Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
File: aBnbgbSauhKxgQyzopnu5GMt1yA.mft (raw, json)
Hash identifier: zlAinMyVdGKK/6xTxgvRu9GvQEU7cHibcJm7xdREJ+w=
Subject key identifier: 0D:F9:E1:BA:8D:5E:1F:6E:12:8C:CC:FE:55:E1:20:CD:4E:39:B5:0F
Authority key identifier: 68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
Certificate issuer: /CN=6819db81b49aba12b1810cb3a299eee4632dd720
Certificate serial: 019E002B67FCC2B0DFE5C4FDC05154EAAD6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
Manifest number: 04C7
Signing time: Thu 07 May 2026 02:01:45 +0000
Manifest this update: Thu 07 May 2026 02:01:45 +0000
Manifest next update: Fri 08 May 2026 02:01:45 +0000
Files and hashes: 1: PK2HVjD3GmdLB06ij0s7w3X0wCo.roa (hash: 1RKfa7PhpjR33QDEm1HWDfBtwC3Ch5Bq/qvovHpolJ0=)
2: aBnbgbSauhKxgQyzopnu5GMt1yA.crl (hash: LlUEBWOluoxn8oT5i2KP3q/D5ifR6sGEfDkQq3gZZ4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:00:2b:67:fc:c2:b0:df:e5:c4:fd:c0:51:54:ea:ad:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6819db81b49aba12b1810cb3a299eee4632dd720
Validity
Not Before: May 7 02:01:45 2026 GMT
Not After : May 8 02:01:45 2026 GMT
Subject: CN=0df9e1ba8d5e1f6e128cccfe55e120cd4e39b50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b3:b0:d7:30:5d:dc:3f:18:e1:30:39:91:5b:
6b:46:1f:69:a8:14:c7:84:3e:4c:3b:27:b8:d1:9d:
44:84:9b:f0:57:86:85:ca:b0:a0:be:f5:75:3f:31:
d0:85:54:23:b4:f4:8a:d0:cd:89:b9:42:52:ad:48:
f1:f5:29:9e:d8:cc:a2:a4:70:a6:5e:64:e8:55:b9:
11:19:cf:ab:6c:7d:bb:e7:45:09:d9:b3:eb:a1:4b:
2f:8a:35:e3:f5:90:b5:ef:01:ee:58:fc:32:3c:07:
4a:dc:a2:45:b3:2d:99:91:d2:a7:38:02:e4:50:ed:
78:4d:43:ab:36:ef:b1:60:11:cb:38:8e:f2:86:22:
9c:80:7e:4a:f6:91:39:b1:c0:03:0b:8f:ca:f6:50:
ac:c5:07:f0:97:88:4c:76:26:8c:a0:eb:57:38:da:
50:05:18:01:3a:7f:9f:de:ad:9a:a3:d0:6b:2a:5e:
92:07:2e:5a:00:1e:b3:97:9b:ff:bc:3b:1b:c4:58:
02:07:e9:8f:bc:18:7a:2e:85:21:40:21:00:b0:ab:
62:2d:f7:83:c7:a5:24:94:0f:c7:13:98:5b:d1:7d:
13:54:ff:5d:be:59:dc:57:8b:38:01:77:d5:dd:6a:
cf:d4:b7:98:b2:05:fe:a3:92:2c:d1:1b:44:f3:73:
d3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F9:E1:BA:8D:5E:1F:6E:12:8C:CC:FE:55:E1:20:CD:4E:39:B5:0F
X509v3 Authority Key Identifier:
keyid:68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3f:43:1a:e0:7a:c7:56:43:45:ea:80:e7:2d:18:15:d1:93:
56:aa:f5:0f:df:a5:5c:96:3f:2b:1c:72:84:b5:0c:22:84:3f:
a5:26:56:77:73:a7:8c:70:84:9c:cb:95:77:22:12:8c:d4:62:
3f:93:92:15:25:8d:6b:9d:10:be:b9:c4:f1:ea:0d:c4:f1:a9:
59:9c:ba:84:84:fb:08:cf:5a:c0:68:70:53:96:b1:bd:fe:7f:
82:0e:60:a5:d3:03:09:80:51:d7:6a:16:d8:dd:0d:07:36:2f:
75:73:07:64:3f:58:e8:20:03:32:e3:cc:21:13:ef:35:c4:84:
d1:6b:d1:5b:d8:1c:8f:e1:1a:6d:68:36:d2:2c:aa:a0:de:41:
55:72:86:9a:64:d0:ba:cc:58:17:f4:5d:75:31:e1:2b:5e:09:
3e:c6:45:12:f6:10:26:1f:18:52:9b:7e:7b:f4:3a:b6:34:c5:
8a:18:10:b1:01:16:11:ae:4f:2d:67:38:03:40:f3:0f:cf:b4:
6c:d6:90:77:7b:0e:b0:3b:b3:c7:d0:b7:4d:0e:f0:48:9c:61:
e7:1d:5c:14:72:2b:16:67:e1:15:af:46:a4:fe:c0:5b:85:e0:
95:95:1d:40:a9:dc:bb:89:58:92:f7:37:1d:0a:b0:40:40:3e:
9f:93:a6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 06:32:43 2026 by rpki-client