Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
File: aBHhJcs1cHby-jE4yT6aJoGxeJM.mft (raw, json)
Hash identifier: TNOisntmL6d+B/by9XBScBxNhWt5tL86AeUCxo0yFPo=
Subject key identifier: 35:52:B5:C4:E6:EE:27:8D:2B:D4:60:F4:AE:11:E0:F7:D1:DD:C4:7B
Authority key identifier: 68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93
Certificate issuer: /CN=6811e125cb357076f2fa3138c93e9a2681b17893
Certificate serial: 019D3865B138B0B785B6B962CA34AB6F9B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 07:01:21 +0000
Manifest this update: Sun 29 Mar 2026 07:01:21 +0000
Manifest next update: Mon 30 Mar 2026 07:01:21 +0000
Files and hashes: 1: aBHhJcs1cHby-jE4yT6aJoGxeJM.crl (hash: pNs6lj0/IyQg35qSAIJYcSTFLreg9axLXLumBtejV+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b1:38:b0:b7:85:b6:b9:62:ca:34:ab:6f:9b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6811e125cb357076f2fa3138c93e9a2681b17893
Validity
Not Before: Mar 29 07:01:21 2026 GMT
Not After : Mar 30 07:01:21 2026 GMT
Subject: CN=3552b5c4e6ee278d2bd460f4ae11e0f7d1ddc47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:de:3c:e5:fb:28:fc:dd:76:f5:bf:3f:70:f2:
ec:5a:c3:5a:34:b8:7e:f2:3a:aa:8c:c9:b1:f2:2d:
87:e0:ee:9f:af:41:33:b4:a1:76:fb:47:60:05:a6:
98:bb:6e:75:83:4d:f0:7e:c5:f9:cc:e4:ea:44:d5:
bf:87:6e:8d:31:08:dc:a4:c8:1a:2a:8e:47:99:fc:
f3:d3:31:65:0d:c6:aa:3d:38:06:6b:73:9d:dd:0d:
f3:37:12:e9:e2:10:eb:80:cc:9e:58:e2:ca:5f:f8:
26:34:ec:68:43:07:a1:b0:16:fe:49:fe:d3:7e:8f:
86:39:81:90:4d:b7:ef:00:12:76:aa:0e:39:4f:91:
35:8a:cd:b9:79:b0:ee:80:42:f8:6a:64:a8:7d:eb:
83:a1:25:59:53:d7:ea:b4:46:d4:41:0b:99:08:cf:
9d:0b:9a:43:c5:7f:46:dd:ee:0b:9e:a4:f7:8d:a1:
c4:f5:11:c5:70:ae:27:d0:6e:64:d4:d1:35:a7:26:
4f:66:3a:c6:5d:9a:de:38:3d:2a:b0:50:1e:e0:8b:
4e:b6:83:4f:56:28:b8:9e:05:c8:68:86:28:ee:63:
30:39:b2:c0:20:03:e2:f2:e3:e6:a9:76:e8:5e:6f:
ac:a0:78:78:ce:f7:8d:62:b4:01:3c:17:1c:90:6c:
be:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:52:B5:C4:E6:EE:27:8D:2B:D4:60:F4:AE:11:E0:F7:D1:DD:C4:7B
X509v3 Authority Key Identifier:
keyid:68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b8:28:2f:7b:4a:1c:65:62:18:c4:73:db:ab:4b:fe:5e:a5:
e4:7f:f4:d6:43:8a:27:de:91:99:41:44:4a:fc:a1:97:17:ec:
a7:bd:60:15:99:90:71:2d:f9:bc:46:a3:7b:f7:e4:db:86:9f:
2a:62:73:76:12:80:ce:3a:e3:ec:7e:ce:f2:fd:44:f1:85:a7:
93:9e:2e:40:96:e8:ba:d2:7a:ad:d3:bd:86:46:30:df:79:46:
50:b8:b3:c2:35:0d:9d:6f:b7:0e:0f:d7:bf:6c:a1:93:9b:9f:
44:76:03:9c:96:92:f3:f8:65:da:df:2c:5c:56:c2:9b:87:01:
4b:2d:e0:2c:9a:62:14:16:13:bb:55:9e:13:bb:25:ff:9d:ec:
ab:6d:b1:d0:d1:8f:6f:3d:36:79:4c:6e:92:97:61:8d:08:2b:
86:27:75:4e:8c:e6:5a:51:7c:72:39:01:39:22:3e:d8:bf:14:
78:52:68:d7:6a:18:da:25:71:92:47:b9:19:60:99:c9:48:fa:
05:00:35:fe:48:d0:f6:d4:d7:6e:50:57:0e:a5:9e:97:56:25:
8a:8c:aa:3e:66:9c:ee:3b:92:7c:b8:90:de:fb:56:44:26:fa:
bb:cb:8b:4b:85:5f:29:87:0d:3a:28:e2:6f:f5:2e:c0:fc:94:
7a:3d:32:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:08 2026 by rpki-client