Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
File: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft (raw, json)
Hash identifier: bOSezpePS0MdYEilgu+PG+L59Fo/qZoEmtS4Iu7e5As=
Subject key identifier: 49:E4:CA:DE:B5:F8:CC:72:20:77:C9:B4:A6:88:32:70:B7:40:2F:B6
Authority key identifier: 01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
Certificate issuer: /CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Certificate serial: 01A13F02885C9F959AD935B2B5004BCC78A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 10:01:32 +0000
Manifest this update: Thu 15 Oct 2026 10:01:32 +0000
Manifest next update: Fri 16 Oct 2026 10:01:32 +0000
Files and hashes: 1: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl (hash: j8h0cQi45TpgPcBkHLoEIKL1KA9fIQA4CITWojZ8lFo=)
2: lU3BCZBDNlCDk-8OFyyOit3pGFs.roa (hash: AWI11iVTlePwywxMYMGqGux5nESZadW+LVNcBQPGHWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:88:5c:9f:95:9a:d9:35:b2:b5:00:4b:cc:78:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Validity
Not Before: Oct 15 10:01:32 2026 GMT
Not After : Oct 16 10:01:32 2026 GMT
Subject: CN=49e4cadeb5f8cc722077c9b4a6883270b7402fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:74:6e:db:3a:5d:9e:45:65:46:02:0c:58:bd:
88:8d:18:b4:79:6e:cc:24:aa:91:63:40:b8:68:33:
d3:b9:0e:9b:8b:e7:b8:f6:46:c2:b9:c5:3e:71:67:
ef:f2:7a:2c:36:5a:13:17:76:e2:28:3d:c0:51:1a:
92:50:68:8b:34:00:de:11:3d:1d:08:9a:94:d2:cf:
94:41:79:f6:94:25:8c:c7:15:d2:b3:b7:70:22:60:
34:e8:7b:3f:c0:4c:d5:92:0a:04:a0:4f:87:ef:6c:
78:33:f5:16:0d:c9:cf:2a:80:ec:d9:a2:de:35:af:
51:96:08:f3:82:12:96:05:ff:b4:bd:e8:80:7b:0e:
fa:2b:b3:93:5d:3e:53:ad:91:46:9c:cd:ad:45:e6:
b1:17:e7:8b:18:bd:16:80:f2:44:5e:af:10:04:18:
f3:6e:35:24:6d:64:b5:b3:f3:9f:c6:d0:90:6b:0a:
b4:3a:23:45:1d:40:e0:85:f4:00:e0:54:58:16:92:
64:e0:51:64:ae:07:8e:ca:19:7e:c4:f3:26:ca:65:
dc:c9:ac:72:91:cf:99:82:03:8a:2e:7a:3c:72:d5:
a7:b7:c9:8e:f0:2f:20:99:2d:cc:c2:89:34:51:52:
10:54:71:13:07:a8:ef:3b:ad:ac:18:68:5b:0e:83:
33:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E4:CA:DE:B5:F8:CC:72:20:77:C9:B4:A6:88:32:70:B7:40:2F:B6
X509v3 Authority Key Identifier:
keyid:01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:11:58:f4:2c:0e:c9:86:b7:dd:2c:16:e5:b4:0a:d3:2e:7f:
3b:32:41:f1:81:a6:f7:e3:a0:0a:c6:4d:5a:d5:a4:d7:da:8c:
94:55:cb:03:e7:65:42:25:98:d1:8b:0b:6b:89:ca:45:98:6c:
c7:15:06:8d:13:1c:70:37:d0:7b:5a:d1:5b:a2:3f:16:05:07:
fe:4e:64:0d:27:58:6b:02:b9:3e:16:3f:9d:8c:38:df:af:1f:
c3:43:ed:d2:f8:9b:48:40:37:22:03:f7:11:c5:6c:e1:ce:f0:
28:7a:5a:cf:ad:b7:54:db:6f:76:7a:66:07:0b:81:5c:d0:70:
20:d9:1f:d9:fa:67:d0:7e:85:f9:95:a0:f8:3a:e6:ec:81:be:
6b:d9:5d:d9:29:25:09:ca:49:33:a5:92:c2:38:1c:d5:35:80:
06:ff:9b:48:89:ba:01:d3:08:a6:c0:2e:bb:25:57:68:be:f1:
05:f3:c7:d9:6f:0a:77:c9:df:d3:bc:45:1a:18:d1:da:01:d3:
f4:b3:90:74:90:29:a7:6b:f7:c3:51:32:6a:c3:0e:24:bf:cb:
a0:d2:0f:b1:71:02:a8:c6:03:77:8d:4e:fa:b3:61:95:be:14:
02:b6:7d:eb:d9:b9:42:a6:83:33:25:a3:37:db:00:62:44:21:
c4:f4:fd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:29:31 2026 by rpki-client