Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
File: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft (raw, json)
Hash identifier: m2Qrp08IjqPl369jT0q09lrPaWPxcoooiP7/iWR5+Og=
Subject key identifier: F8:17:28:A6:6B:76:12:EB:0E:70:3A:C3:FF:D3:26:F3:BA:6B:47:2D
Authority key identifier: 01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
Certificate issuer: /CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Certificate serial: 019D2C2A51B9E0F5D4B01EAD722545DCC1FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 22:01:04 +0000
Manifest this update: Thu 26 Mar 2026 22:01:04 +0000
Manifest next update: Fri 27 Mar 2026 22:01:04 +0000
Files and hashes: 1: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl (hash: 1DDDRNn3ywKOYD0A7+cKdNpxiEFfBRGeeXwptX0FTJI=)
2: lU3BCZBDNlCDk-8OFyyOit3pGFs.roa (hash: AWI11iVTlePwywxMYMGqGux5nESZadW+LVNcBQPGHWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:2a:51:b9:e0:f5:d4:b0:1e:ad:72:25:45:dc:c1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Validity
Not Before: Mar 26 22:01:04 2026 GMT
Not After : Mar 27 22:01:04 2026 GMT
Subject: CN=f81728a66b7612eb0e703ac3ffd326f3ba6b472d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:52:4e:2d:dc:e9:9f:57:a6:f6:7c:31:06:39:
b1:a6:3c:d4:94:ee:35:d0:06:42:29:40:6a:e6:8c:
d0:61:2f:47:1c:44:b5:6f:2d:66:38:02:ac:f2:d5:
e5:44:10:74:8e:2f:68:05:d9:fb:08:75:a6:9d:aa:
f5:91:ad:5a:80:fc:76:16:d9:02:09:0a:40:6f:d7:
58:cb:82:3a:81:d4:a4:dc:31:ce:37:af:02:f0:cf:
e0:0f:82:f4:14:eb:81:a7:0e:a6:66:25:cf:69:b4:
12:37:2a:2c:4a:7c:13:26:a0:2b:f7:38:24:e6:dc:
ca:ba:92:8b:93:af:a8:fe:8a:d4:89:58:67:87:d3:
d2:81:3c:12:24:94:66:58:bf:2d:75:ba:41:fa:2b:
ee:9b:a6:e9:df:b5:83:d6:ce:55:2e:b6:7a:d8:95:
c8:c9:6a:e1:12:f5:83:19:e1:db:09:5e:49:fa:ea:
4d:7f:28:34:b5:0b:d4:c7:92:d5:07:b7:2f:fa:7c:
40:c8:01:17:8d:4f:eb:cc:62:e3:d8:67:cf:2b:ef:
c3:cb:51:c4:f8:5d:9c:c9:c6:7d:cc:8b:1b:9b:0f:
0c:b7:4d:dc:4e:4c:e8:71:65:04:75:54:ae:a9:ed:
bd:83:22:43:1e:01:3b:65:5f:7a:25:a8:a5:4b:5d:
22:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:17:28:A6:6B:76:12:EB:0E:70:3A:C3:FF:D3:26:F3:BA:6B:47:2D
X509v3 Authority Key Identifier:
keyid:01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:af:11:28:f2:6b:ed:b5:47:83:bd:0a:a6:2e:5b:f6:c2:a7:
7c:5d:f5:fc:c8:9c:6b:1b:bc:ed:1e:af:44:76:c9:1d:d7:8d:
6e:2a:b4:57:48:e6:71:b8:62:d6:af:5a:93:f7:e4:03:e1:79:
70:61:9e:3e:43:83:2d:ab:b4:47:94:a4:4a:bb:7f:d8:0d:d1:
51:ec:24:da:22:a2:32:37:30:3b:c2:27:84:9e:80:e5:43:88:
c2:ae:f9:c9:04:53:19:7e:32:e7:6b:a6:e0:34:f9:8f:04:48:
91:4e:44:d6:3f:cc:8b:4c:9c:e9:ad:aa:f7:c8:a6:74:63:d2:
9c:ff:81:4e:b1:72:26:14:c1:cb:2e:ad:d5:19:55:25:ff:e5:
66:c9:b3:db:dd:74:d1:94:e4:df:63:f5:99:62:1f:40:fa:e7:
2c:86:72:66:9f:ab:f4:b8:84:1a:dc:d6:e9:6d:3f:92:e9:42:
6c:da:3b:04:11:74:ed:e4:ab:18:e2:b6:0a:2f:d5:ad:8c:ea:
cd:15:26:96:a0:bd:da:06:4f:01:a6:98:c3:45:ba:60:bd:ff:
64:e1:d8:cb:a9:d3:fb:c4:61:66:63:1b:eb:4d:e8:e0:b4:47:
59:cc:8d:eb:90:e6:59:be:e4:21:2b:94:29:df:21:39:ce:85:
4b:6a:35:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:14:17 2026 by rpki-client