Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
File: ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft (raw, json)
Hash identifier: E+wYEb7OJ/HrqFw87Q0KzLdT92rvz2lkX7Y3gsFszg0=
Subject key identifier: 87:64:62:6A:EF:53:C8:CE:0A:95:66:7A:7E:FD:6B:F9:78:2B:82:13
Authority key identifier: 00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
Certificate issuer: /CN=0032534e8d560d73553c632bba10344a7c816614
Certificate serial: 019D24DF220C7074FD77810E2269642ED646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
Manifest number: 167D
Signing time: Wed 25 Mar 2026 12:01:36 +0000
Manifest this update: Wed 25 Mar 2026 12:01:36 +0000
Manifest next update: Thu 26 Mar 2026 12:01:36 +0000
Files and hashes: 1: 8gDgcDeShfBdliF1DBTffvxw12U.roa (hash: Fz6nbI88uHxwSxo85BK5DCibUg4PuN/OzYci0coXooc=)
2: ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl (hash: 0QIXlNKWuDh9qtiB620PmBo2E7yRJqruK4Ndqlqob4I=)
3: jCaGFWRG0k_cfmlAxYZcjUIw_Yo.roa (hash: qpdto+41ybuG4juygcEcToReJEmG6ghtzKbjR0IgkSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:df:22:0c:70:74:fd:77:81:0e:22:69:64:2e:d6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0032534e8d560d73553c632bba10344a7c816614
Validity
Not Before: Mar 25 12:01:36 2026 GMT
Not After : Mar 26 12:01:36 2026 GMT
Subject: CN=8764626aef53c8ce0a95667a7efd6bf9782b8213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:44:a4:a1:0e:3a:04:da:32:5b:84:5e:d7:b8:
d5:fc:93:bd:36:9c:3d:a2:8d:75:e2:08:21:d9:fb:
a8:18:5e:90:12:44:85:fb:0f:e2:3a:d0:5d:2b:59:
8b:39:af:00:7c:b7:70:dd:e8:6f:9f:54:26:04:2d:
8d:5d:48:4f:d6:7f:9e:60:49:63:ec:d2:09:08:28:
28:b1:a8:f1:3b:1d:23:0a:fa:a5:8f:fe:2f:40:90:
b2:48:9f:5a:07:ee:cc:a1:fb:27:be:03:17:a5:3a:
09:a5:0e:41:33:e8:50:bb:65:f1:70:c3:3f:22:75:
84:37:cf:46:bc:1c:95:3e:91:69:dc:07:3b:1d:e7:
cc:1c:b9:13:45:4b:e5:e6:be:c8:01:5a:8b:c2:eb:
7d:13:14:95:8b:46:4f:8e:2d:1e:ac:a2:f7:42:ba:
15:3a:87:39:65:83:a5:ff:22:6c:4a:2e:66:92:01:
e9:6d:7d:bd:c7:57:50:9d:c6:f5:24:78:3d:01:97:
9d:88:fa:68:d1:b3:13:cc:bb:89:28:04:9b:dd:c8:
7f:ab:c4:aa:50:b9:bc:9f:b8:a4:15:fa:a2:c1:3d:
b3:fd:56:29:25:91:5d:72:f3:9b:a2:2a:c8:27:b3:
03:ab:0f:f2:85:89:37:39:6a:b8:35:c0:92:79:cc:
1f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:64:62:6A:EF:53:C8:CE:0A:95:66:7A:7E:FD:6B:F9:78:2B:82:13
X509v3 Authority Key Identifier:
keyid:00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:15:e9:8b:3c:62:71:ef:95:73:6f:3d:c2:d4:71:45:a8:31:
0d:bc:88:6d:fa:34:f8:f6:de:2e:39:c3:2a:0e:fb:e5:2f:c3:
0e:0c:e2:fa:db:0d:c6:3f:3a:16:d5:fc:5d:9a:76:d6:e8:ae:
e4:c4:35:73:da:8c:4d:e7:fb:f0:4e:64:7c:77:5a:06:3a:72:
54:02:ef:4d:15:82:14:c5:95:53:d2:27:79:06:b2:bc:23:db:
b3:a5:34:9d:01:cc:6a:94:38:65:2e:bc:95:55:a9:af:92:59:
8d:3b:4e:f7:0e:a4:24:a5:7e:63:47:4a:5d:1a:34:43:fb:77:
e2:74:14:d7:a0:e8:e0:0a:19:f8:10:83:3d:98:f4:df:d8:ca:
81:7d:d8:e5:55:f9:43:c5:e3:b4:35:37:b9:c7:8e:62:d8:fb:
a7:55:9c:49:c0:be:8b:a2:ac:cd:5c:dd:33:10:35:9d:35:cc:
df:28:12:21:6f:58:22:d2:96:ee:e0:09:7b:9e:ef:4e:78:b1:
e1:83:33:6b:84:d0:89:bb:f7:f7:24:b2:8f:3b:46:7a:61:c7:
c9:f8:7d:63:97:80:99:e3:bc:47:52:c6:b7:48:d4:7c:9c:21:
79:44:9a:8c:67:cf:c5:3a:4d:cd:c6:b1:a5:28:50:7e:bb:93:
4a:06:6d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 16:20:08 2026 by rpki-client