Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
File: aBnbgbSauhKxgQyzopnu5GMt1yA.mft (raw, json)
Hash identifier: FQjr/+vL1JSliIcTuAK+UR9EQ52te7/4ok7hMpAesGE=
Subject key identifier: 67:A8:40:7F:A7:4E:7F:F2:C1:54:59:A7:BB:9A:11:B3:58:FF:73:24
Authority key identifier: 68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
Certificate issuer: /CN=6819db81b49aba12b1810cb3a299eee4632dd720
Certificate serial: 019D070B07DCD24305F742A5F60589BE45C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
Manifest number: 0446
Signing time: Thu 19 Mar 2026 17:00:56 +0000
Manifest this update: Thu 19 Mar 2026 17:00:56 +0000
Manifest next update: Fri 20 Mar 2026 17:00:56 +0000
Files and hashes: 1: PK2HVjD3GmdLB06ij0s7w3X0wCo.roa (hash: 1RKfa7PhpjR33QDEm1HWDfBtwC3Ch5Bq/qvovHpolJ0=)
2: aBnbgbSauhKxgQyzopnu5GMt1yA.crl (hash: +SdBeQ1KxzmrwDd2J0LTFSTUvct6WJBSsrpYUK+igTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 16:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:07:0b:07:dc:d2:43:05:f7:42:a5:f6:05:89:be:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6819db81b49aba12b1810cb3a299eee4632dd720
Validity
Not Before: Mar 19 17:00:56 2026 GMT
Not After : Mar 20 17:00:56 2026 GMT
Subject: CN=67a8407fa74e7ff2c15459a7bb9a11b358ff7324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:a6:d4:eb:77:1b:12:71:c2:42:e7:8e:1e:
8d:8f:a1:b5:af:0b:48:66:5a:54:76:fc:76:cd:3b:
f7:35:e6:e8:47:22:01:93:71:17:fe:ca:74:52:dc:
78:f9:16:ac:2b:be:d4:71:cd:fc:e1:8c:cb:8b:43:
5f:98:2e:55:9d:99:24:93:9a:78:d4:ab:2d:c0:e8:
0f:f5:63:83:8b:4f:a8:06:af:6a:4a:ff:38:e3:0f:
37:0f:2a:cd:4e:09:a3:7a:48:5a:8f:c9:be:84:3f:
90:ca:98:49:4f:6b:4b:3a:7c:26:e9:74:60:d9:ff:
8c:d9:b8:10:69:76:65:11:76:0b:0b:40:f5:b8:b7:
dc:b2:69:b9:14:20:33:52:68:4b:ab:cc:e3:0d:00:
11:f8:3d:b6:59:e8:a6:f9:2e:f2:58:18:06:7b:d9:
74:a4:d7:70:41:76:38:1a:f4:df:7b:e1:84:9f:89:
43:e1:7e:db:92:b5:7e:2c:03:05:26:f2:3b:1a:a6:
39:93:37:db:79:43:7c:12:00:78:9a:a4:e2:d8:f2:
aa:43:dd:97:43:91:67:03:14:85:26:70:b4:19:98:
cb:b3:34:2e:21:db:fb:1c:69:e3:2d:a4:98:e5:0e:
27:5b:95:fe:29:11:1b:31:61:95:9f:8f:8f:ba:a3:
28:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A8:40:7F:A7:4E:7F:F2:C1:54:59:A7:BB:9A:11:B3:58:FF:73:24
X509v3 Authority Key Identifier:
keyid:68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:04:f0:23:80:b9:61:23:58:22:c6:e2:8a:5c:44:13:0b:d1:
f8:c1:3c:4f:d1:76:33:34:c8:81:38:af:da:37:78:92:6f:aa:
7e:18:58:1a:da:de:30:43:cb:2f:0d:94:d4:d1:7e:da:fe:69:
11:ab:43:ec:90:1c:44:94:f1:dd:03:80:1f:10:f3:0a:d6:0a:
f8:44:a1:b9:27:f3:c7:77:72:65:ca:ad:66:6e:d3:b5:47:41:
a5:27:1c:eb:be:39:ab:c3:04:1f:1d:82:db:70:d3:c8:1b:e3:
0f:e8:b6:2d:3e:2b:d1:61:60:6e:d3:6e:0f:ec:47:69:e3:70:
da:38:3d:a7:71:61:0e:20:8e:dd:4a:b4:5f:10:a5:fd:30:0c:
f9:35:c6:a0:a2:bb:b2:27:9d:e8:12:c1:6a:a9:9f:de:c4:05:
a7:72:3d:ab:da:8f:ea:0b:fb:6b:0c:05:b9:40:aa:ba:4c:a4:
54:08:96:a9:3f:62:a1:9d:94:85:44:61:95:ce:1a:6c:61:ec:
88:36:0c:44:01:a7:0f:91:7e:ec:29:d7:0f:bc:51:1d:07:18:
23:bf:16:1f:01:6f:66:1b:51:51:c8:7a:31:be:b6:17:9d:ff:
b7:e4:66:db:86:9d:bc:f4:0c:91:3c:73:a4:b1:1b:cd:aa:7b:
10:e4:40:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 02:37:45 2026 by rpki-client