Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/768c81-1a84-4a3f-89b8-9f44913926ab/1/qABrMI2UNkxB70cIgEr9utcazzI.mft
File: qABrMI2UNkxB70cIgEr9utcazzI.mft (raw, json)
Hash identifier: XeVfuCcyybc9pdEeKjUSJk5sjvx4MimNm/UaiwVFfTg=
Subject key identifier: 8A:89:2C:23:9E:3D:38:F4:D5:63:B7:7C:71:A2:A5:62:C5:23:BD:0D
Authority key identifier: A8:00:6B:30:8D:94:36:4C:41:EF:47:08:80:4A:FD:BA:D7:1A:CF:32
Certificate issuer: /CN=a8006b308d94364c41ef4708804afdbad71acf32
Certificate serial: 01A180AB8985250825E3284C0416D7B3B0E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qABrMI2UNkxB70cIgEr9utcazzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/768c81-1a84-4a3f-89b8-9f44913926ab/1/qABrMI2UNkxB70cIgEr9utcazzI.mft
Manifest number: 63
Signing time: Wed 28 Oct 2026 04:01:27 +0000
Manifest this update: Wed 28 Oct 2026 04:01:27 +0000
Manifest next update: Thu 29 Oct 2026 04:01:27 +0000
Files and hashes: 1: 1-MYXb6Dn8l9Sni47o7eWRZtN3fo.roa (hash: zMSUZdzn/nIFjJVu5UqN5nxZSdS9vq4wDRYE1tXZj7E=)
2: qABrMI2UNkxB70cIgEr9utcazzI.crl (hash: 4RdjCkZ8I4yfMEQe2Xe3G9irDqwenxJd//0FjI0Mi1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/768c81-1a84-4a3f-89b8-9f44913926ab/1/qABrMI2UNkxB70cIgEr9utcazzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/768c81-1a84-4a3f-89b8-9f44913926ab/1/qABrMI2UNkxB70cIgEr9utcazzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qABrMI2UNkxB70cIgEr9utcazzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:89:85:25:08:25:e3:28:4c:04:16:d7:b3:b0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8006b308d94364c41ef4708804afdbad71acf32
Validity
Not Before: Oct 28 04:01:27 2026 GMT
Not After : Oct 29 04:01:27 2026 GMT
Subject: CN=8a892c239e3d38f4d563b77c71a2a562c523bd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:bc:69:af:76:11:08:b3:16:1f:7e:a1:17:
ed:d9:15:c9:a2:43:b7:53:b4:d2:e3:b0:65:4d:04:
25:90:1d:e1:98:91:7b:1e:9e:b6:28:78:ba:7f:52:
65:a0:8a:b4:7a:8e:c7:52:64:53:3b:20:93:9a:57:
50:9c:c4:16:02:c7:27:d3:90:db:30:64:3a:61:09:
42:2e:1b:2b:4d:fc:4f:9e:b3:14:b7:46:83:49:09:
94:3a:1c:fd:05:55:c0:07:98:6e:2a:54:c9:45:d1:
71:9e:b9:59:1e:55:11:e6:6e:75:4f:77:2f:a9:7d:
66:15:b3:09:82:0b:4c:8b:31:69:5f:fc:d5:e4:ae:
d5:14:15:2b:cc:0a:da:b8:ac:d6:23:50:2a:a6:52:
d9:b3:da:99:5b:0c:7e:a6:5b:2d:5f:a3:e6:50:84:
df:b9:b1:86:3d:ab:c5:aa:0a:9d:38:62:08:57:6f:
9a:73:f4:9f:e2:73:59:22:ca:c3:87:29:ed:aa:d7:
4c:ef:4b:6c:df:c0:19:60:fe:df:9d:e2:07:91:8d:
fe:ea:3e:36:af:73:27:cb:b1:f2:bc:11:da:fd:e4:
72:c1:f7:c1:21:3e:28:4d:f0:ac:3b:6a:9d:6e:e7:
a2:be:d6:a9:77:4c:34:d3:d4:84:cd:08:8f:e3:6f:
22:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:89:2C:23:9E:3D:38:F4:D5:63:B7:7C:71:A2:A5:62:C5:23:BD:0D
X509v3 Authority Key Identifier:
keyid:A8:00:6B:30:8D:94:36:4C:41:EF:47:08:80:4A:FD:BA:D7:1A:CF:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qABrMI2UNkxB70cIgEr9utcazzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/768c81-1a84-4a3f-89b8-9f44913926ab/1/qABrMI2UNkxB70cIgEr9utcazzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/768c81-1a84-4a3f-89b8-9f44913926ab/1/qABrMI2UNkxB70cIgEr9utcazzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3f:cb:99:c5:f8:9a:29:e1:19:1d:4e:31:f5:02:e1:0e:94:
4c:32:77:be:9b:55:a5:91:b0:84:0a:e3:05:b5:3b:03:06:48:
91:c3:a9:41:22:59:45:44:0a:db:22:00:99:8d:3e:d1:26:c0:
62:0e:60:a6:c3:34:5c:08:56:bf:44:da:49:4a:64:c3:f4:60:
c9:72:a6:88:45:c2:92:79:45:f1:9f:67:9a:ad:0d:73:1e:16:
c5:44:54:97:e8:ea:19:f3:d5:fe:10:b7:a4:0e:d5:e4:94:49:
06:d6:ad:da:84:15:20:bb:e3:e6:fd:47:26:40:46:51:69:ff:
c3:36:9b:dd:56:ec:f6:53:b1:64:73:e7:39:69:fa:32:2f:4d:
92:d5:6a:8a:be:91:18:39:3f:c7:cb:65:65:0a:b4:65:da:0f:
36:60:71:c2:f8:c3:ea:d6:a0:c2:3e:7b:1d:43:b1:34:3c:f4:
19:30:b6:58:ae:12:79:60:5c:d0:5e:c0:f0:d6:b8:0c:c6:cb:
8c:1a:32:e7:d2:5e:fb:0f:58:01:04:cd:53:7f:8e:c9:14:11:
21:13:95:f1:00:3c:22:92:36:5d:b0:9e:54:f2:67:e5:06:7b:
89:19:46:d1:1d:67:54:ee:16:0d:7d:33:c7:00:37:f4:0f:29:
77:b5:fe:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:14:55 2026 by rpki-client