Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
File: aBYXGz-RsdELBEWYf2EUKKvxPho.mft (raw, json)
Hash identifier: ZV3nw9VFq8oSg5vFnhrl3ZvWbASg5j5WIZqhNNOpEdw=
Subject key identifier: 8D:A2:9F:33:D1:6F:15:82:6C:BF:C0:FA:94:DC:5E:48:28:4D:E1:7B
Authority key identifier: 68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
Certificate issuer: /CN=6816171b3f91b1d10b0445987f611428abf13e1a
Certificate serial: 019DCFAC38748DBF9FC00383AF652EF5C017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
Manifest number: 03C3
Signing time: Mon 27 Apr 2026 16:01:03 +0000
Manifest this update: Mon 27 Apr 2026 16:01:03 +0000
Manifest next update: Tue 28 Apr 2026 16:01:03 +0000
Files and hashes: 1: aBYXGz-RsdELBEWYf2EUKKvxPho.crl (hash: ZzWOIFUblCW9CqrTPfBCUWCTUgualW2kUAPrdZycbz4=)
2: cHu9ZbMPrKX8ZIjRFicqBMQg5dQ.roa (hash: K/TDSx0Je1BxRBjDUlA95sURJvSjJ3GjsGy0WuwiR/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ac:38:74:8d:bf:9f:c0:03:83:af:65:2e:f5:c0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6816171b3f91b1d10b0445987f611428abf13e1a
Validity
Not Before: Apr 27 16:01:03 2026 GMT
Not After : Apr 28 16:01:03 2026 GMT
Subject: CN=8da29f33d16f15826cbfc0fa94dc5e48284de17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:16:21:b6:84:6b:ed:2c:b7:21:44:60:8a:4f:
cc:e4:dd:3a:65:15:df:0b:e1:04:a1:a6:9a:53:4c:
24:81:7a:74:e9:d5:1d:fe:8b:62:88:7c:b9:75:5d:
6f:ae:83:16:52:c8:1d:48:c8:78:81:14:a5:fd:a1:
c6:49:43:de:55:6f:23:8c:45:18:55:fc:45:03:62:
38:4d:36:8b:e3:04:c5:87:5e:d8:ce:aa:57:6d:29:
ad:a4:05:65:7e:96:20:b8:9d:da:35:3a:63:04:1b:
65:e1:b1:06:5a:2b:3b:6e:9a:51:31:a4:0e:21:e2:
95:7e:f9:39:f3:6b:85:49:a0:02:5d:99:3e:86:fb:
b9:0d:ec:1b:ba:4a:2d:06:3a:63:89:94:19:19:79:
c6:f0:a8:a7:1d:7f:67:f7:89:67:5d:48:fd:73:2a:
69:69:17:4a:c3:4d:f3:84:78:a7:aa:05:18:c2:dc:
80:68:8e:58:30:ef:eb:a1:65:06:9f:28:a8:4e:6a:
98:20:f1:ce:90:56:0b:dc:68:96:b2:96:40:fe:f0:
10:38:3a:f0:c4:62:e6:19:f7:3d:d3:8f:68:0b:2a:
31:86:3d:06:2d:20:1c:81:e6:43:da:8b:f5:19:cd:
2e:ba:94:c6:58:d7:e9:3d:a0:75:a5:c2:b5:6d:7c:
86:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A2:9F:33:D1:6F:15:82:6C:BF:C0:FA:94:DC:5E:48:28:4D:E1:7B
X509v3 Authority Key Identifier:
keyid:68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:38:4e:ba:1e:8f:a2:c8:15:46:d6:20:fb:df:dd:5f:e8:72:
59:41:9a:8e:d7:23:0e:7b:e4:1f:36:ed:02:65:2a:a6:30:0b:
8f:7d:1b:bd:86:29:c9:40:b8:24:c8:3a:fa:9c:11:68:5f:63:
1e:73:26:a3:f0:dd:11:01:4e:fa:1d:55:53:9e:4b:ae:a8:ea:
ba:7a:d8:40:a0:6a:59:31:da:74:19:40:9f:60:64:89:4e:d2:
bb:e4:83:a4:ea:cf:50:32:ff:f4:98:be:bd:05:03:06:e7:62:
54:c1:11:04:db:d8:bd:93:b4:6c:08:04:41:8f:ad:7b:e3:ca:
cc:a0:e8:ec:e2:25:8f:db:d5:fd:a3:8c:8c:83:e1:c5:48:a4:
ca:1c:8a:61:f8:82:a2:12:74:a9:17:53:e9:e6:ef:3e:91:e3:
c2:1c:0e:56:a2:c0:9c:ec:ae:47:93:12:f2:1c:24:d6:ea:7c:
8f:03:29:db:a1:67:f9:b1:75:cc:3f:f4:b6:c3:e5:d7:0f:ab:
dd:19:25:f5:36:76:0a:e5:d2:d2:a9:b7:74:b3:eb:e6:58:02:
7b:48:38:3a:79:5c:b0:81:df:50:c7:27:ff:72:ab:61:7e:c7:
16:59:13:ef:8d:35:69:a3:29:5b:43:3a:05:06:22:2d:38:a0:
9a:bb:64:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:46:31 2026 by rpki-client