Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
File: aBYXGz-RsdELBEWYf2EUKKvxPho.mft (raw, json)
Hash identifier: Og0tkkAIkjbYHgv2FoXT7E06HOel0YaQbE/DqODcITI=
Subject key identifier: DD:13:21:BC:D1:2D:C4:5A:A4:9B:8D:E4:40:8B:36:ED:7C:E4:AD:18
Authority key identifier: 68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
Certificate issuer: /CN=6816171b3f91b1d10b0445987f611428abf13e1a
Certificate serial: 01A08AC399308FAED3F8E47CDFEDFDE5D2EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
Manifest number: 052D
Signing time: Thu 10 Sep 2026 10:01:09 +0000
Manifest this update: Thu 10 Sep 2026 10:01:09 +0000
Manifest next update: Fri 11 Sep 2026 10:01:09 +0000
Files and hashes: 1: aBYXGz-RsdELBEWYf2EUKKvxPho.crl (hash: xD0+XYs3FM3G/JKgjY3kKBV7XmfQ83aOJ3mD4QF7TMc=)
2: cHu9ZbMPrKX8ZIjRFicqBMQg5dQ.roa (hash: K/TDSx0Je1BxRBjDUlA95sURJvSjJ3GjsGy0WuwiR/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:99:30:8f:ae:d3:f8:e4:7c:df:ed:fd:e5:d2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6816171b3f91b1d10b0445987f611428abf13e1a
Validity
Not Before: Sep 10 10:01:09 2026 GMT
Not After : Sep 11 10:01:09 2026 GMT
Subject: CN=dd1321bcd12dc45aa49b8de4408b36ed7ce4ad18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:a7:5c:0b:af:80:86:cb:33:73:2c:a3:97:
d0:41:59:27:b8:c8:f7:a4:d4:20:5b:85:2a:83:2a:
af:60:8a:e6:0b:6e:0c:d1:8e:de:ac:90:99:bd:11:
f9:2b:10:3b:8c:ba:ff:cb:26:7d:45:e1:87:ee:4e:
6a:f1:a6:40:67:34:d9:c7:15:b8:9c:1f:6c:ac:fd:
be:7d:15:6a:63:36:0f:e9:77:33:fc:d1:35:5e:d5:
5e:ad:fa:32:6a:ea:b5:4a:00:02:37:2e:86:8e:5f:
42:32:3e:20:ce:b8:80:01:5d:e9:84:b2:e1:9c:02:
bf:c9:03:e7:83:4c:09:c7:6f:02:1d:71:52:e7:96:
2b:f4:1c:07:59:a3:5d:e7:30:95:1d:a5:c1:09:0c:
08:45:95:b3:f2:a8:47:30:35:6e:6a:0c:e5:93:eb:
c6:7e:a6:9d:2b:10:38:52:3b:cf:40:26:2a:f5:9c:
55:ff:24:b7:3f:ab:19:98:1c:b6:54:40:b7:49:43:
5e:45:8c:e8:bf:c8:59:28:30:dc:17:a1:b8:68:a5:
64:97:0a:a1:69:2a:cb:76:15:ff:30:49:de:11:ff:
45:5a:61:de:4d:76:c0:ca:77:d5:00:53:ce:6e:41:
87:78:15:66:25:61:97:0e:4f:f0:be:f6:11:85:00:
c1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:13:21:BC:D1:2D:C4:5A:A4:9B:8D:E4:40:8B:36:ED:7C:E4:AD:18
X509v3 Authority Key Identifier:
keyid:68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7c:ef:45:0d:26:91:bd:b7:cb:25:e8:33:9e:6b:e0:76:4d:
6a:70:07:b8:ae:1a:11:aa:15:2f:c1:cc:6a:64:07:6f:64:92:
44:e7:76:ca:58:5b:58:e8:47:01:5d:cd:89:a0:79:19:7a:cc:
72:fe:5a:36:ae:84:d9:80:a8:16:94:62:18:b8:9c:fa:56:f9:
f1:f6:34:9d:4f:62:9d:e4:51:66:cc:c1:83:e3:cf:d1:da:84:
29:66:50:b0:54:09:bc:9d:70:46:18:2a:9f:34:b7:34:d1:4f:
0c:43:11:55:0c:33:7f:37:36:f1:09:4b:74:99:e4:96:c4:00:
d4:c6:dd:56:99:8c:a3:2f:0e:6a:4e:26:a9:8c:df:26:b7:fb:
7e:33:40:32:f9:c9:3e:55:0d:bb:99:5a:a8:8b:a8:aa:fd:ea:
75:3b:72:c9:18:9e:9f:43:33:2a:63:41:7e:fe:06:3c:cc:c4:
ed:7d:49:7a:b7:61:b1:c6:0a:8b:86:d9:c4:fd:1f:bf:fa:9f:
7e:60:c4:cf:8b:29:a3:44:b6:49:df:11:f4:24:c5:79:b4:53:
87:ed:80:a7:31:c1:00:88:cf:c7:94:59:99:e6:48:d4:57:bb:
35:da:e4:ba:d1:91:55:fe:f1:3a:cb:d0:65:a3:50:6d:de:8c:
62:a5:7a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:10:46 2026 by rpki-client