Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
File: ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft (raw, json)
Hash identifier: 435xbAH+P2WwvPX2TGgiTPmT8KaDyvuy/XSwNX++wwg=
Subject key identifier: 5A:81:86:E3:3E:1B:09:2F:39:8E:80:C0:A1:67:BA:F3:9B:DC:19:21
Authority key identifier: 00:18:A3:32:8C:44:F0:8F:65:24:3C:61:E0:64:FE:FE:D6:41:3C:04
Certificate issuer: /CN=0018a3328c44f08f65243c61e064fefed6413c04
Certificate serial: 01A13D4A6E3944429D79A7091388DCEA499E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
Manifest number: 1AA2
Signing time: Thu 15 Oct 2026 02:00:50 +0000
Manifest this update: Thu 15 Oct 2026 02:00:50 +0000
Manifest next update: Fri 16 Oct 2026 02:00:50 +0000
Files and hashes: 1: ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl (hash: tUUL34CQxWUh1fx4jmkbQmaS6p1Y4W/oa5M/9Mt3G3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:6e:39:44:42:9d:79:a7:09:13:88:dc:ea:49:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0018a3328c44f08f65243c61e064fefed6413c04
Validity
Not Before: Oct 15 02:00:50 2026 GMT
Not After : Oct 16 02:00:50 2026 GMT
Subject: CN=5a8186e33e1b092f398e80c0a167baf39bdc1921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b3:be:85:d0:de:c2:12:27:a7:90:e0:04:1e:
bf:e1:e3:83:a4:52:76:f9:1c:75:26:58:62:37:13:
c7:0c:d9:2f:f9:89:16:3e:4a:b2:b8:c1:dc:2c:16:
bc:02:1f:71:19:4c:40:08:1f:3b:ba:27:ca:82:6c:
56:e2:65:55:2a:d3:50:0f:82:b3:80:6c:2b:2f:d3:
e2:31:47:91:30:50:54:5d:e3:a3:78:8c:56:33:eb:
29:76:47:5c:fb:54:39:8f:07:17:aa:9e:26:ee:7e:
f7:89:5a:d6:f4:13:f7:ab:49:f8:3a:28:f9:c9:f8:
10:63:e9:f7:47:79:68:d2:47:40:45:20:84:30:14:
14:8f:c3:1e:48:83:bb:bd:29:10:40:7a:eb:34:2a:
bb:7a:22:7b:4c:19:55:20:12:0a:ef:1f:8d:88:15:
79:33:74:7c:27:71:ec:e0:56:5e:bb:0c:ca:41:27:
40:0c:d1:48:23:41:27:dd:7a:9e:c0:78:ca:ec:f1:
a6:45:54:06:b9:1c:fb:fe:5d:63:10:02:ac:94:29:
d0:72:ae:71:4a:8f:54:80:96:00:80:c0:a8:d7:1b:
4b:5d:09:a6:0f:fb:4c:ae:57:e7:06:9c:dc:21:84:
f1:64:d4:fa:27:af:b5:66:61:c1:fd:ae:86:96:d1:
4e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:81:86:E3:3E:1B:09:2F:39:8E:80:C0:A1:67:BA:F3:9B:DC:19:21
X509v3 Authority Key Identifier:
keyid:00:18:A3:32:8C:44:F0:8F:65:24:3C:61:E0:64:FE:FE:D6:41:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:32:5b:dc:de:8b:bf:28:7d:df:db:2c:6c:c1:e2:f3:b1:f1:
d1:59:17:a5:4b:fd:da:b5:d5:47:07:75:91:24:f1:0f:1b:37:
44:a2:86:6a:08:b4:b4:e2:a7:11:3f:ea:99:b4:6c:7e:3b:4b:
4a:ec:8b:3b:0e:6a:18:92:7a:76:f8:96:fb:f1:cb:d1:1a:f7:
c4:c2:37:e6:bb:3d:0c:f6:92:9e:ae:b6:05:a4:81:4e:b2:44:
74:8c:3a:b9:35:7f:e1:e0:c4:d2:74:8f:8c:c9:1d:63:4b:1a:
bd:23:91:b1:93:ea:bf:d3:8f:05:79:dd:a4:40:d0:56:b8:90:
f0:43:8e:49:b5:e0:a1:5d:76:53:e6:91:3c:e3:a9:d7:a5:4a:
6e:f2:53:19:35:dc:53:0b:a7:4f:52:5f:c0:06:24:58:c2:41:
4a:c4:9f:d1:b5:ad:89:b0:23:ce:58:99:4a:5e:11:88:d1:6a:
63:60:02:51:61:9b:17:15:de:4d:5b:ca:58:1b:9b:00:cc:3d:
d9:c3:b4:b8:9e:ed:67:fb:4d:b3:17:26:2d:b8:58:4b:d8:bd:
84:6f:42:a3:21:ef:58:a9:84:92:e0:93:7d:e6:fa:ec:3f:13:
7d:31:92:b9:d9:d3:c4:b5:70:d6:cb:51:9c:0a:74:8a:2b:38:
c9:b3:89:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9Sm45REKdeacJE4jc6kmeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMThhMzMyOGM0NGYwOGY2NTI0M2M2MWUwNjRmZWZlZDY0
MTNjMDQwHhcNMjYxMDE1MDIwMDUwWhcNMjYxMDE2MDIwMDUwWjAzMTEwLwYDVQQD
Eyg1YTgxODZlMzNlMWIwOTJmMzk4ZTgwYzBhMTY3YmFmMzliZGMxOTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bO+hdDewhInp5DgBB6/4eODpFJ2
+Rx1JlhiNxPHDNkv+YkWPkqyuMHcLBa8Ah9xGUxACB87uifKgmxW4mVVKtNQD4Kz
gGwrL9PiMUeRMFBUXeOjeIxWM+spdkdc+1Q5jwcXqp4m7n73iVrW9BP3q0n4Oij5
yfgQY+n3R3lo0kdARSCEMBQUj8MeSIO7vSkQQHrrNCq7eiJ7TBlVIBIK7x+NiBV5
M3R8J3Hs4FZeuwzKQSdADNFII0En3XqewHjK7PGmRVQGuRz7/l1jEAKslCnQcq5x
So9UgJYAgMCo1xtLXQmmD/tMrlfnBpzcIYTxZNT6J6+1ZmHB/a6GltFOQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqBhuM+GwkvOY6AwKFnuvOb3BkhMB8GA1UdIwQY
MBaAFAAYozKMRPCPZSQ8YeBk/v7WQTwEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUJpak1veEU4STlsSkR4aDRHVC1fdFpCUEFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81MDFlOTgtNjBmMi00ZjYzLTg3NmYt
NzIwZTUxNTM5MTZjLzEvQUJpak1veEU4STlsSkR4aDRHVC1fdFpCUEFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81MDFlOTgtNjBmMi00ZjYzLTg3NmYtNzIwZTUxNTM5MTZj
LzEvQUJpak1veEU4STlsSkR4aDRHVC1fdFpCUEFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjJb3N6L
vyh939ssbMHi87Hx0VkXpUv92rXVRwd1kSTxDxs3RKKGagi0tOKnET/qmbRsfjtL
SuyLOw5qGJJ6dviW+/HL0Rr3xMI35rs9DPaSnq62BaSBTrJEdIw6uTV/4eDE0nSP
jMkdY0savSORsZPqv9OPBXndpEDQVriQ8EOOSbXgoV12U+aRPOOp16VKbvJTGTXc
UwunT1JfwAYkWMJBSsSf0bWtibAjzliZSl4RiNFqY2ACUWGbFxXeTVvKWBubAMw9
2cO0uJ7tZ/tNsxcmLbhYS9i9hG9CoyHvWKmEkuCTfeb67D8TfTGSudnTxLVw1stR
nAp0iis4ybOJ+A==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:38:31 2026 by rpki-client