Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft
File: MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft (raw, json)
Hash identifier: gNq0sD5tjc8HlGyksA6LiQZRfHfYmqakvI9r8mkMmVI=
Subject key identifier: A2:B3:AC:10:97:1E:CA:47:68:CA:E1:8B:EA:FE:70:C6:53:3E:DB:EC
Authority key identifier: 31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12
Certificate issuer: /CN=31a3da6d0fafd27d01b74703bb39d8c115e86412
Certificate serial: 01A12955AB0824C3249AA0BA3D75ECED3B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft
Manifest number: 1A9D
Signing time: Sun 11 Oct 2026 05:00:42 +0000
Manifest this update: Sun 11 Oct 2026 05:00:42 +0000
Manifest next update: Mon 12 Oct 2026 05:00:42 +0000
Files and hashes: 1: 1-AVCAB_7S_CGrmsmZqjImcetyEU.roa (hash: ZkfFCnJ4IN+ntpRZqUiZF7RppYdIxD8L7GOXgt1rvRU=)
2: MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl (hash: 8w97B53PYjKRJmtoul09+KUuOsJVYuM4hGHs/mnRkpA=)
3: wFuqW6msN0kbkAs1_IHbuTFtJj8.roa (hash: keq3V+WI+dRgJ5+JrQDb7IIH69NYYU/hx4T5Q6L/+2U=)
4: yRDMJGx-2GOrcEH30wFFKGZCdPA.roa (hash: Tdm1FI7VRfmVUcdj4wIjT6OXG1i4pNvLZPk/s1uHJi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:55:ab:08:24:c3:24:9a:a0:ba:3d:75:ec:ed:3b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a3da6d0fafd27d01b74703bb39d8c115e86412
Validity
Not Before: Oct 11 05:00:42 2026 GMT
Not After : Oct 12 05:00:42 2026 GMT
Subject: CN=a2b3ac10971eca4768cae18beafe70c6533edbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:12:55:3c:ea:f5:a8:e0:84:f6:01:c9:9d:
ad:37:f5:e6:5f:98:9e:9c:33:97:c0:a2:f2:e2:16:
d8:27:54:9e:3a:ce:1a:6b:e3:16:f9:c1:fd:1a:7e:
17:08:fc:ab:b4:ba:00:9f:86:f7:61:77:25:0a:8a:
89:1a:cb:d4:5e:cd:f8:99:cd:ad:58:41:e9:df:0d:
18:9a:d7:f5:d3:6a:a0:2c:06:3a:75:03:8a:47:7e:
a6:2d:a4:fb:97:be:74:dd:ab:bc:d2:68:75:7c:dc:
10:8d:1f:c7:cd:57:b3:a0:c9:0d:f6:41:85:af:87:
3b:0f:2c:37:5d:22:23:15:c8:d4:5f:6d:a1:f1:96:
90:ff:06:fd:54:a1:4d:0c:3e:3b:c7:c1:aa:34:91:
ed:1b:c4:08:bc:2b:b9:80:a6:b1:70:bf:33:8e:17:
61:91:53:da:1d:d3:ae:98:20:36:3a:9f:c0:ba:e9:
0a:be:14:a2:0d:a7:21:60:52:1f:4f:2e:06:ba:25:
df:cf:09:4d:eb:60:e8:00:59:63:52:3a:cf:a9:af:
c0:fd:43:47:d9:77:43:c1:9c:f7:a0:4b:bc:7f:98:
d1:d1:6f:24:b2:60:5b:63:1e:fd:7d:28:a5:6d:24:
18:81:7c:e4:51:82:88:af:10:99:6b:a2:76:72:b2:
e1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B3:AC:10:97:1E:CA:47:68:CA:E1:8B:EA:FE:70:C6:53:3E:DB:EC
X509v3 Authority Key Identifier:
keyid:31:A3:DA:6D:0F:AF:D2:7D:01:B7:47:03:BB:39:D8:C1:15:E8:64:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaPabQ-v0n0Bt0cDuznYwRXoZBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/202900-3d72-405b-9ef6-6cd4c980a523/1/MaPabQ-v0n0Bt0cDuznYwRXoZBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:73:a5:c1:90:a3:60:31:f2:bd:1a:86:96:ab:6b:ef:d1:8b:
28:86:2d:a3:05:0c:f2:48:99:b7:80:40:4e:92:72:0d:69:47:
e4:54:3f:79:cd:a6:66:f8:5d:a1:34:80:45:6d:87:4a:cb:de:
36:52:65:28:ea:84:95:89:6c:26:77:dd:16:3a:db:8f:fd:29:
f8:76:f3:1d:de:8a:82:c2:cd:25:78:03:fa:04:19:81:aa:df:
80:10:49:df:bb:c9:b4:c0:dd:9d:c9:89:34:dc:f9:2f:41:dc:
6f:5e:4a:57:92:25:b9:bc:ea:e3:3e:5f:94:65:52:9c:41:1c:
ff:ea:59:b5:48:21:bc:d7:91:1f:f5:a2:55:e7:98:46:c8:78:
f4:5e:f4:d7:5b:c2:3d:7e:e5:00:43:d7:d5:a9:84:46:68:33:
80:54:30:cb:45:30:26:54:f8:0e:d3:d3:30:cc:76:7a:22:93:
e1:16:c6:15:79:9d:8b:31:d1:e5:3d:39:d4:d6:51:8a:c2:24:
40:38:8c:27:00:03:c4:08:8f:32:69:44:27:d4:a3:96:f8:1c:
a4:45:70:17:e6:ca:10:56:c8:0b:3a:51:5b:b1:36:cd:cf:cf:
b7:f6:bd:7c:d7:3c:0f:af:72:93:39:f3:87:54:00:43:d2:c7:
db:39:1f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:23:28 2026 by rpki-client