Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
File: AbP6KriQG0FeEIOIcsY9nwzhNq0.mft (raw, json)
Hash identifier: fhj7atq5ylVFuuCUpeYAqH8OcfDHytwkZG9M2ce4mLU=
Subject key identifier: FF:E5:E8:14:65:C9:35:C7:AF:0E:5A:33:AA:7F:23:AA:02:F9:47:40
Authority key identifier: 01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
Certificate issuer: /CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Certificate serial: 019E30A9900C45E445EAD020C9575E68299B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 12:01:19 +0000
Manifest this update: Sat 16 May 2026 12:01:19 +0000
Manifest next update: Sun 17 May 2026 12:01:19 +0000
Files and hashes: 1: AbP6KriQG0FeEIOIcsY9nwzhNq0.crl (hash: 9i10xCPX+qLRuc72at4XC5wn7jC0RQ6t/6fOAqUGCkI=)
2: ScMeUXtgJA8SRus0dm3wNSK0EOE.roa (hash: cMjCrYF2rReOwGbNBwruLGRrluqmFIhueIspSRNu/dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:90:0c:45:e4:45:ea:d0:20:c9:57:5e:68:29:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Validity
Not Before: May 16 12:01:19 2026 GMT
Not After : May 17 12:01:19 2026 GMT
Subject: CN=ffe5e81465c935c7af0e5a33aa7f23aa02f94740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:be:1e:24:fa:47:88:3d:ea:fb:1f:06:e7:19:
4a:21:6a:f6:40:4c:d8:8b:37:68:dd:51:1e:5b:2a:
cf:6a:3a:ad:8d:bf:da:77:7e:e0:37:36:9c:8c:5f:
d2:0c:d9:d3:10:b3:9f:b6:63:43:40:13:17:d5:74:
6d:85:83:35:d7:f4:c8:cb:6e:50:15:7e:ae:f8:00:
31:a0:82:cf:82:22:bd:97:4e:d0:40:2c:94:69:c8:
e7:e9:6b:42:71:6f:ee:ad:18:80:e4:e6:e7:dd:15:
df:51:90:b6:0d:60:af:29:38:b4:16:74:a8:49:ea:
18:77:12:d9:50:0d:89:c4:5b:0e:7f:c9:2c:00:f2:
14:bd:f9:4f:f0:c9:a5:6b:54:9e:7d:06:a1:ed:fb:
52:6c:e0:4b:79:3c:d4:56:c1:82:a1:b8:eb:c8:30:
95:1e:5a:7f:c7:ea:80:e9:01:a5:1c:4c:0f:d3:38:
6a:92:3a:40:da:e4:35:7f:78:a2:6f:07:aa:da:31:
cb:0d:c2:76:51:51:a9:fe:ec:07:ab:2e:b5:01:96:
df:b9:1a:65:1c:a6:49:fb:24:98:0f:3e:94:6d:11:
39:aa:77:1c:2f:4c:9c:f5:3f:b5:32:19:8c:97:cd:
a7:fd:92:2d:a8:a4:db:ca:01:3d:dc:2b:75:98:d3:
5b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E5:E8:14:65:C9:35:C7:AF:0E:5A:33:AA:7F:23:AA:02:F9:47:40
X509v3 Authority Key Identifier:
keyid:01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:23:d0:e1:bd:0d:b5:f3:19:21:ec:9b:c8:f7:08:d2:a2:a7:
86:cf:cb:49:0f:62:8d:20:dc:7b:9d:56:44:16:06:88:f4:7f:
fc:e0:ce:a6:bb:f8:c8:db:b6:8f:e8:91:e1:d0:6a:2b:76:af:
8f:9f:c6:ee:92:59:5b:cd:1e:79:2a:84:cd:ae:e1:c9:d4:27:
14:35:6a:eb:a9:5e:2c:d5:cf:0b:03:c2:49:46:13:d4:5d:fa:
09:c2:20:86:6d:d8:a9:38:fb:5e:96:61:62:4c:5e:66:81:e0:
93:2f:54:15:90:04:df:99:32:35:ab:07:e2:ab:01:51:75:28:
38:bc:7d:70:bf:3d:22:c1:36:df:62:3b:f5:dd:60:42:eb:6c:
4a:d5:20:50:45:09:42:10:88:f7:fd:19:cf:8e:d8:0a:28:27:
68:a2:50:02:54:9e:e6:81:dd:34:53:1d:ea:f7:35:b2:78:26:
2b:c3:b1:c0:29:a4:c4:85:00:b8:4b:df:97:d9:42:a7:84:48:
d0:d1:f2:17:09:67:01:4c:67:53:5c:30:37:3c:d4:7d:29:7e:
30:8c:17:05:29:08:b1:b3:f4:12:92:94:5a:a4:c7:7b:c0:c2:
31:bb:fb:df:89:0d:64:28:d6:13:15:81:bf:6b:07:e7:9c:a4:
25:6d:61:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:47 2026 by rpki-client