Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
File: abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json)
Hash identifier: pgNvpbQvSgHmjMn20/HghZaldBjurfop0hsfGHJvRwI=
Subject key identifier: 76:B7:70:B3:D6:84:43:2D:6C:4C:C6:81:79:34:92:AD:A0:D2:16:1D
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 019CF428F4F4038867AA7A42925AEA7FD99F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
Manifest number: 0CA7
Signing time: Mon 16 Mar 2026 01:00:50 +0000
Manifest this update: Mon 16 Mar 2026 01:00:50 +0000
Manifest next update: Tue 17 Mar 2026 01:00:50 +0000
Files and hashes: 1: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: Q6BQQOKB2EEnpHXLaH/YVhMYZbm42gXtaOtO70JRuxU=)
2: epJ5NtfvH1g3tuK4xd9nscSiEoA.roa (hash: niW0UBzEk+eWx8n4afLHbWheyJix/ATlxCY23FXANN8=)
3: hpFPFF4swm17BfKeLPrET14DerI.roa (hash: /w3PMxP9jyIQ4EgZwsRkLDa6435IO8C6U7QCr8ty+WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f4:28:f4:f4:03:88:67:aa:7a:42:92:5a:ea:7f:d9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: Mar 16 01:00:50 2026 GMT
Not After : Mar 17 01:00:50 2026 GMT
Subject: CN=76b770b3d684432d6c4cc681793492ada0d2161d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:3e:10:f2:4d:72:a0:32:9f:6a:df:b7:20:
9f:ad:d9:88:5b:68:c4:a1:0c:6b:37:af:41:06:a3:
d5:c0:59:bc:97:03:28:8d:21:79:fe:c4:05:82:fb:
38:a6:55:b3:cd:8b:f3:c8:62:65:da:94:71:76:33:
08:c7:1c:8c:3b:53:56:61:86:c6:fd:cf:86:46:cb:
32:5a:0e:44:24:25:40:a7:1b:00:01:69:70:cb:2c:
cd:29:01:74:fd:fc:aa:94:14:67:8f:10:3a:c4:e1:
12:54:32:b8:3c:c1:4a:21:16:55:55:c1:7a:04:34:
fb:d1:d0:b8:84:7e:c3:f7:7b:07:16:3a:40:2f:1d:
1a:e0:c1:f4:15:f0:f8:65:76:02:d0:f1:d1:30:fd:
0f:1e:aa:99:13:d2:35:96:ee:b4:bc:15:75:43:85:
13:c5:4a:b5:72:04:c5:51:cb:93:0c:3b:8d:f3:9f:
47:d1:a4:ea:b5:76:fd:43:a8:73:6f:dc:e2:3a:bf:
c1:58:09:11:f5:03:fb:4a:a6:1b:13:0d:35:4e:8d:
45:f0:6f:fd:b3:e6:89:19:b5:e7:bb:9d:61:37:56:
71:a9:08:d7:2f:66:a7:a4:ab:23:43:bd:45:71:d4:
09:cf:ec:5d:16:39:56:53:00:2d:c5:e7:3b:56:f2:
8f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B7:70:B3:D6:84:43:2D:6C:4C:C6:81:79:34:92:AD:A0:D2:16:1D
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:6c:ce:e0:51:74:b0:73:11:27:45:06:86:89:cc:80:cb:c0:
8a:88:0c:ab:98:51:a7:4f:7c:41:6a:a6:af:e9:aa:9f:73:4b:
1a:b4:f7:ed:bc:d7:8f:3d:bb:45:d2:42:db:4a:5a:f6:ed:d8:
76:ab:57:b7:e0:26:88:97:02:e3:53:2b:06:3a:60:46:61:7d:
ea:a5:57:63:c8:30:25:f5:f0:ee:1a:4d:a6:f4:ae:e9:90:49:
5d:d7:53:24:99:ed:e1:c1:a4:0d:d5:fd:ea:3f:a0:61:85:61:
a9:55:49:42:c7:e8:15:59:7c:07:3f:98:cf:f5:54:75:72:0a:
73:09:77:74:33:6f:2d:48:98:30:b5:d3:5f:fd:bc:0b:f8:a8:
5b:48:2a:e5:50:65:6e:e7:52:df:5a:a5:9e:ac:5c:4f:c6:34:
f0:fb:d3:cc:4f:6f:32:3d:c7:10:3d:be:1c:76:ee:7a:21:da:
aa:b6:b7:08:53:0d:a1:e3:74:85:30:8b:a3:46:20:5e:40:f1:
7c:46:fb:25:7e:8f:58:1a:ff:ee:5a:20:a7:b1:c4:26:2e:2f:
47:e5:af:87:95:66:b9:bf:9e:1f:77:fb:5c:56:45:d2:cb:68:
2c:9c:48:42:6d:a5:81:59:9f:06:f6:b9:21:6e:23:0c:a3:be:
6d:ff:8f:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZz0KPT0A4hnqnpCklrqf9mfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YjAxOTI3YTFhMTc3ZDQyNjEyMjFkOTQ2Mjg1MTRhNTI1
YTk2ZTAwHhcNMjYwMzE2MDEwMDUwWhcNMjYwMzE3MDEwMDUwWjAzMTEwLwYDVQQD
Eyg3NmI3NzBiM2Q2ODQ0MzJkNmM0Y2M2ODE3OTM0OTJhZGEwZDIxNjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNA+EPJNcqAyn2rftyCfrdmIW2jE
oQxrN69BBqPVwFm8lwMojSF5/sQFgvs4plWzzYvzyGJl2pRxdjMIxxyMO1NWYYbG
/c+GRssyWg5EJCVApxsAAWlwyyzNKQF0/fyqlBRnjxA6xOESVDK4PMFKIRZVVcF6
BDT70dC4hH7D93sHFjpALx0a4MH0FfD4ZXYC0PHRMP0PHqqZE9I1lu60vBV1Q4UT
xUq1cgTFUcuTDDuN859H0aTqtXb9Q6hzb9ziOr/BWAkR9QP7SqYbEw01To1F8G/9
s+aJGbXnu51hN1ZxqQjXL2anpKsjQ71FcdQJz+xdFjlWUwAtxec7VvKP/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHa3cLPWhEMtbEzGgXk0kq2g0hYdMB8GA1UdIwQY
MBaAFGmwGSehoXfUJhIh2UYoUUpSWpbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zMjhlYjMtNTYwMy00OTU1LWFhOTIt
MjI1MmJjY2ZkYmY5LzEvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8zMjhlYjMtNTYwMy00OTU1LWFhOTItMjI1MmJjY2ZkYmY5
LzEvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGzO4FF0
sHMRJ0UGhonMgMvAiogMq5hRp098QWqmr+mqn3NLGrT37bzXjz27RdJC20pa9u3Y
dqtXt+AmiJcC41MrBjpgRmF96qVXY8gwJfXw7hpNpvSu6ZBJXddTJJnt4cGkDdX9
6j+gYYVhqVVJQsfoFVl8Bz+Yz/VUdXIKcwl3dDNvLUiYMLXTX/28C/ioW0gq5VBl
budS31qlnqxcT8Y08PvTzE9vMj3HED2+HHbueiHaqra3CFMNoeN0hTCLo0YgXkDx
fEb7JX6PWBr/7logp7HEJi4vR+Wvh5Vmub+eH3f7XFZF0stoLJxIQm2lgVmfBva5
IW4jDKO+bf+Pgg==
-----END CERTIFICATE-----
Generated at Mon Mar 16 03:00:49 2026 by rpki-client