Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
File: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft (raw, json)
Hash identifier: 9GEqpQSgpSDkFvVwHdxQKYQ6iSRMEozVmzf4ujrOJ+A=
Subject key identifier: D2:29:EC:85:67:A7:40:E4:F1:C3:EE:40:FB:22:92:ED:23:A6:45:8F
Authority key identifier: 01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
Certificate issuer: /CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Certificate serial: 01A127D5F3B75763D391DF7123397E23DAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
Manifest number: 1A9C
Signing time: Sat 10 Oct 2026 22:01:35 +0000
Manifest this update: Sat 10 Oct 2026 22:01:35 +0000
Manifest next update: Sun 11 Oct 2026 22:01:35 +0000
Files and hashes: 1: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl (hash: hz0y8Udo9sG7o03S0fvmBzvjkF/WbPhUtKY4e/tk3Fo=)
2: lU3BCZBDNlCDk-8OFyyOit3pGFs.roa (hash: AWI11iVTlePwywxMYMGqGux5nESZadW+LVNcBQPGHWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:d5:f3:b7:57:63:d3:91:df:71:23:39:7e:23:da:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Validity
Not Before: Oct 10 22:01:35 2026 GMT
Not After : Oct 11 22:01:35 2026 GMT
Subject: CN=d229ec8567a740e4f1c3ee40fb2292ed23a6458f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:09:74:a5:e0:96:b2:52:d4:0a:ac:9c:91:a3:
93:cd:53:4f:43:35:84:27:67:89:f4:d4:51:c8:cc:
72:1f:10:2c:8d:8f:21:ab:e3:ad:7c:46:65:88:99:
5c:da:71:74:a1:59:3c:4c:59:a2:0e:c2:6c:52:76:
84:e3:06:cf:35:f6:bd:dd:bb:17:8a:8c:dc:e9:af:
48:66:2b:85:3e:e0:eb:7b:e7:9d:e4:20:b8:06:e9:
45:8d:7d:af:60:06:ba:d0:d1:03:ff:40:b4:11:f9:
93:24:2e:a0:da:ed:22:12:90:a2:21:4d:16:8a:6f:
94:10:93:9e:ca:59:c9:b1:86:e0:ac:8f:a4:cd:e5:
f4:b7:ae:c5:24:b4:ea:f1:9b:c5:38:34:e5:d9:15:
eb:52:03:9c:63:a0:44:f6:64:9e:f6:f4:13:cc:5e:
29:d5:ff:2c:60:12:c1:0e:b9:bf:cd:cc:64:ae:2b:
1d:7b:b1:32:f7:0b:56:9a:4f:45:97:0f:1b:db:be:
7e:6a:6d:b6:81:8a:df:59:cc:8f:00:6f:87:10:d4:
96:d7:34:e1:59:10:0f:22:8e:3b:d7:13:a3:9e:20:
13:8a:54:4c:00:c4:5a:95:be:4d:64:34:99:d5:4e:
13:a8:1e:8f:ee:ad:c3:84:ff:f0:fe:dd:79:80:00:
85:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:29:EC:85:67:A7:40:E4:F1:C3:EE:40:FB:22:92:ED:23:A6:45:8F
X509v3 Authority Key Identifier:
keyid:01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:30:88:94:ae:e4:84:8f:36:d8:0a:86:53:4d:f2:52:c5:7e:
73:fb:e2:14:81:8a:c7:9e:55:98:da:fb:fe:56:69:b6:f2:f5:
b8:08:2b:ae:b7:be:cc:ed:71:50:17:0f:5e:e2:07:81:1d:df:
d6:1f:65:d2:49:0e:96:59:8c:cc:d4:04:c5:86:83:c2:f6:1a:
e7:0c:73:35:02:65:f1:3b:49:dc:82:95:de:e4:f4:d2:87:90:
db:21:40:15:86:bb:f8:c9:60:29:19:a2:10:2b:8b:f0:7c:af:
39:03:08:54:93:c6:bd:87:ec:bc:b9:06:e6:e7:a1:ae:9d:4d:
05:e2:58:1c:26:8e:69:ad:a6:ad:dc:5c:a2:05:c3:fe:fa:f6:
17:e7:1f:77:f3:8f:6d:ee:3b:57:aa:52:7b:34:13:55:e4:f5:
af:ae:51:74:a7:7e:40:b5:80:1a:15:60:6a:9f:60:53:1d:3f:
f2:a5:bd:8b:b8:e9:fd:4f:19:5b:6b:83:86:5b:34:ac:1b:4b:
77:34:85:f3:69:6f:70:e1:56:8c:b6:d1:14:1b:c4:c2:ff:f5:
24:ed:da:62:8c:3e:ed:66:20:1c:73:d7:e3:32:fd:49:54:a0:
b4:7f:d9:bd:79:72:0a:3e:63:a1:ba:b0:ee:68:d4:a9:41:7c:
bf:4b:87:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:25:16 2026 by rpki-client