Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
File: aBYXGz-RsdELBEWYf2EUKKvxPho.mft (raw, json)
Hash identifier: S0jGmHAn/7YwdksEZZOuuiR4Z3HMm0wLmtmNQUTUtOE=
Subject key identifier: 3D:C5:53:77:EB:28:B8:7E:D4:4A:05:A7:5F:07:04:52:F4:0C:70:80
Authority key identifier: 68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
Certificate issuer: /CN=6816171b3f91b1d10b0445987f611428abf13e1a
Certificate serial: 019CE5FEE4ABBE5DCE224519C2C8C36AE727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
Manifest number: 034A
Signing time: Fri 13 Mar 2026 07:00:13 +0000
Manifest this update: Fri 13 Mar 2026 07:00:13 +0000
Manifest next update: Sat 14 Mar 2026 07:00:13 +0000
Files and hashes: 1: aBYXGz-RsdELBEWYf2EUKKvxPho.crl (hash: ZLZFrM4RsJS0NH3YzLH2Zq9qQ/IqI+FNKojQApTo1IY=)
2: cHu9ZbMPrKX8ZIjRFicqBMQg5dQ.roa (hash: K/TDSx0Je1BxRBjDUlA95sURJvSjJ3GjsGy0WuwiR/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:fe:e4:ab:be:5d:ce:22:45:19:c2:c8:c3:6a:e7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6816171b3f91b1d10b0445987f611428abf13e1a
Validity
Not Before: Mar 13 07:00:13 2026 GMT
Not After : Mar 14 07:00:13 2026 GMT
Subject: CN=3dc55377eb28b87ed44a05a75f070452f40c7080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:f3:2d:7d:cc:71:f1:b1:de:2d:d2:f0:53:
a8:5f:28:f7:99:c6:b8:e4:30:2b:b0:30:03:57:a1:
dc:41:56:35:c3:a6:9b:6d:c6:bf:55:9b:c1:55:9b:
03:5c:1d:75:19:87:d7:df:5e:30:b8:92:30:a8:ce:
1e:df:76:8f:3e:10:b2:a7:87:eb:45:18:51:93:d3:
37:29:22:5f:c9:a1:03:b4:05:45:e7:e6:9a:4a:3f:
fb:7f:cb:c3:93:e1:bf:a6:9f:5c:87:31:ba:f1:4f:
89:6c:53:a2:01:1e:0c:e3:6e:31:6f:ae:2b:2f:94:
d8:74:11:1c:69:54:50:db:b5:a5:38:59:62:83:87:
0b:80:5d:4d:44:69:0a:1e:79:84:7e:31:2a:f2:23:
1f:c3:5e:1b:30:59:7a:69:ff:1d:ca:de:c3:e0:ef:
85:11:6f:17:21:87:1e:b5:24:b1:2a:2c:b2:0d:a9:
7d:25:df:b2:32:a4:20:a8:15:fe:8f:d7:61:b6:3a:
06:1d:0d:10:68:bd:e0:09:ed:94:86:aa:dc:96:e4:
ed:10:d5:f2:a4:3c:da:3b:aa:e5:c1:bb:a0:09:ca:
0f:f6:28:5f:4c:45:1f:66:e0:64:0e:0c:c0:c4:86:
49:d0:fb:7f:91:06:57:a3:f9:91:f5:f2:a7:70:bd:
0f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C5:53:77:EB:28:B8:7E:D4:4A:05:A7:5F:07:04:52:F4:0C:70:80
X509v3 Authority Key Identifier:
keyid:68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:dc:6f:89:35:83:75:30:e9:b5:d3:d9:f4:36:c6:e6:bd:6f:
94:17:37:1b:38:94:58:9a:9f:9b:b9:34:7f:60:f3:5b:c5:57:
cf:57:96:1c:38:b8:10:a4:1b:00:d5:4a:1d:09:73:c1:67:ab:
5d:ec:73:6e:b1:44:17:af:2d:cd:b1:aa:3f:43:90:73:60:c2:
35:6f:57:9c:24:10:9e:59:69:ca:55:0f:2e:08:2a:6a:fe:5f:
66:7a:a5:f9:84:a2:f4:1f:03:cc:ac:f7:ce:6d:6c:08:76:93:
5d:18:08:12:2f:c3:fd:24:ce:f9:85:4d:43:a2:30:33:16:15:
a0:a7:3f:a4:fc:f6:66:77:bb:90:56:62:a5:df:b0:17:52:8a:
a0:b0:30:3a:2e:ca:b8:02:95:9f:22:74:0a:a6:8d:f8:d4:6c:
65:ff:5b:2b:5b:b7:2d:a5:2b:a0:1e:4d:b2:ab:9b:d4:8e:25:
ac:96:97:83:37:ab:91:68:dd:4a:67:46:f6:bd:ce:17:06:de:
2e:7c:2e:99:39:90:f2:1d:16:9e:3a:31:db:6c:16:13:88:12:
a0:80:7c:63:90:e4:77:09:2d:68:f0:36:79:d5:92:69:6d:f1:
01:ca:44:21:ac:5a:50:07:f2:e4:77:0e:4d:c4:d6:3b:56:3e:
54:1a:60:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:57:01 2026 by rpki-client