
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
File: abfzv44Ke1kKD_qhycCsWAoLEZ4.mft (raw, json)
Hash identifier: LHE3BvvLfVc414ZhbWTue9g2P85wH2cbei7qB5Rz9CA=
Subject key identifier: F2:64:FD:90:7F:FA:92:C5:58:B2:D1:BD:8E:0A:A8:19:F9:99:91:43
Authority key identifier: 69:B7:F3:BF:8E:0A:7B:59:0A:0F:FA:A1:C9:C0:AC:58:0A:0B:11:9E
Certificate issuer: /CN=69b7f3bf8e0a7b590a0ffaa1c9c0ac580a0b119e
Certificate serial: 019D38657837A44EF441B9B4A1B3A2C08569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
Manifest number: 01BA
Signing time: Sun 29 Mar 2026 07:01:07 +0000
Manifest this update: Sun 29 Mar 2026 07:01:07 +0000
Manifest next update: Mon 30 Mar 2026 07:01:07 +0000
Files and hashes: 1: ZckkoNHt2DvjlU2WvYDlIclH-DI.roa (hash: xy5JGKAo4mAfLH66AX9gOwR/ragqzfbDNJ5R5SMZh1s=)
2: abfzv44Ke1kKD_qhycCsWAoLEZ4.crl (hash: W2n2lNTyX2p+v8r/CfrNxPFnRjg2Q/q6oZ/ihJzKlYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:78:37:a4:4e:f4:41:b9:b4:a1:b3:a2:c0:85:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b7f3bf8e0a7b590a0ffaa1c9c0ac580a0b119e
Validity
Not Before: Mar 29 07:01:07 2026 GMT
Not After : Mar 30 07:01:07 2026 GMT
Subject: CN=f264fd907ffa92c558b2d1bd8e0aa819f9999143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:2d:a5:1c:f8:98:62:94:30:2d:aa:1c:3c:
aa:05:75:13:40:af:6a:50:a7:31:a3:dc:55:d1:ec:
1d:58:02:8a:a2:35:a2:6b:69:ca:14:41:77:54:ac:
ba:ba:65:e2:b2:8a:c9:8c:59:e8:ce:b0:39:9c:72:
b7:3b:1a:b8:ee:8b:5b:0c:de:04:7e:bb:ec:3b:c8:
79:1d:3a:f9:bc:dd:a2:8e:84:3f:f8:ef:86:64:b6:
89:7c:32:e1:a6:fd:34:f5:c0:e2:9c:21:11:22:fb:
4b:cf:22:d7:62:5c:e1:29:0f:13:c7:d5:61:33:95:
23:dc:19:ec:6b:1a:c7:99:b4:7d:62:08:8e:75:7f:
2f:f3:48:6d:ed:3d:84:d0:0c:8a:13:f7:ef:5a:dd:
83:b2:1c:01:42:81:62:61:c2:8e:2c:dd:5f:65:56:
90:cd:dc:bc:66:5d:a4:9f:6d:ac:75:00:9a:e9:da:
67:26:72:b2:56:40:68:ab:77:74:ba:f6:06:74:cb:
c8:5e:68:78:a1:cc:36:6f:89:e8:c8:41:bd:e4:93:
72:9f:60:ef:39:64:3f:31:46:21:da:d6:a6:86:cc:
66:91:d7:8f:3a:da:de:ef:25:86:fc:a4:34:fa:8f:
0b:90:b4:40:24:c4:ea:26:12:9a:3d:99:cd:1a:46:
97:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:64:FD:90:7F:FA:92:C5:58:B2:D1:BD:8E:0A:A8:19:F9:99:91:43
X509v3 Authority Key Identifier:
keyid:69:B7:F3:BF:8E:0A:7B:59:0A:0F:FA:A1:C9:C0:AC:58:0A:0B:11:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d6:01:5f:6b:da:46:85:7c:ce:b9:1c:43:36:8f:06:66:a7:
e7:1d:bb:0b:c3:c0:54:81:68:70:78:4d:07:54:76:f2:de:c1:
48:e4:6e:7a:53:db:8c:fd:9f:b2:6d:96:b0:50:11:ba:2d:ea:
40:e6:a6:fb:e6:26:b4:7c:7b:b8:60:ff:1c:76:e3:ae:e5:2b:
f9:4a:99:42:32:ad:56:31:03:eb:db:bf:28:b8:80:7c:b3:6f:
63:63:a9:1d:82:4f:32:a7:0c:9c:8d:20:f0:8d:39:89:d6:5c:
36:86:dc:76:d7:27:bf:d9:d2:e4:ed:91:35:7c:e3:0d:82:77:
37:f8:22:4f:fc:19:1a:b5:f6:ae:02:72:bd:db:51:c9:e7:75:
b8:d5:7c:9f:78:8e:6d:1d:70:20:84:50:9a:79:f0:67:19:b4:
bc:ae:f8:6a:88:6a:59:3f:e4:c8:25:3e:b1:52:98:2d:cc:cd:
35:bd:29:85:df:06:e1:c7:4c:b0:88:cc:d2:d6:e3:60:67:92:
d8:63:fd:9e:ad:e5:ed:23:f6:ee:21:7b:e5:0c:3c:82:14:ed:
7a:ef:a1:05:5b:c9:05:0c:22:58:fb:af:b4:40:9c:69:99:f2:
24:84:0b:f8:06:9d:c2:45:c8:c1:ce:4d:55:ca:ee:7e:9c:c0:
7d:c2:66:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:15 2026 by rpki-client