Identifier:
keyid:68:30:99:00:E6:48:B6:5A:30:7A:78:60:10:2B:F7:8B:16:F5:5D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDCZAOZItlowenhgECv3ixb1XXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f54c57-deca-4685-8106-9fa78075330b/1/aDCZAOZItlowenhgECv3ixb1XXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3f:02:09:83:c8:ea:5f:a4:00:00:f7:18:b9:59:22:00:b5:
3f:bb:31:70:af:aa:d7:c2:46:f3:3e:4b:d5:60:83:8a:3b:d6:
03:f4:64:8e:c9:61:46:65:12:11:58:c3:6d:3a:f0:f9:f2:10:
50:39:61:c4:6d:4b:2a:ea:cb:d2:70:79:19:1e:a5:7f:15:a0:
0e:08:79:60:3a:7d:28:c6:01:74:6a:bf:c8:90:25:c6:bf:67:
41:eb:d6:76:65:0a:c9:8a:3b:d0:45:ba:ee:4d:9f:76:d5:a5:
01:e2:7c:2f:93:c1:80:20:27:91:9b:3d:67:c3:e6:e9:9b:cd:
e5:39:2e:9b:01:cb:07:6a:63:7b:54:52:88:92:88:f8:d5:6e:
6c:5c:31:08:83:48:cf:cf:22:a3:c2:85:35:c3:80:a7:7f:ef:
ab:7a:d7:32:8a:6c:33:0e:ee:42:22:36:65:43:66:34:1a:5c:
d4:24:57:24:30:0d:d9:1b:4f:50:ba:ec:e8:aa:f2:05:22:98:
4f:df:36:1f:bb:29:81:8b:25:75:8c:46:ac:1a:aa:34:8c:9d:
13:e8:e3:7d:ba:9b:6c:cd:76:45:73:b3:ed:10:46:2f:0c:07:
65:ff:d3:9f:76:e4:2a:12:a0:df:5e:24:b0:d4:0c:c1:66:df:
f7:97:b6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 01:25:35 2026 by rpki-client