Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
File: aBnbgbSauhKxgQyzopnu5GMt1yA.mft (raw, json)
Hash identifier: k5ldikhsuEnaMmVkuTN7iZ9ph55wy+LY6dA3ugXfwDw=
Subject key identifier: E4:92:CE:FE:BA:27:2D:E3:BA:65:6E:EE:3D:B8:F9:7C:B5:5E:26:E3
Authority key identifier: 68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
Certificate issuer: /CN=6819db81b49aba12b1810cb3a299eee4632dd720
Certificate serial: 01A134EC45F2D01BE7C08F277851D7C3C3EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
Manifest number: 0670
Signing time: Tue 13 Oct 2026 11:01:01 +0000
Manifest this update: Tue 13 Oct 2026 11:01:01 +0000
Manifest next update: Wed 14 Oct 2026 11:01:01 +0000
Files and hashes: 1: PK2HVjD3GmdLB06ij0s7w3X0wCo.roa (hash: 1RKfa7PhpjR33QDEm1HWDfBtwC3Ch5Bq/qvovHpolJ0=)
2: aBnbgbSauhKxgQyzopnu5GMt1yA.crl (hash: 95CXnzr7eJ0kAQlpiaNYbxIWolm0Py+QN74jjtVY2jA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:ec:45:f2:d0:1b:e7:c0:8f:27:78:51:d7:c3:c3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6819db81b49aba12b1810cb3a299eee4632dd720
Validity
Not Before: Oct 13 11:01:01 2026 GMT
Not After : Oct 14 11:01:01 2026 GMT
Subject: CN=e492cefeba272de3ba656eee3db8f97cb55e26e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:65:1c:df:07:f0:f6:c8:ca:86:2d:eb:5e:de:
8b:b9:34:a4:70:07:b4:7b:59:01:45:45:9a:ed:91:
5d:7e:be:90:1e:da:42:ff:77:2f:84:20:09:d9:3a:
38:53:2e:aa:d4:6a:2b:61:20:6e:c4:32:12:82:f5:
61:33:f9:50:f8:7f:99:91:4e:47:22:04:1d:7c:97:
c8:e3:34:ed:68:aa:44:f9:49:6b:a8:e7:03:d3:8c:
0b:9f:ff:f2:96:34:d8:76:fe:86:b6:ab:a3:30:e0:
7a:0d:50:4f:39:b3:f7:46:c8:d4:9d:3d:f6:17:99:
3c:01:e9:09:39:dd:94:e1:63:eb:a8:3d:cc:aa:66:
97:56:b9:1a:23:1c:f1:bd:2f:fa:8d:1d:36:1e:8e:
09:2b:d5:af:dd:b7:30:6a:6f:92:8a:de:27:ca:f1:
83:30:06:20:f9:6b:07:fc:50:48:43:74:25:64:f0:
f8:91:e7:fc:3a:28:24:ee:1f:a5:aa:9a:23:aa:0b:
e6:b5:5f:87:c7:78:d6:45:64:e3:0e:cd:bf:97:d9:
b9:1b:19:6a:b9:02:08:0c:e6:00:bf:66:53:65:98:
6f:60:c3:26:a9:77:96:7e:a8:93:45:92:81:30:54:
53:10:5c:c9:7e:d7:68:bf:84:0f:e6:8b:de:b0:35:
64:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:92:CE:FE:BA:27:2D:E3:BA:65:6E:EE:3D:B8:F9:7C:B5:5E:26:E3
X509v3 Authority Key Identifier:
keyid:68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d9:3c:33:c8:5b:dd:0e:29:42:34:fa:36:0d:e2:b3:57:72:
7c:be:c5:c5:24:9d:aa:a1:6f:55:80:76:f2:96:d9:dd:a8:5f:
70:0a:03:7e:8c:d3:6b:f3:af:fa:e7:e7:04:ef:9b:fd:dc:96:
78:e1:ca:6f:85:13:60:07:c1:c8:de:c1:90:13:63:59:78:7c:
57:d2:3c:2f:b0:c9:a6:f7:ea:f0:31:0d:08:99:39:a8:cb:20:
bc:80:8b:d5:aa:95:65:ee:cc:11:eb:21:df:80:73:7f:9a:3e:
94:f2:1c:83:52:e7:bb:ae:c5:42:a4:2d:e0:fe:d1:4d:16:4c:
3f:c1:5d:2b:17:31:bf:18:c6:21:41:fe:85:fe:dd:75:50:9d:
67:05:b6:ba:96:ab:11:59:02:8e:0b:ad:03:50:3e:50:f0:03:
b2:05:9f:dc:d9:33:8c:c2:0d:4c:53:3e:a6:25:1e:af:35:5e:
4b:9c:f1:19:2a:0a:db:2b:d6:1d:8f:fd:f7:68:38:a1:2c:07:
fa:13:b0:3b:c9:c8:9d:9c:72:7e:3a:a1:d7:34:c0:1d:91:17:
f8:f7:57:bf:d4:86:ae:e7:28:b0:13:20:57:00:c2:bb:d5:f0:
38:8d:5f:8d:c9:27:0d:05:1e:fd:4a:62:e2:a5:b1:3a:79:56:
eb:7d:0c:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE07EXy0BvnwI8neFHXw8PuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MTlkYjgxYjQ5YWJhMTJiMTgxMGNiM2EyOTllZWU0NjMy
ZGQ3MjAwHhcNMjYxMDEzMTEwMTAxWhcNMjYxMDE0MTEwMTAxWjAzMTEwLwYDVQQD
EyhlNDkyY2VmZWJhMjcyZGUzYmE2NTZlZWUzZGI4Zjk3Y2I1NWUyNmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2Uc3wfw9sjKhi3rXt6LuTSkcAe0
e1kBRUWa7ZFdfr6QHtpC/3cvhCAJ2To4Uy6q1GorYSBuxDISgvVhM/lQ+H+ZkU5H
IgQdfJfI4zTtaKpE+UlrqOcD04wLn//yljTYdv6GtqujMOB6DVBPObP3RsjUnT32
F5k8AekJOd2U4WPrqD3MqmaXVrkaIxzxvS/6jR02Ho4JK9Wv3bcwam+Sit4nyvGD
MAYg+WsH/FBIQ3QlZPD4kef8Oigk7h+lqpojqgvmtV+Hx3jWRWTjDs2/l9m5Gxlq
uQIIDOYAv2ZTZZhvYMMmqXeWfqiTRZKBMFRTEFzJftdov4QP5ovesDVkDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSSzv66Jy3jumVu7j24+Xy1XibjMB8GA1UdIwQY
MBaAFGgZ24G0mroSsYEMs6KZ7uRjLdcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUJuYmdiU2F1aEt4Z1F5em9wbnU1R010MXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wZTc2NmEtNzJmZS00N2QyLWE0MzUt
OTAzNWIwODM2MjQzLzEvYUJuYmdiU2F1aEt4Z1F5em9wbnU1R010MXlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8wZTc2NmEtNzJmZS00N2QyLWE0MzUtOTAzNWIwODM2MjQz
LzEvYUJuYmdiU2F1aEt4Z1F5em9wbnU1R010MXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdk8M8hb
3Q4pQjT6Ng3is1dyfL7FxSSdqqFvVYB28pbZ3ahfcAoDfozTa/Ov+ufnBO+b/dyW
eOHKb4UTYAfByN7BkBNjWXh8V9I8L7DJpvfq8DENCJk5qMsgvICL1aqVZe7MEesh
34Bzf5o+lPIcg1Lnu67FQqQt4P7RTRZMP8FdKxcxvxjGIUH+hf7ddVCdZwW2upar
EVkCjgutA1A+UPADsgWf3NkzjMINTFM+piUerzVeS5zxGSoK2yvWHY/992g4oSwH
+hOwO8nInZxyfjqh1zTAHZEX+PdXv9SGrucosBMgVwDCu9XwOI1fjcknDQUe/Upi
4qWxOnlW630Mgw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 21:54:24 2026 by rpki-client