Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
File: aBnbgbSauhKxgQyzopnu5GMt1yA.mft (raw, json)
Hash identifier: uIZ5C1L6opGDbxzRukfUGlkAYJUDO3QCxN/sQpB11vw=
Subject key identifier: E5:3D:95:03:67:BD:B9:ED:AF:20:D3:42:3F:55:BA:5B:EC:1C:17:88
Authority key identifier: 68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
Certificate issuer: /CN=6819db81b49aba12b1810cb3a299eee4632dd720
Certificate serial: 019D29CEC906FA4F0D6BF2A66C48EFFC1FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
Manifest number: 0458
Signing time: Thu 26 Mar 2026 11:01:50 +0000
Manifest this update: Thu 26 Mar 2026 11:01:50 +0000
Manifest next update: Fri 27 Mar 2026 11:01:50 +0000
Files and hashes: 1: PK2HVjD3GmdLB06ij0s7w3X0wCo.roa (hash: 1RKfa7PhpjR33QDEm1HWDfBtwC3Ch5Bq/qvovHpolJ0=)
2: aBnbgbSauhKxgQyzopnu5GMt1yA.crl (hash: KD5yoLZQzJN7r2SaJF4Pi4Ozl97BtaDtqCSLvmEFbk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:c9:06:fa:4f:0d:6b:f2:a6:6c:48:ef:fc:1f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6819db81b49aba12b1810cb3a299eee4632dd720
Validity
Not Before: Mar 26 11:01:50 2026 GMT
Not After : Mar 27 11:01:50 2026 GMT
Subject: CN=e53d950367bdb9edaf20d3423f55ba5bec1c1788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:aa:cf:88:ea:e8:98:0f:17:74:1a:76:11:6d:
8b:e3:6c:4f:db:7e:c8:77:49:50:bc:0c:c0:db:a3:
83:ae:ae:0d:69:f0:08:a1:28:34:d3:ec:fb:2a:e6:
4c:86:4d:e4:81:26:6a:3d:73:e7:32:4e:aa:68:d2:
46:05:f0:19:f3:6f:30:a1:16:dd:57:ed:aa:f7:1c:
fe:5b:35:78:b2:d6:10:0a:84:35:dd:a7:c5:c6:4a:
2b:45:ce:71:63:17:6c:a4:2a:db:0b:d2:b6:a2:eb:
ad:31:86:3b:8f:51:52:55:be:9c:57:bb:5c:0d:62:
77:9e:72:49:3c:02:08:c9:5c:7f:04:84:fb:50:93:
39:11:4f:f3:3f:35:7f:d2:f6:d4:a5:57:62:ac:47:
6b:45:48:dd:3c:c0:17:d8:e2:2b:c3:50:90:cc:42:
61:58:8e:89:b4:a0:e3:28:ff:bc:4b:61:bd:41:2a:
af:03:3d:95:82:a7:64:4d:9e:5f:f3:57:fc:50:91:
0a:bb:c0:17:a0:df:5e:79:a0:dd:e1:02:58:dc:f6:
53:00:b3:7a:1a:2e:fb:42:2f:29:f6:ae:d5:48:50:
b8:1c:34:56:3e:81:6e:b8:6e:37:42:99:9f:2d:cc:
38:15:fe:0e:26:d4:a6:ce:1b:9d:76:02:0d:8f:c8:
70:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3D:95:03:67:BD:B9:ED:AF:20:D3:42:3F:55:BA:5B:EC:1C:17:88
X509v3 Authority Key Identifier:
keyid:68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:7f:11:c4:43:3e:4e:86:7f:ca:1d:20:c6:59:b7:57:d7:55:
f3:e3:1b:34:85:8e:d0:62:60:2f:95:5f:19:20:c9:2f:9e:2b:
7a:08:33:ae:7e:3b:56:3d:41:7b:e3:3a:e3:0e:35:54:28:be:
76:8d:b9:94:cb:de:14:67:b2:ed:d8:64:45:b8:64:8e:e4:fd:
a4:97:e6:e9:4d:b3:42:ca:d5:20:43:dd:9e:6d:94:cf:86:49:
ba:3e:eb:9f:18:11:ac:65:d1:54:54:c3:2d:80:a4:c2:48:36:
d3:1e:3a:22:37:a0:76:7f:0d:b0:f4:a3:ac:86:c0:0d:b0:e5:
51:c0:60:2b:a2:e8:97:0d:91:5e:62:34:4d:59:85:83:75:08:
65:d1:b7:1e:7b:86:13:ce:a3:bf:33:85:54:f6:ff:a2:62:c3:
9e:f2:80:35:ea:87:26:9c:b6:5e:46:5e:6f:ef:51:12:a6:f7:
18:4e:de:03:4f:c6:64:f9:0a:b1:16:1b:28:5c:9f:13:62:36:
8f:e7:ed:65:5f:6e:df:d7:bb:6d:86:e3:17:d7:0e:be:fe:f8:
e8:4d:1f:57:30:a4:b1:78:dc:b8:aa:16:e8:f4:fc:66:8d:5d:
30:34:63:ed:53:5d:59:78:54:31:d7:32:b4:8e:80:43:5e:54:
c5:f2:b3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:53:06 2026 by rpki-client