Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
File: AblFvZ9KDnOPSRWctrba8iSG1cA.mft (raw, json)
Hash identifier: D7RR66/uUqrA9cUTCOfzS6qVgXxR5wI2AIyFcCh1ss8=
Subject key identifier: 80:22:A0:42:69:AE:BD:74:EA:9B:58:53:0F:FA:6A:14:BA:A9:63:2D
Authority key identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
Certificate issuer: /CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Certificate serial: 019D38654F69276BED5E2B2128E0C7A8566F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
Manifest number: 0F5F
Signing time: Sun 29 Mar 2026 07:00:56 +0000
Manifest this update: Sun 29 Mar 2026 07:00:56 +0000
Manifest next update: Mon 30 Mar 2026 07:00:56 +0000
Files and hashes: 1: AblFvZ9KDnOPSRWctrba8iSG1cA.crl (hash: YjjrgzkBdjWZ7k4l6+R/rgPH/Nxyb6HXkxh6jUnHGyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:4f:69:27:6b:ed:5e:2b:21:28:e0:c7:a8:56:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Validity
Not Before: Mar 29 07:00:56 2026 GMT
Not After : Mar 30 07:00:56 2026 GMT
Subject: CN=8022a04269aebd74ea9b58530ffa6a14baa9632d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9a:de:de:c8:d3:22:bb:39:2a:3a:26:2d:ec:
48:40:d5:8c:e6:8e:51:10:d9:54:1c:bb:8c:fd:b1:
d1:ef:02:28:d6:e9:17:fc:d0:e8:e1:e8:65:b8:f9:
5c:ba:d8:eb:71:bb:82:b4:ca:1b:3c:12:bf:c3:e4:
35:1d:6f:ea:9b:ed:c8:60:2d:c2:0f:a4:52:9c:d7:
33:26:75:4c:4d:5c:1f:01:ba:fe:59:c9:fb:02:dc:
12:26:93:f3:5e:fa:63:26:fc:00:5c:15:ef:f5:52:
90:0c:29:78:c0:5e:22:09:3c:3a:e9:3b:bb:19:69:
7f:6f:06:98:32:29:fc:c5:86:32:4c:98:1b:82:e3:
6b:e9:b6:51:63:fd:eb:3f:84:c4:7f:5f:79:d3:c5:
41:5c:87:2d:b8:26:ad:ae:f1:4c:c6:17:fe:84:b6:
77:23:6b:ff:40:01:71:0b:0e:89:eb:0d:c5:31:8b:
f2:6d:08:d3:1a:ba:b1:a0:99:1a:5e:be:75:6a:05:
42:47:80:1c:8b:35:55:ab:64:fd:e4:94:5b:00:43:
ea:0a:b1:0a:5e:5f:c6:48:28:31:c7:a9:d6:da:99:
0c:a9:93:3f:be:7f:64:2f:45:6d:82:23:f7:94:11:
04:21:67:c6:5b:1d:28:31:aa:a5:f5:7d:45:f3:e1:
e5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:22:A0:42:69:AE:BD:74:EA:9B:58:53:0F:FA:6A:14:BA:A9:63:2D
X509v3 Authority Key Identifier:
keyid:01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fd:b3:f7:3c:21:13:5b:23:7e:08:9c:6f:f5:21:e2:55:51:
97:0b:9d:20:01:e9:6b:6a:fd:92:cb:c6:c5:26:ff:03:fd:12:
bb:a1:01:0e:4c:9f:3f:21:48:43:fe:60:74:02:b5:94:ce:2f:
c1:98:db:04:b7:0a:80:7d:0f:d0:41:03:eb:fa:36:16:19:cc:
26:67:fe:99:69:2e:38:77:de:b9:3d:4b:cd:bb:e6:4c:ea:82:
3d:33:a2:9d:ee:57:46:fa:9e:68:88:b5:76:85:f7:86:89:da:
b7:5a:dc:07:e5:7e:70:87:db:b1:3a:36:27:5a:8a:16:ee:9f:
40:82:a4:c6:3f:78:25:ac:4d:c4:bb:a8:65:73:dd:95:4c:cb:
bb:7d:1b:0d:30:11:c2:73:08:fd:36:78:1a:08:3b:12:ee:95:
a4:21:27:e2:57:49:34:84:7c:13:46:6c:84:55:65:4d:86:8c:
ad:a0:26:31:69:65:52:5a:c5:f6:66:64:9d:e8:95:53:75:44:
60:9f:bf:98:d1:6c:59:80:f0:dd:6b:9d:2d:61:cf:ef:96:ff:
70:c3:f2:5f:93:00:a8:98:aa:dc:18:4a:85:3d:60:a9:7e:d4:
5e:9c:b9:fe:54:1d:e6:4e:81:d2:73:79:07:c9:7c:a4:dd:e3:
0a:1a:d1:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZU9pJ2vtXishKODHqFZvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYjk0NWJkOWY0YTBlNzM4ZjQ5MTU5Y2I2YjZkYWYyMjQ4
NmQ1YzAwHhcNMjYwMzI5MDcwMDU2WhcNMjYwMzMwMDcwMDU2WjAzMTEwLwYDVQQD
Eyg4MDIyYTA0MjY5YWViZDc0ZWE5YjU4NTMwZmZhNmExNGJhYTk2MzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJre3sjTIrs5KjomLexIQNWM5o5R
ENlUHLuM/bHR7wIo1ukX/NDo4ehluPlcutjrcbuCtMobPBK/w+Q1HW/qm+3IYC3C
D6RSnNczJnVMTVwfAbr+Wcn7AtwSJpPzXvpjJvwAXBXv9VKQDCl4wF4iCTw66Tu7
GWl/bwaYMin8xYYyTJgbguNr6bZRY/3rP4TEf19508VBXIctuCatrvFMxhf+hLZ3
I2v/QAFxCw6J6w3FMYvybQjTGrqxoJkaXr51agVCR4AcizVVq2T95JRbAEPqCrEK
Xl/GSCgxx6nW2pkMqZM/vn9kL0VtgiP3lBEEIWfGWx0oMaql9X1F8+HlHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAioEJprr106ptYUw/6ahS6qWMtMB8GA1UdIwQY
MBaAFAG5Rb2fSg5zj0kVnLa22vIkhtXAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWJsRnZaOUtEbk9QU1JXY3RyYmE4aVNHMWNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84YzllZGItYTIyNi00NWFkLThiM2It
ZDNiZDdhYjNlZDM2LzEvQWJsRnZaOUtEbk9QU1JXY3RyYmE4aVNHMWNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy84YzllZGItYTIyNi00NWFkLThiM2ItZDNiZDdhYjNlZDM2
LzEvQWJsRnZaOUtEbk9QU1JXY3RyYmE4aVNHMWNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAif2z9zwh
E1sjfgicb/Uh4lVRlwudIAHpa2r9ksvGxSb/A/0Su6EBDkyfPyFIQ/5gdAK1lM4v
wZjbBLcKgH0P0EED6/o2FhnMJmf+mWkuOHfeuT1LzbvmTOqCPTOine5XRvqeaIi1
doX3honat1rcB+V+cIfbsTo2J1qKFu6fQIKkxj94JaxNxLuoZXPdlUzLu30bDTAR
wnMI/TZ4Ggg7Eu6VpCEn4ldJNIR8E0ZshFVlTYaMraAmMWllUlrF9mZkneiVU3VE
YJ+/mNFsWYDw3WudLWHP75b/cMPyX5MAqJiq3BhKhT1gqX7UXpy5/lQd5k6B0nN5
B8l8pN3jChrROQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:05 2026 by rpki-client