Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
File: abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json)
Hash identifier: Jw1Og8Jr4psSGlnzPIhuOwfZY7wTLvJrw+U3td9KulI=
Subject key identifier: 9E:65:97:41:3A:21:8C:C6:5C:69:C3:2B:3F:49:02:92:07:33:89:64
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 019FCC3852869C2ACDEA3EBFC038E50218A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
Manifest number: 0E20
Signing time: Tue 04 Aug 2026 10:01:10 +0000
Manifest this update: Tue 04 Aug 2026 10:01:10 +0000
Manifest next update: Wed 05 Aug 2026 10:01:10 +0000
Files and hashes: 1: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: CL1vhmkHykJAuf6H/EV1/eZG+Wi8qGydxIWLtOtcBX8=)
2: epJ5NtfvH1g3tuK4xd9nscSiEoA.roa (hash: niW0UBzEk+eWx8n4afLHbWheyJix/ATlxCY23FXANN8=)
3: hpFPFF4swm17BfKeLPrET14DerI.roa (hash: /w3PMxP9jyIQ4EgZwsRkLDa6435IO8C6U7QCr8ty+WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:38:52:86:9c:2a:cd:ea:3e:bf:c0:38:e5:02:18:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: Aug 4 10:01:10 2026 GMT
Not After : Aug 5 10:01:10 2026 GMT
Subject: CN=9e6597413a218cc65c69c32b3f49029207338964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ac:9a:f1:d4:bc:6a:7b:5e:0d:b6:97:7a:49:
a4:21:2e:06:f5:51:4c:16:15:d7:bc:06:dd:87:c3:
ef:ae:61:58:54:4f:46:6f:df:21:f2:10:9a:5c:ca:
0c:7f:f5:6a:d1:9f:e8:69:08:ec:ea:c3:fe:1f:c0:
04:18:b9:12:f2:bb:81:59:2b:92:2f:3b:24:8a:84:
3a:69:8d:0f:f2:8d:b6:52:19:02:b9:a3:02:dd:c6:
57:9b:3d:36:9e:cc:42:d3:00:63:61:fe:52:4c:f0:
71:77:40:fc:17:7d:56:c1:9a:32:0a:56:6c:72:6d:
83:0f:59:d5:4d:53:f4:21:03:d5:22:02:28:9b:79:
0a:f9:22:b8:c3:84:d2:4b:4a:f9:e4:78:1a:f9:96:
3e:db:00:fc:c0:ab:be:d9:6e:d9:e2:fc:52:67:e8:
8f:39:46:0c:3d:8d:f5:3d:ba:02:3e:86:44:7e:80:
80:ff:ad:4e:1e:b4:3d:a4:a3:cd:c4:57:2b:cc:dc:
91:6a:8c:57:24:cc:5a:07:f4:05:0d:c5:99:26:fc:
ac:05:6f:ed:10:34:d8:08:27:d4:7f:b0:79:d1:f9:
4a:f1:f4:52:cc:c8:e6:57:3e:1d:f0:7a:40:45:1b:
0c:c7:d9:06:67:e2:6e:d8:b4:f4:b4:83:1c:fa:62:
06:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:65:97:41:3A:21:8C:C6:5C:69:C3:2B:3F:49:02:92:07:33:89:64
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:69:77:61:d4:e9:24:fe:26:a2:b8:16:9e:8d:b7:0e:8a:d5:
29:37:c6:b9:b6:b0:91:ef:61:00:f8:71:0f:8e:ad:d6:fa:cf:
30:be:b1:e3:29:51:8c:01:bb:80:79:d7:41:41:09:08:bb:f1:
15:96:3e:5f:ca:39:20:6c:93:74:6a:e0:c2:54:fb:d7:3e:75:
3d:b8:96:6d:64:cf:ff:e9:34:67:12:8e:02:28:c4:62:c2:d9:
24:c6:99:e4:06:af:ee:aa:82:a7:46:ae:12:e4:d4:5e:a2:41:
13:9f:64:56:18:2b:2d:c1:e1:34:ab:cb:24:a6:cd:76:00:59:
72:3b:1d:8e:9d:07:1e:f8:52:14:df:66:47:06:df:82:b2:3a:
76:d1:4c:76:c7:db:84:2e:7e:92:19:42:fd:94:9b:3e:15:f7:
0b:53:2c:a5:13:de:78:e6:8f:83:d3:6c:7d:6f:c0:4d:99:fa:
d6:a2:79:87:60:d8:5e:d1:0d:30:18:e2:ad:e2:e6:97:4a:a1:
1f:01:37:9b:cd:5a:fd:5c:5d:5f:81:05:8b:86:4b:c0:fe:1d:
09:46:9e:f7:82:d8:39:3b:4e:1a:32:a9:c5:dd:c9:8a:fe:49:
66:d6:2a:72:61:43:90:48:0a:cc:dc:bf:7f:80:de:9a:73:f1:
8f:83:7f:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/MOFKGnCrN6j6/wDjlAhihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YjAxOTI3YTFhMTc3ZDQyNjEyMjFkOTQ2Mjg1MTRhNTI1
YTk2ZTAwHhcNMjYwODA0MTAwMTEwWhcNMjYwODA1MTAwMTEwWjAzMTEwLwYDVQQD
Eyg5ZTY1OTc0MTNhMjE4Y2M2NWM2OWMzMmIzZjQ5MDI5MjA3MzM4OTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKya8dS8anteDbaXekmkIS4G9VFM
FhXXvAbdh8PvrmFYVE9Gb98h8hCaXMoMf/Vq0Z/oaQjs6sP+H8AEGLkS8ruBWSuS
LzskioQ6aY0P8o22UhkCuaMC3cZXmz02nsxC0wBjYf5STPBxd0D8F31WwZoyClZs
cm2DD1nVTVP0IQPVIgIom3kK+SK4w4TSS0r55Hga+ZY+2wD8wKu+2W7Z4vxSZ+iP
OUYMPY31PboCPoZEfoCA/61OHrQ9pKPNxFcrzNyRaoxXJMxaB/QFDcWZJvysBW/t
EDTYCCfUf7B50flK8fRSzMjmVz4d8HpARRsMx9kGZ+Ju2LT0tIMc+mIGEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5ll0E6IYzGXGnDKz9JApIHM4lkMB8GA1UdIwQY
MBaAFGmwGSehoXfUJhIh2UYoUUpSWpbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zMjhlYjMtNTYwMy00OTU1LWFhOTIt
MjI1MmJjY2ZkYmY5LzEvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8zMjhlYjMtNTYwMy00OTU1LWFhOTItMjI1MmJjY2ZkYmY5
LzEvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWl3YdTp
JP4morgWno23DorVKTfGubawke9hAPhxD46t1vrPML6x4ylRjAG7gHnXQUEJCLvx
FZY+X8o5IGyTdGrgwlT71z51PbiWbWTP/+k0ZxKOAijEYsLZJMaZ5Aav7qqCp0au
EuTUXqJBE59kVhgrLcHhNKvLJKbNdgBZcjsdjp0HHvhSFN9mRwbfgrI6dtFMdsfb
hC5+khlC/ZSbPhX3C1MspRPeeOaPg9NsfW/ATZn61qJ5h2DYXtENMBjireLml0qh
HwE3m81a/VxdX4EFi4ZLwP4dCUae94LYOTtOGjKpxd3Jiv5JZtYqcmFDkEgKzNy/
f4DemnPxj4N/Ng==
-----END CERTIFICATE-----
Generated at Tue Aug 4 14:00:59 2026 by rpki-client