Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
File: AblFvZ9KDnOPSRWctrba8iSG1cA.mft (raw, json)
Hash identifier: XfudcLirpXgHvUxxRi7meY2axCZYCNFWSEVRZmqi7kU=
Subject key identifier: 35:F7:27:E5:21:D7:25:BD:0E:60:74:DD:36:23:68:45:8A:34:9A:0E
Authority key identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
Certificate issuer: /CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Certificate serial: 019F17553F0DD6015A31164110D313E28B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
Manifest number: 1057
Signing time: Tue 30 Jun 2026 07:01:30 +0000
Manifest this update: Tue 30 Jun 2026 07:01:30 +0000
Manifest next update: Wed 01 Jul 2026 07:01:30 +0000
Files and hashes: 1: AblFvZ9KDnOPSRWctrba8iSG1cA.crl (hash: NLMe+AUS5CBjyWFneYgi+2c1S7SUzHofqiGxAMKeqJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:55:3f:0d:d6:01:5a:31:16:41:10:d3:13:e2:8b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Validity
Not Before: Jun 30 07:01:30 2026 GMT
Not After : Jul 1 07:01:30 2026 GMT
Subject: CN=35f727e521d725bd0e6074dd362368458a349a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:4a:57:a5:da:3f:83:ee:02:9a:75:de:3a:
7a:fb:c0:2e:3b:5d:fb:5b:cb:29:e2:2c:2f:be:c1:
15:2b:0d:d5:c0:f9:bc:ae:9b:6e:cf:8e:47:85:fc:
ae:57:a8:b7:9b:85:13:90:1c:fd:93:5d:dc:b2:bf:
6a:1e:91:cc:a9:9a:5f:5c:12:0f:dd:4c:a3:29:50:
6e:be:1c:11:d8:5e:9c:35:fd:bc:9f:77:84:39:a9:
48:8e:3c:0e:5e:6c:a9:61:eb:7d:b7:e8:30:e7:08:
6c:b1:09:0b:41:9b:3c:1b:e0:55:0d:2e:43:2b:02:
bd:10:5c:59:85:8a:f4:e7:43:86:33:20:54:7b:89:
0b:3a:78:92:12:3a:b6:c6:50:ac:85:24:16:59:b9:
62:eb:f5:3a:35:80:09:ae:a0:c6:70:54:13:1f:1c:
9b:9c:ab:20:07:a0:80:b5:cf:a9:04:bb:cf:8f:ae:
ef:04:be:f3:29:82:8c:27:bf:3f:59:3b:f1:22:38:
d5:db:0b:13:25:91:28:12:b7:d3:5e:2a:6c:5d:e9:
88:a7:4e:82:f3:74:87:bc:8c:cc:44:44:b5:43:5d:
a9:43:5e:62:b2:aa:83:c9:06:dc:a8:52:61:06:84:
26:9e:65:54:d0:81:9f:aa:97:b6:b6:11:f0:2a:45:
5c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F7:27:E5:21:D7:25:BD:0E:60:74:DD:36:23:68:45:8A:34:9A:0E
X509v3 Authority Key Identifier:
keyid:01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:87:fa:59:13:e8:00:0e:d9:86:34:f0:8c:d2:e6:80:e8:67:
a9:08:05:c5:41:68:49:27:a3:c4:fd:40:00:07:be:a5:68:2d:
ea:26:8c:e2:e2:60:2e:67:7b:f3:58:30:88:f3:04:78:e6:01:
11:31:e9:13:bc:d6:29:81:f3:d9:a0:dd:27:49:a3:f6:85:c9:
23:f6:bc:97:e8:62:d5:46:44:ac:25:d1:38:ba:37:60:ef:6c:
31:83:8b:bd:e6:6c:ff:0a:58:54:23:7b:6b:c7:fd:3c:03:f9:
4c:20:f2:62:23:5f:db:11:b8:3e:8b:38:27:4c:9d:c9:e3:a9:
62:26:ef:6c:8f:8c:d9:0b:27:62:80:e5:75:c9:22:11:05:f6:
d3:92:56:09:b6:69:05:4b:ea:12:42:ac:b2:d1:1d:13:ba:a4:
8c:25:53:73:67:9a:28:c0:47:7d:45:0d:02:c8:27:ea:fa:e2:
87:54:7b:7d:79:da:fa:c4:bf:63:ba:d2:ff:84:4e:e9:1b:cb:
b6:70:40:88:3e:04:7c:59:e8:22:7d:62:bf:9d:10:cb:ac:e3:
4c:31:85:c7:be:5e:14:47:44:5e:94:b2:49:bb:67:ce:88:3d:
8c:ed:c1:d1:b9:84:e9:e6:e5:66:1e:74:88:d3:c0:d5:1b:3a:
15:62:75:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:14 2026 by rpki-client