Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
File: aBnbgbSauhKxgQyzopnu5GMt1yA.mft (raw, json)
Hash identifier: ELx+I5eAYDYWDyeDK6Cepj1Xz53kcnu1CenxmXg6FeM=
Subject key identifier: 4E:B7:8A:BB:15:32:2F:60:D3:BB:5B:C2:45:77:34:4A:17:5E:63:F1
Authority key identifier: 68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
Certificate issuer: /CN=6819db81b49aba12b1810cb3a299eee4632dd720
Certificate serial: 019D08F9EF6FDA362A9131C612E19359D41C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
Manifest number: 0447
Signing time: Fri 20 Mar 2026 02:01:30 +0000
Manifest this update: Fri 20 Mar 2026 02:01:30 +0000
Manifest next update: Sat 21 Mar 2026 02:01:30 +0000
Files and hashes: 1: PK2HVjD3GmdLB06ij0s7w3X0wCo.roa (hash: 1RKfa7PhpjR33QDEm1HWDfBtwC3Ch5Bq/qvovHpolJ0=)
2: aBnbgbSauhKxgQyzopnu5GMt1yA.crl (hash: 4qa2QYVXSiYwbO1xpXUjT7QQAY2AcYid0ISBkrU+KTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:f9:ef:6f:da:36:2a:91:31:c6:12:e1:93:59:d4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6819db81b49aba12b1810cb3a299eee4632dd720
Validity
Not Before: Mar 20 02:01:30 2026 GMT
Not After : Mar 21 02:01:30 2026 GMT
Subject: CN=4eb78abb15322f60d3bb5bc24577344a175e63f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:1a:ab:3b:72:18:e1:6e:e0:88:56:50:6a:
83:d0:7f:0a:0e:24:c5:d6:8d:22:1e:12:a0:37:1d:
dc:28:f9:a6:20:a6:24:97:c3:a7:c2:47:b1:3d:66:
c7:82:f1:c6:5c:ac:8a:6b:c3:9b:ee:03:ea:d2:f6:
81:b7:58:0e:91:0d:6e:e9:fe:20:20:a3:fb:ae:63:
56:b8:d8:52:84:ab:a5:71:d1:15:1c:4e:ba:a3:92:
83:81:ea:02:03:db:09:50:88:d0:6d:fb:65:44:55:
6b:c1:ba:d9:37:17:86:f4:29:4c:93:65:e3:67:37:
5a:2a:b4:ce:06:4e:d3:bc:7b:19:d0:c7:33:c4:20:
4a:6a:8b:71:23:25:2e:5e:b7:86:cd:ad:f0:5a:40:
9b:ec:0b:9c:ef:7b:d8:57:aa:de:be:49:4f:17:09:
4e:a2:b1:88:4d:ed:55:b5:6d:e5:0d:9b:38:87:40:
bf:77:90:e8:59:8c:25:11:53:d6:fc:e7:1a:f5:37:
6b:8e:e1:7b:6e:98:58:c9:d2:15:4d:76:85:c3:b2:
92:83:45:84:9d:14:39:a6:2d:0a:05:b0:ff:5f:3b:
f1:63:17:9c:d0:b9:a6:96:0c:a8:e9:6a:0c:ca:99:
18:81:c9:22:96:36:4f:56:65:4a:5f:70:1f:c6:da:
f2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B7:8A:BB:15:32:2F:60:D3:BB:5B:C2:45:77:34:4A:17:5E:63:F1
X509v3 Authority Key Identifier:
keyid:68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ad:25:4f:04:74:bd:5d:9e:1b:4b:e2:d9:e0:ae:0e:fb:71:
52:27:75:20:b5:35:e9:8f:05:b1:98:e4:25:dd:9a:25:3c:c3:
27:c5:6b:04:c8:c4:a2:95:99:c5:30:0c:13:c6:51:be:41:65:
23:85:c0:4a:0e:28:70:34:9a:8b:44:fb:27:d3:7f:05:a6:84:
bd:1e:e3:98:0b:96:35:b1:8b:65:ae:78:d6:47:fb:87:3c:cb:
64:9d:ac:18:e7:18:c3:64:8d:98:5c:97:ad:c2:1a:28:64:e3:
2c:b0:4d:fd:91:11:a1:3f:73:f2:84:de:e9:ac:be:95:76:f5:
fd:82:4c:bc:5a:15:07:6e:1e:fe:f4:02:76:9c:a3:69:c2:3a:
ef:af:c7:77:52:b3:0b:ef:31:f1:e1:fc:bd:87:eb:66:84:57:
a4:26:65:e8:75:91:c9:f5:85:7d:65:98:6d:55:48:0b:a8:c7:
5f:db:c3:0a:99:19:83:25:fb:bf:61:aa:cd:b3:eb:71:ff:c7:
a9:a8:48:a2:bb:fa:f2:07:60:b8:26:e6:07:78:4d:50:88:14:
40:80:37:d1:9c:e8:60:71:98:cb:18:f2:7d:fb:69:9a:02:78:
1e:19:83:3f:88:ee:5c:25:ce:4e:bf:ba:3c:f0:e6:4b:cd:21:
1d:a1:98:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 04:13:11 2026 by rpki-client