Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
File: AbP6KriQG0FeEIOIcsY9nwzhNq0.mft (raw, json)
Hash identifier: BpbYF+1TXW3h4C9ihjcBxdWrz39Odj9cmvCWATN+GdQ=
Subject key identifier: F6:57:7C:5A:5D:0C:1F:93:EE:7A:D7:5B:4D:C6:B0:B3:A7:E7:E0:A1
Authority key identifier: 01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
Certificate issuer: /CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Certificate serial: 019D2A04E4DA72AC57FB1452E618A1FCFC3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 12:00:56 +0000
Manifest this update: Thu 26 Mar 2026 12:00:56 +0000
Manifest next update: Fri 27 Mar 2026 12:00:56 +0000
Files and hashes: 1: AbP6KriQG0FeEIOIcsY9nwzhNq0.crl (hash: CsFl7vRAFvmqvO5TZ14s2MIV4qSVW8I4YZ6/Ew4AEWI=)
2: ScMeUXtgJA8SRus0dm3wNSK0EOE.roa (hash: cMjCrYF2rReOwGbNBwruLGRrluqmFIhueIspSRNu/dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:e4:da:72:ac:57:fb:14:52:e6:18:a1:fc:fc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Validity
Not Before: Mar 26 12:00:56 2026 GMT
Not After : Mar 27 12:00:56 2026 GMT
Subject: CN=f6577c5a5d0c1f93ee7ad75b4dc6b0b3a7e7e0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:92:4b:ff:99:92:d5:67:55:6a:e2:e7:44:49:
da:bb:6e:6d:af:78:54:6b:15:11:d6:ff:23:f4:26:
f2:2d:74:cc:ca:b1:45:1b:90:c2:c2:78:72:52:c4:
ed:25:73:9d:a1:c5:2b:de:ad:5d:16:bd:c7:fe:aa:
09:0c:f5:6b:02:79:7c:90:78:f0:12:7e:3a:90:86:
06:37:bb:ad:ce:ab:ca:59:42:99:bf:48:41:e0:6f:
10:d8:ef:51:e0:7f:e7:f8:82:cb:eb:4a:c7:ae:e9:
88:5c:ca:3e:27:95:a9:42:01:f6:44:61:00:26:df:
60:c6:6a:33:6b:6b:62:dc:6d:24:86:65:6b:d5:c5:
ef:b6:16:03:87:a7:f2:df:1f:7f:a4:b6:c5:d1:de:
4d:d6:12:c9:0f:76:db:e5:50:1e:fd:22:8d:06:44:
9d:a5:16:d9:3d:62:31:08:a6:53:da:f6:fc:3e:94:
cf:74:37:4c:8b:64:33:a8:50:91:eb:8d:b8:de:1d:
8a:8d:9d:57:f8:97:c2:a5:f0:d6:2d:13:99:c6:29:
96:51:3d:de:2e:80:4f:92:0f:83:4d:1a:9f:94:3f:
ae:0a:30:75:63:fe:52:0b:16:d0:c7:dd:85:5c:05:
30:0d:ec:3c:71:fa:87:89:1c:1f:e9:a1:45:3a:18:
a5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:57:7C:5A:5D:0C:1F:93:EE:7A:D7:5B:4D:C6:B0:B3:A7:E7:E0:A1
X509v3 Authority Key Identifier:
keyid:01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c8:27:4f:13:8c:23:0f:8f:58:d9:b2:c9:66:3b:df:7b:4e:
59:67:15:10:ca:48:93:c6:dd:e6:14:e4:09:07:ed:b0:bd:f6:
22:27:9b:fe:9a:b9:7a:c0:99:29:eb:08:58:cb:60:8e:27:b1:
29:e0:06:79:4e:9e:ba:00:26:d9:86:e2:79:c0:78:98:49:1c:
45:c4:9a:71:2b:72:d2:7c:bb:c5:9f:9d:93:9d:83:bf:2a:f7:
bb:19:7f:1d:76:23:3d:6e:ee:ae:0f:5c:03:04:fd:08:9a:a1:
f7:3e:3e:f9:df:82:76:a9:8c:50:92:de:18:a3:b9:0e:29:db:
f6:2f:f9:48:c6:d4:dc:e4:d4:0b:f9:b5:68:26:29:d3:31:2c:
ca:bc:ae:a6:19:ae:e2:f5:a7:6a:03:9d:16:27:2b:11:72:2d:
0f:a7:01:3e:db:13:33:43:3e:c6:ad:ea:a3:ad:1b:6f:03:68:
a7:98:2a:94:3f:6c:0b:47:8e:1c:a9:42:e0:d7:9b:d3:54:41:
47:1e:26:f4:1c:3d:48:29:20:a2:43:16:be:8c:53:b6:8d:13:
0c:dc:b5:ac:e7:9c:d1:62:f8:99:88:d6:8d:00:4e:60:89:47:
1b:c4:85:2e:1e:47:b8:93:43:ea:34:35:a5:5c:7d:57:6c:c6:
58:29:a1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:06 2026 by rpki-client