Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
File: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft (raw, json)
Hash identifier: KJ4y2+VYSKlGtZ4LEaWi3FU2qNPO9VU8vtgsZMh5XEc=
Subject key identifier: 6A:10:E5:30:80:E7:84:72:C1:27:84:C5:9E:FA:B5:EB:01:4A:78:5D
Authority key identifier: 01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
Certificate issuer: /CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Certificate serial: 019D37BFF97CF274D73E23F3909DC56E9333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 04:00:21 +0000
Manifest this update: Sun 29 Mar 2026 04:00:21 +0000
Manifest next update: Mon 30 Mar 2026 04:00:21 +0000
Files and hashes: 1: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl (hash: tsRv8oqr9YWIAenTlA6BksQX3kLL4WutdU37o5eJMuA=)
2: lU3BCZBDNlCDk-8OFyyOit3pGFs.roa (hash: AWI11iVTlePwywxMYMGqGux5nESZadW+LVNcBQPGHWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f9:7c:f2:74:d7:3e:23:f3:90:9d:c5:6e:93:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Validity
Not Before: Mar 29 04:00:21 2026 GMT
Not After : Mar 30 04:00:21 2026 GMT
Subject: CN=6a10e53080e78472c12784c59efab5eb014a785d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:5e:2e:7d:b3:62:51:9a:e4:3f:e8:4a:74:
9d:dc:7c:9e:03:01:d7:a8:65:39:30:21:a6:78:3a:
94:89:16:79:59:e8:4d:eb:aa:ce:3e:06:d9:99:90:
f8:71:74:c7:f7:d6:f0:d4:e6:52:84:79:dc:52:33:
c6:bb:d4:07:be:b3:05:c1:8e:1c:0b:59:b4:78:c1:
b1:45:a1:51:85:8f:87:94:6b:3d:92:70:dd:70:0a:
18:82:3a:15:e1:ad:2e:5a:51:15:b5:f8:0a:3c:44:
16:fa:93:f8:14:ca:04:70:0a:0f:ad:fd:c2:dd:41:
ed:58:9b:b3:68:ae:94:d1:b8:45:6e:2c:76:ba:4f:
df:81:ee:c4:ec:7d:58:20:b5:10:c4:e1:6b:3d:75:
51:3f:61:10:60:41:f7:54:3b:0b:8c:83:ce:b7:fd:
c0:37:0a:03:49:67:7f:1b:1d:01:01:70:56:3b:94:
55:f5:55:83:aa:16:10:d4:41:20:aa:8b:63:c1:d1:
1e:d2:a6:d5:76:cc:02:c4:87:1d:2d:b6:9c:5a:25:
43:36:7f:cf:dc:55:ac:30:0f:34:84:c5:71:5d:a4:
02:ad:21:e7:49:f1:b6:2d:20:14:c4:24:f8:aa:9d:
08:8f:44:26:ef:46:94:30:1c:15:6f:3a:4a:77:c2:
ea:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:10:E5:30:80:E7:84:72:C1:27:84:C5:9E:FA:B5:EB:01:4A:78:5D
X509v3 Authority Key Identifier:
keyid:01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5e:0e:03:3a:47:8a:78:bf:16:af:71:31:c1:6e:d4:05:5a:
8c:bf:50:58:94:6d:b0:a6:3e:68:0e:b8:be:83:d7:64:0f:5f:
00:b6:bf:9f:51:47:95:eb:ad:86:0f:79:fa:4d:06:3f:0b:44:
35:ab:87:3d:2b:7d:39:dd:ab:49:1d:52:28:64:05:af:0c:65:
50:d0:df:a5:87:f3:8f:8b:3a:35:d6:09:45:9c:ec:79:c0:00:
91:3f:13:04:a0:dc:3e:3e:f0:0a:b9:73:2b:69:8f:13:02:3f:
10:e4:b1:8e:74:7d:77:1b:b8:79:84:c5:59:bd:c4:50:62:37:
ba:8d:93:7e:cb:37:32:0e:61:ff:44:31:d2:aa:14:e0:80:35:
17:76:59:c3:75:f7:ae:dc:63:8b:19:3d:db:ed:11:ee:73:29:
e1:d2:d0:82:09:5c:6e:c3:87:01:d1:45:1d:92:d0:c9:48:40:
ad:22:54:28:08:56:6b:a7:80:91:53:da:06:7b:48:6d:50:b4:
3d:5b:fb:62:47:60:79:27:a0:84:1b:1c:30:6b:a2:f0:09:35:
1d:7f:e4:c9:61:7d:52:12:ed:b6:ad:4f:fd:18:e8:46:2b:30:
d6:7f:c6:9a:a7:10:99:9d:2b:5a:27:91:78:e2:d5:ca:8c:c9:
85:08:1a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:08 2026 by rpki-client