Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
File: abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json)
Hash identifier: irL+Wqo6R5aps86ysquHFs7xC8IFpvkxhACroV/x308=
Subject key identifier: F0:59:94:13:5A:AF:8B:1C:1D:7C:96:B9:80:4D:3E:52:B3:A6:B5:A3
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 019DDDD5B280637314819162CF471B4274A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
Manifest number: 0D20
Signing time: Thu 30 Apr 2026 10:01:02 +0000
Manifest this update: Thu 30 Apr 2026 10:01:02 +0000
Manifest next update: Fri 01 May 2026 10:01:02 +0000
Files and hashes: 1: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: t1RSNjzFduesAarbYJMbBEodZkkvRVWB429SnWt98pE=)
2: epJ5NtfvH1g3tuK4xd9nscSiEoA.roa (hash: niW0UBzEk+eWx8n4afLHbWheyJix/ATlxCY23FXANN8=)
3: hpFPFF4swm17BfKeLPrET14DerI.roa (hash: /w3PMxP9jyIQ4EgZwsRkLDa6435IO8C6U7QCr8ty+WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:d5:b2:80:63:73:14:81:91:62:cf:47:1b:42:74:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: Apr 30 10:01:02 2026 GMT
Not After : May 1 10:01:02 2026 GMT
Subject: CN=f05994135aaf8b1c1d7c96b9804d3e52b3a6b5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:11:de:0d:ea:b7:f9:3e:27:2b:df:92:09:17:
29:77:e3:0b:3c:35:9c:57:a9:ca:97:6e:fd:28:30:
64:2f:5a:0b:b6:5e:b6:56:6a:0e:73:47:6f:d3:c1:
19:46:d7:a1:f3:7f:69:ec:82:fd:a4:54:6f:af:f4:
1d:84:18:fd:7d:22:26:c9:fc:03:ba:a1:13:30:e1:
b4:49:24:72:73:ac:c6:50:4e:36:ad:69:73:65:e3:
2c:d7:61:5a:4d:8d:b6:c0:af:88:63:1d:0e:c0:f1:
ae:34:09:3b:e9:20:61:8d:08:cf:ae:57:a0:f6:1c:
ee:db:e1:27:42:04:c0:cc:e3:aa:b3:d1:61:63:ab:
1a:39:ad:08:f0:c2:7d:70:15:bf:fc:40:ba:8d:96:
09:2a:f8:2c:ae:f5:ae:79:4f:4b:69:76:e7:4e:2e:
de:57:44:e2:55:9f:ff:f0:39:2f:c7:6e:be:44:f5:
81:75:b9:ed:39:04:2e:16:0a:fc:a9:55:5d:66:27:
d9:bf:17:98:df:05:b5:0f:d3:45:b1:aa:aa:72:af:
1b:db:a6:f0:06:41:4b:08:3f:3b:31:01:56:29:55:
e6:61:95:d9:be:20:a0:a1:f1:34:94:2f:8e:84:20:
41:cc:91:65:61:d3:3c:b0:1e:44:03:82:f5:1e:ae:
42:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:59:94:13:5A:AF:8B:1C:1D:7C:96:B9:80:4D:3E:52:B3:A6:B5:A3
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:8e:b9:24:9e:11:1a:c8:4a:94:79:4b:a0:dd:58:dc:69:5d:
25:1d:8e:84:3e:f7:c2:57:63:b8:70:41:c2:73:e1:03:ff:c4:
3f:05:98:3b:97:57:30:4f:7a:ff:ca:53:4e:82:69:c2:98:ac:
70:10:1b:c2:9c:83:c1:d5:b0:38:bb:d8:32:f9:d2:c0:8b:42:
9c:55:34:fc:4d:b8:4e:ea:8f:96:6b:71:13:9f:6f:be:92:f5:
d4:ea:59:8b:80:3c:7e:b4:72:44:cd:95:71:de:74:53:7e:12:
4c:f9:0c:22:60:16:8f:06:30:4e:88:17:b7:25:3a:f1:9f:6f:
ad:44:b3:ed:31:66:94:1f:25:6d:db:f1:e1:a0:9a:27:d4:de:
87:be:b4:06:87:38:e3:aa:b2:0b:0a:89:a0:43:47:7b:8d:7a:
4b:96:af:e6:97:ec:d5:95:c1:1b:5a:8c:fd:a6:f2:55:0c:89:
e0:7c:9c:47:59:5d:5d:92:85:e1:64:b5:4f:a2:f9:28:43:56:
05:26:19:73:bd:d7:55:ba:8e:df:b2:4e:57:f7:0a:90:93:3d:
de:e8:24:4b:2a:87:6f:97:23:2c:53:2f:32:d8:df:02:7d:91:
3d:99:bf:53:33:8e:04:a7:62:23:c9:19:21:f9:94:ec:8e:43:
d0:61:15:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:48:40 2026 by rpki-client