Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
File: abZsbpoUxv13P6Md-YILM5aVLi4.mft (raw, json)
Hash identifier: ppiqUeN37pIjyxKfr75ibDGpcUhy+MaKgL/M+f+A1u0=
Subject key identifier: 44:E7:A6:08:28:A9:C8:3C:6D:C4:00:4C:33:A1:3F:89:00:D6:A4:89
Authority key identifier: 69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
Certificate issuer: /CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
Certificate serial: 019D3909E98340A1D8E11AE99FEC6F7703FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
Manifest number: 065B
Signing time: Sun 29 Mar 2026 10:00:44 +0000
Manifest this update: Sun 29 Mar 2026 10:00:44 +0000
Manifest next update: Mon 30 Mar 2026 10:00:44 +0000
Files and hashes: 1: F6jXQ7ol1eJRO8-zqzGGELWLPpU.roa (hash: VvXIzi7dvfLzRfzq8yrSH5FHAFTW+ckA8+wnrvNtY0E=)
2: abZsbpoUxv13P6Md-YILM5aVLi4.crl (hash: EQb04jGkpOQbvjXFfZqyuJbh52tFWpHKuENo97du1S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:e9:83:40:a1:d8:e1:1a:e9:9f:ec:6f:77:03:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
Validity
Not Before: Mar 29 10:00:44 2026 GMT
Not After : Mar 30 10:00:44 2026 GMT
Subject: CN=44e7a60828a9c83c6dc4004c33a13f8900d6a489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2e:48:ef:36:d4:ef:9b:a9:7b:63:3e:6e:57:
15:e0:9b:da:fe:31:1d:6f:2d:ba:7b:3d:14:7b:31:
97:15:26:ff:3c:8d:9e:b9:eb:a2:f6:7c:c8:f6:f3:
9a:e6:3f:9b:78:f9:30:e7:d9:4d:ed:9e:7a:b1:8b:
a6:68:0c:0b:8e:1c:82:b1:5b:34:02:bb:66:de:f3:
4e:49:10:07:80:5b:e8:89:be:08:1f:05:b6:2c:ca:
1d:3b:f2:b3:1f:8d:54:bf:3c:d9:6e:8c:12:14:5a:
ee:c6:b8:7d:3e:1d:17:a4:31:3d:5a:4b:cf:28:7e:
98:e9:9a:c6:b1:3c:a5:bd:0f:59:c6:93:14:08:bf:
66:19:45:d3:b6:0d:f5:4e:73:7b:e6:39:55:61:6f:
b7:39:75:dc:fb:47:71:d9:f1:d3:23:32:03:a2:ac:
2e:89:1b:1d:c0:4a:a7:07:17:92:b5:b4:bc:14:51:
20:c0:8d:a0:f1:27:db:3c:04:fd:52:fa:6c:d5:e6:
ee:56:6d:64:47:12:fe:3e:cf:b3:50:e3:b1:ad:09:
bd:ea:cb:8f:e6:a5:d1:e4:8f:94:6f:5b:af:a8:bb:
30:e4:06:ca:dc:86:38:4c:34:53:52:d9:8d:bb:c7:
e5:96:a1:71:d6:2b:cc:83:68:ab:e8:7c:08:f2:16:
5f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E7:A6:08:28:A9:C8:3C:6D:C4:00:4C:33:A1:3F:89:00:D6:A4:89
X509v3 Authority Key Identifier:
keyid:69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ca:38:24:ef:69:4c:4a:b7:57:09:f0:68:f7:d0:02:b9:49:
4f:d2:ae:76:91:e3:13:9b:e4:40:89:ed:a2:15:ae:43:8a:70:
ef:1d:e5:3c:1b:22:0f:d0:97:de:61:d0:68:30:ed:fe:19:11:
54:06:f6:f4:fd:79:83:9d:91:c7:82:20:b1:99:97:0c:d9:d7:
10:a9:60:3d:fb:c6:95:11:96:5e:2e:d0:43:d5:64:2a:e2:50:
28:4c:82:2b:4f:52:49:dd:83:3c:51:65:c1:a4:14:b4:08:85:
04:1e:fc:b4:0b:da:b9:ae:4b:c9:85:10:f7:4e:b3:99:7e:7e:
06:c5:a7:2e:70:e0:eb:45:01:de:e0:e9:03:91:db:68:5b:f4:
87:be:e5:84:af:87:ae:85:12:27:49:f4:d2:0c:a2:bc:0b:1c:
65:e9:d1:55:ee:11:ed:ae:6a:43:a8:6f:7b:e6:16:9a:e8:75:
81:ec:ec:4d:a5:17:46:45:e5:e4:20:f9:4c:8c:93:50:60:bd:
fa:4f:8b:a8:f4:85:8e:6a:db:5f:ec:4d:60:cc:0e:b9:17:70:
98:f3:b4:ef:65:5f:43:ab:1f:20:bf:82:84:ca:bb:ae:21:86:
9f:9b:cf:21:bd:95:cf:fa:83:9c:ed:02:25:f1:ce:03:25:c1:
a5:e1:74:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:35 2026 by rpki-client