
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
File: AblFvZ9KDnOPSRWctrba8iSG1cA.mft (raw, json)
Hash identifier: djeEZtWoD6FUAmDRBBs6FEWmzVB3umy7qHr6HMhCQsY=
Subject key identifier: 7B:C5:70:C4:21:5C:64:93:FD:09:CF:6D:97:15:1A:C3:4E:79:1E:BD
Authority key identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
Certificate issuer: /CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Certificate serial: 019E2F96CEB8B17D13BB3958F04622177C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
Manifest number: 0FDF
Signing time: Sat 16 May 2026 07:01:12 +0000
Manifest this update: Sat 16 May 2026 07:01:12 +0000
Manifest next update: Sun 17 May 2026 07:01:12 +0000
Files and hashes: 1: AblFvZ9KDnOPSRWctrba8iSG1cA.crl (hash: 7bSBVQxoYcqedOq9uMgk7hpGOUwuThdCML3STQhwfTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:ce:b8:b1:7d:13:bb:39:58:f0:46:22:17:7c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Validity
Not Before: May 16 07:01:12 2026 GMT
Not After : May 17 07:01:12 2026 GMT
Subject: CN=7bc570c4215c6493fd09cf6d97151ac34e791ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:89:90:66:4f:92:56:fb:a3:45:b0:13:33:f6:
1a:23:ca:e8:70:d7:8c:08:87:07:ee:48:1d:ac:bb:
5f:4f:22:97:c8:54:84:af:83:ab:bf:bf:0d:ac:d9:
44:b5:fe:6b:97:7f:49:e6:56:74:72:b6:d4:34:e5:
04:18:13:ee:3f:ff:d5:9d:72:ec:8a:b0:0c:ce:2c:
c0:41:02:5c:ed:15:63:b5:1c:d5:c3:55:b5:b5:ef:
eb:ff:41:bb:e0:3e:59:b0:8d:7b:7e:7e:c0:2b:58:
05:95:69:ff:2d:7f:b2:a0:80:4f:37:a3:ed:38:e6:
6e:6e:41:5b:57:8e:79:70:73:f9:b3:94:7e:91:94:
f0:e0:11:6a:ae:6f:2a:c6:48:2e:76:66:b1:70:f5:
7f:39:39:47:5f:17:98:0e:ea:cb:57:73:8b:8b:1d:
54:b7:2d:64:40:89:cf:c9:49:e0:87:01:f1:44:ac:
11:89:90:e1:82:f1:ad:75:be:3a:eb:26:3b:e5:33:
d5:00:03:f7:d5:e6:7f:93:7b:08:35:69:e8:e2:c5:
a0:62:b2:88:47:4a:b9:ba:b4:98:14:6b:e7:32:2e:
a6:36:f3:7a:3e:d5:0b:8d:80:d9:dd:91:69:fe:a3:
b3:ff:46:22:30:4c:44:16:21:7a:d4:ba:53:2c:a5:
3b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C5:70:C4:21:5C:64:93:FD:09:CF:6D:97:15:1A:C3:4E:79:1E:BD
X509v3 Authority Key Identifier:
keyid:01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:73:22:1a:b8:83:53:62:9f:34:28:1a:cd:d1:04:15:75:76:
55:db:77:0e:68:68:5f:93:15:bf:62:0c:84:99:37:ed:3f:5f:
fe:3a:ab:be:c7:7a:12:db:81:73:2f:e6:f5:1b:2f:72:ea:a4:
9b:34:1d:1d:f0:b5:4c:79:5b:e7:73:a1:83:31:ae:55:03:df:
61:57:10:fb:17:63:63:03:48:79:e2:84:89:36:b6:88:46:b4:
64:d5:cf:39:a6:6e:d7:a7:52:47:fe:cf:f3:ba:72:e0:27:85:
38:6c:60:90:50:e1:9b:e7:f7:c9:8e:01:dc:2e:1d:a1:cb:eb:
00:b1:f3:96:4d:d7:48:31:60:a5:d3:2f:52:c6:20:66:0d:5a:
e7:8a:7b:4e:4c:de:14:59:8a:7c:31:a1:60:92:02:5f:db:4f:
fe:4b:9d:26:7b:a8:f5:e2:ff:eb:18:1c:aa:4d:3a:88:cb:cd:
e0:07:81:4b:11:9c:ea:90:66:01:6d:9d:be:bd:55:4d:e0:5c:
28:30:91:7b:7b:4b:9b:de:6a:40:76:74:24:da:49:84:6d:bd:
eb:d5:ff:7d:6a:70:fb:b5:c1:4f:1c:2c:69:7a:fa:a0:1d:b4:
97:63:b0:d2:d2:9c:a6:1b:54:96:a3:af:11:40:94:b5:b9:1b:
29:06:8a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:03 2026 by rpki-client