
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
File: aBYXGz-RsdELBEWYf2EUKKvxPho.mft (raw, json)
Hash identifier: 2sLSYHzW03C5aw7C+vv92E24XeirshNA4oTBit4rzJk=
Subject key identifier: C6:AD:35:63:66:14:28:18:C6:22:A0:DB:AA:B7:FA:A5:A4:24:55:4E
Authority key identifier: 68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
Certificate issuer: /CN=6816171b3f91b1d10b0445987f611428abf13e1a
Certificate serial: 01A17C5FF332768A4CE400A5710267386241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
Manifest number: 05AB
Signing time: Tue 27 Oct 2026 08:00:25 +0000
Manifest this update: Tue 27 Oct 2026 08:00:25 +0000
Manifest next update: Wed 28 Oct 2026 08:00:25 +0000
Files and hashes: 1: aBYXGz-RsdELBEWYf2EUKKvxPho.crl (hash: XgDxNXad0fhNr1zvQIUG/pugXWZcQqPaDtd5wZ0dtc4=)
2: qF1M2XFi5y1l08ioMUd4lkYvVeo.roa (hash: gdBUqWhk1EMJwQ/Ax3tsMp26Twn14+T6mJIn/33f00g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:5f:f3:32:76:8a:4c:e4:00:a5:71:02:67:38:62:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6816171b3f91b1d10b0445987f611428abf13e1a
Validity
Not Before: Oct 27 08:00:25 2026 GMT
Not After : Oct 28 08:00:25 2026 GMT
Subject: CN=c6ad356366142818c622a0dbaab7faa5a424554e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:7c:65:6c:7e:bc:2f:51:e7:25:95:cf:5e:
45:33:9e:2b:f3:45:f2:9f:25:b1:71:ad:01:56:4f:
ae:bf:ad:3c:42:10:b4:39:69:dd:a3:07:75:83:c7:
96:c5:7d:21:79:17:e5:1f:33:d4:17:01:5f:11:59:
1f:3e:98:94:e2:eb:94:43:64:20:0b:a1:80:a0:e5:
d0:d7:fd:a8:e1:51:6d:95:a2:03:1a:3a:d8:37:da:
20:68:72:2b:c0:8b:fa:72:9f:8c:02:38:2b:69:ec:
72:f5:7a:fd:34:ab:c3:ae:ec:74:7d:a8:d2:92:68:
81:c1:a6:c4:25:a4:e6:03:3b:99:2e:6c:ab:b3:3f:
d8:a4:dd:e0:97:ee:1d:e0:24:a1:a3:54:b5:36:29:
fb:a8:26:96:f6:d3:00:a2:d2:1a:18:88:e5:55:01:
10:12:5b:8c:ff:6d:d9:bf:85:ef:1f:a1:b2:b3:e2:
c7:fb:b5:50:9b:9d:ee:73:5f:7e:3c:cc:8b:4c:39:
1e:8c:95:1f:32:62:0c:f6:f5:73:68:61:80:52:25:
b4:c1:92:5b:a7:a2:95:6b:3b:60:cc:4d:3f:86:3b:
ac:75:00:28:95:28:84:90:43:56:22:dc:66:f4:73:
60:29:6b:43:02:f0:f2:2a:84:7d:32:22:fd:52:96:
af:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AD:35:63:66:14:28:18:C6:22:A0:DB:AA:B7:FA:A5:A4:24:55:4E
X509v3 Authority Key Identifier:
keyid:68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e2:18:af:68:25:ad:e5:9e:aa:4f:17:4d:0b:96:88:5f:07:
d2:a3:4f:f1:b6:0d:da:e4:b0:fa:83:14:3b:f6:3f:f9:86:8e:
f2:7b:af:19:c0:9f:ab:1a:0c:a7:3b:04:9c:67:7a:dd:ea:17:
7d:8c:76:95:4d:86:9f:c1:c3:bd:84:9f:ab:70:85:35:c0:a1:
4f:ce:b7:81:c1:ce:d3:1e:52:43:29:0e:58:6d:10:c5:14:96:
43:58:64:6b:92:23:7b:c1:20:cc:b0:75:a7:8c:ff:4a:50:4b:
ec:35:c7:10:47:a2:40:ef:cd:37:49:cf:fc:b7:46:aa:e7:d4:
99:14:fb:43:a4:16:8a:3e:54:7d:b8:a2:6a:4f:f3:75:46:5c:
71:8b:2e:71:c5:a9:0c:10:14:5d:49:ac:cf:76:0f:dd:67:ec:
13:64:20:92:ea:d2:cd:cc:6d:7a:37:b3:ba:59:cc:ea:4f:36:
b8:5f:44:a1:43:21:8b:82:7d:0a:57:07:c3:6e:03:88:fc:0b:
6e:a6:01:61:c0:9d:73:1e:8b:4b:f7:c3:3f:3f:30:52:bc:8e:
8d:c5:e1:85:56:13:18:1f:2f:2e:13:3e:85:f2:76:27:c4:1f:
ad:25:72:85:6d:99:01:64:e2:2f:a2:ec:29:6c:aa:e0:00:8a:
22:38:4d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:52:07 2026 by rpki-client