Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/abwCA1BF6DKg4eWs-KHyvuY05rw.mft
File: abwCA1BF6DKg4eWs-KHyvuY05rw.mft (raw, json)
Hash identifier: Mm7o6f9yTESf0JsI0u0V7swrzv/ii4kDIBN/HYp+mgE=
Subject key identifier: AA:1A:1C:32:F1:2B:3D:37:54:22:81:D2:AF:F7:D2:9A:9A:60:A5:E2
Authority key identifier: 69:BC:02:03:50:45:E8:32:A0:E1:E5:AC:F8:A1:F2:BE:E6:34:E6:BC
Certificate issuer: /CN=69bc02035045e832a0e1e5acf8a1f2bee634e6bc
Certificate serial: 01A0DBA92B1B67A60A23091EDF3D8E4D7817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abwCA1BF6DKg4eWs-KHyvuY05rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/abwCA1BF6DKg4eWs-KHyvuY05rw.mft
Manifest number: 48
Signing time: Sat 26 Sep 2026 03:01:31 +0000
Manifest this update: Sat 26 Sep 2026 03:01:31 +0000
Manifest next update: Sun 27 Sep 2026 03:01:31 +0000
Files and hashes: 1: Lcm22_TPGNqwJZqkJEzfcC_rvNM.roa (hash: TjLCtgcxkG/42ch4XlnmQy1IDgmAjwt3AY74YSi27ws=)
2: abwCA1BF6DKg4eWs-KHyvuY05rw.crl (hash: XEgEGmvNg1Flyq6/foZEzQe2mWmNONBvvhcUHbB700Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/abwCA1BF6DKg4eWs-KHyvuY05rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/abwCA1BF6DKg4eWs-KHyvuY05rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/abwCA1BF6DKg4eWs-KHyvuY05rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:2b:1b:67:a6:0a:23:09:1e:df:3d:8e:4d:78:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69bc02035045e832a0e1e5acf8a1f2bee634e6bc
Validity
Not Before: Sep 26 03:01:31 2026 GMT
Not After : Sep 27 03:01:31 2026 GMT
Subject: CN=aa1a1c32f12b3d37542281d2aff7d29a9a60a5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:95:8b:ad:62:eb:77:1d:c0:79:d7:23:a4:a9:
e5:85:02:37:75:dc:3f:ec:77:4e:a1:e2:f8:81:cb:
c8:a9:11:c4:45:a6:fb:b2:02:bc:f7:52:e7:d5:f4:
dd:3d:98:15:76:6f:e1:71:f5:ba:0e:1e:90:a8:5e:
6c:b9:51:89:42:93:f1:a7:a0:b8:8b:af:d4:30:8d:
43:6a:57:6a:81:75:3f:43:5d:bf:6b:4f:93:e8:76:
a2:bd:67:62:73:75:9f:87:fb:01:f8:82:cc:7b:ce:
1f:3d:17:ef:ab:dc:5d:73:0a:b5:6a:81:59:fa:eb:
4d:df:65:c3:6c:c1:4c:84:32:e7:91:8f:92:0f:fe:
c9:56:6e:1f:1f:9c:62:b9:0c:e6:09:52:b6:1b:12:
2d:dc:45:e4:e4:fa:fa:7f:c9:fd:92:82:0f:47:87:
1e:91:64:0a:3b:08:48:20:cb:c7:71:d4:6c:2e:54:
b2:05:6e:78:35:71:bc:44:c0:72:7e:33:56:40:41:
ee:84:30:42:04:ce:96:2f:5d:9d:db:a8:6b:b9:7e:
8d:c5:4e:60:78:4f:f4:b6:f2:03:8f:a4:90:08:86:
36:7b:58:77:95:db:fc:97:56:8d:42:85:7a:b5:c5:
eb:04:fd:90:79:0f:64:54:7f:44:6d:fa:b8:4d:e8:
69:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1A:1C:32:F1:2B:3D:37:54:22:81:D2:AF:F7:D2:9A:9A:60:A5:E2
X509v3 Authority Key Identifier:
keyid:69:BC:02:03:50:45:E8:32:A0:E1:E5:AC:F8:A1:F2:BE:E6:34:E6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abwCA1BF6DKg4eWs-KHyvuY05rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/abwCA1BF6DKg4eWs-KHyvuY05rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6e2f81-c03b-4a2e-80fc-f3c7bc854194/1/abwCA1BF6DKg4eWs-KHyvuY05rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:af:ec:a0:15:7b:6b:a9:80:54:9e:00:c4:a6:bf:03:d5:27:
46:8c:27:8f:25:23:30:7c:34:9d:fe:83:6e:be:d9:c9:b9:9d:
48:92:6a:9b:18:5f:3a:4c:3d:e6:8a:3b:09:db:28:da:84:df:
e9:50:33:0a:26:ff:e9:95:12:ba:4f:01:b4:3d:05:33:ef:95:
d4:d4:e0:e7:26:01:3c:0a:47:1a:8c:2a:fa:ee:1a:15:ed:11:
90:8e:63:77:dd:6b:df:5c:06:6e:2d:a9:1c:a0:f3:cb:32:86:
ee:ed:bc:a4:aa:6f:98:71:cf:3a:f9:8b:4b:a7:c2:8e:82:a4:
9c:6b:1a:74:ed:fe:5b:7e:77:0b:6c:75:0d:c5:c3:97:7d:4d:
b1:91:0a:eb:9f:a7:50:e0:60:5b:62:c6:8a:36:9a:fa:49:e8:
3c:6f:f7:33:68:ac:2d:67:2d:60:ac:ce:50:b6:87:d2:fa:24:
d2:1a:85:61:b1:98:e2:b8:bd:1d:8a:6c:6e:83:65:cc:cd:c7:
50:dc:74:8c:fb:07:c5:e0:f3:41:48:f2:cb:14:47:41:70:0c:
84:30:fb:3f:fc:32:64:50:c3:b6:aa:dd:1d:a7:52:c5:2b:2d:
55:e2:32:9e:7b:df:ae:7e:69:2c:59:e5:f0:78:f5:b0:60:2c:
ca:e6:1f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:02:21 2026 by rpki-client