Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
File: ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft (raw, json)
Hash identifier: rcL3u/DLbai4kY1pwQudRO4CzxUz5t0/EUbwepaNkO4=
Subject key identifier: 36:2B:18:AC:09:44:4F:69:77:E1:A9:A4:D5:11:77:65:81:49:86:C5
Authority key identifier: 00:18:A3:32:8C:44:F0:8F:65:24:3C:61:E0:64:FE:FE:D6:41:3C:04
Certificate issuer: /CN=0018a3328c44f08f65243c61e064fefed6413c04
Certificate serial: 019D37F76692E75262C06C6237C3B3BD66FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 05:00:53 +0000
Manifest this update: Sun 29 Mar 2026 05:00:53 +0000
Manifest next update: Mon 30 Mar 2026 05:00:53 +0000
Files and hashes: 1: ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl (hash: KnqLVWu+lqYNXj5KRRPxVzKjQvrjMAjFgRZPjcGjwNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:66:92:e7:52:62:c0:6c:62:37:c3:b3:bd:66:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0018a3328c44f08f65243c61e064fefed6413c04
Validity
Not Before: Mar 29 05:00:53 2026 GMT
Not After : Mar 30 05:00:53 2026 GMT
Subject: CN=362b18ac09444f6977e1a9a4d5117765814986c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:a8:c9:5c:65:04:32:2d:34:f4:c3:ef:b6:
4f:0a:93:72:20:f1:c1:d3:86:d1:2e:f0:35:20:ca:
f4:2a:21:ad:96:a5:11:23:83:ca:5d:4a:fe:6f:4c:
f8:84:a2:48:7c:71:69:49:b9:7a:c9:2e:af:64:3e:
47:8c:4b:28:c5:d9:4b:63:72:65:07:ff:c1:e2:81:
8d:ea:ce:9c:de:0e:c5:99:26:50:88:45:9f:67:49:
5e:4d:e9:b7:e4:72:f8:14:b0:9a:c0:f0:22:7e:a0:
f5:3a:ee:76:61:b0:be:fd:91:5f:40:5f:69:25:3f:
22:c5:5b:87:29:fb:26:c8:d1:05:9b:9a:67:c4:86:
21:e8:47:82:37:41:71:8d:ee:18:63:e5:52:ee:f1:
ae:21:bf:51:99:84:88:c2:8e:79:74:04:84:5f:ac:
22:94:8d:2c:df:ed:a9:48:6c:49:a2:9b:95:90:76:
85:94:bd:23:8a:ae:f5:a1:76:78:be:8c:78:ac:0e:
d4:f1:af:08:29:7e:32:49:f5:2f:c9:5e:a0:fd:e9:
ed:7a:1c:99:9e:28:6e:fa:22:9c:c6:d1:96:a5:de:
75:76:4d:fe:00:af:7a:69:39:42:71:e3:77:50:a7:
9c:b5:ff:3a:02:e2:b4:db:1d:4a:16:b4:dd:a8:40:
e8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2B:18:AC:09:44:4F:69:77:E1:A9:A4:D5:11:77:65:81:49:86:C5
X509v3 Authority Key Identifier:
keyid:00:18:A3:32:8C:44:F0:8F:65:24:3C:61:E0:64:FE:FE:D6:41:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:01:3b:27:46:00:50:64:48:13:cf:d2:4f:58:a0:cb:e8:13:
6c:13:15:90:e7:3a:fe:00:65:c8:4a:58:86:a0:c7:e8:59:a3:
fd:a8:16:03:62:13:1b:45:1d:ad:4d:b3:7e:ac:8c:66:94:51:
46:1a:5b:38:64:48:ff:99:fe:58:15:04:91:ad:82:88:4f:48:
77:33:fa:3f:5f:7a:c1:d2:28:95:7d:2e:21:83:34:0a:19:c6:
86:b0:d2:52:8b:f5:43:80:fa:5e:81:ea:f2:1e:c5:6d:45:0f:
61:cb:28:c1:7c:64:bc:79:aa:b2:8c:a1:83:da:59:b4:45:9f:
48:05:2c:0a:d5:4d:c6:89:39:f7:18:61:e4:d0:91:c1:4f:70:
98:c8:c8:85:70:10:cf:66:e3:5d:7d:51:a5:95:e0:2e:b8:3d:
52:dc:38:86:ba:c3:8a:39:a7:b9:88:54:16:8d:e0:d0:51:58:
bd:2a:2b:c6:6c:cf:1b:e8:1a:dc:af:f7:c5:b1:d2:c0:69:29:
6f:d5:ed:87:a0:39:fa:1c:d8:4f:cf:bf:a2:4d:cf:c6:55:bf:
ce:3e:ae:18:3a:c8:d1:cc:c0:23:06:71:1f:cd:00:c8:d1:5f:
5e:d9:ef:f3:e9:fb:fd:0b:ef:42:a9:ab:5e:df:ab:79:0d:35:
be:3b:74:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:07 2026 by rpki-client