Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
File: AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft (raw, json)
Hash identifier: +JqvxhQKG/msMk6DTBzHZBuGn8qBur3a+PHaPNFepg0=
Subject key identifier: F5:E5:B5:FC:FA:EB:F4:AE:19:11:1C:59:CD:D8:DD:79:B8:AD:B8:B0
Authority key identifier: 01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
Certificate issuer: /CN=01bae509df7ec524d4f750ff809274ab00649322
Certificate serial: 019D27A8AEEDD841F64BE9DB52144A38D96A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
Manifest number: 12FA
Signing time: Thu 26 Mar 2026 01:00:59 +0000
Manifest this update: Thu 26 Mar 2026 01:00:59 +0000
Manifest next update: Fri 27 Mar 2026 01:00:59 +0000
Files and hashes: 1: AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl (hash: NHl2cxvq3YRqZiMu4bpfMp4cmjZJAPI7nS7fXtQn2WE=)
2: Tovu6XYvf5FhR28kdlA-7wKtBkE.roa (hash: mC271DkpvmHL0CjopsqGxIT+uNy91sh6WEkjNwzeRxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:ae:ed:d8:41:f6:4b:e9:db:52:14:4a:38:d9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bae509df7ec524d4f750ff809274ab00649322
Validity
Not Before: Mar 26 01:00:59 2026 GMT
Not After : Mar 27 01:00:59 2026 GMT
Subject: CN=f5e5b5fcfaebf4ae19111c59cdd8dd79b8adb8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:09:24:73:a1:b2:8b:d0:5e:84:1c:39:ba:ac:
47:22:92:13:0e:fb:f4:55:1d:0f:1a:a9:6a:3b:65:
d1:1e:02:5b:d1:b3:6f:a4:94:ee:0e:f9:64:61:31:
74:7e:76:f2:23:68:f5:be:84:bb:e6:28:b8:6c:fd:
b6:e5:00:10:2b:b9:84:5e:70:53:dc:c6:7a:97:87:
ac:f9:74:95:86:6b:e8:55:97:5f:ec:00:ff:f4:b7:
6e:10:76:ef:82:a6:50:29:79:a7:bc:c2:ca:99:a7:
42:b2:6f:e8:00:dc:9c:7e:33:22:88:b4:4e:17:21:
54:dd:32:04:9c:52:b9:25:99:f2:ff:08:da:52:2b:
d7:ab:dc:26:f5:e2:9c:8a:7f:e5:10:48:17:a4:83:
f1:23:7c:e1:34:58:8d:a1:f4:ee:17:c8:eb:dd:ad:
34:a6:23:54:7d:26:03:18:8e:05:a3:c5:c1:b2:10:
b7:81:8f:0b:db:52:e4:62:40:43:16:ee:6e:b4:b2:
ab:34:b9:b8:72:ea:52:7c:4c:03:23:94:28:44:19:
f5:67:df:d8:9a:8f:19:b5:e7:46:5b:74:05:8c:d7:
22:53:4d:3b:eb:f4:34:a7:7d:44:fb:6d:f0:14:dc:
98:5d:de:db:c9:85:bc:3a:5b:45:43:f3:74:c5:ef:
86:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E5:B5:FC:FA:EB:F4:AE:19:11:1C:59:CD:D8:DD:79:B8:AD:B8:B0
X509v3 Authority Key Identifier:
keyid:01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5b:bf:a1:77:de:5a:6a:42:80:18:37:88:04:61:62:2d:57:
37:09:b5:f8:55:69:8a:c9:4f:35:6d:a0:08:fd:63:d9:38:00:
22:35:34:c0:7b:39:0d:c8:05:8e:6d:aa:7f:ee:66:4b:0d:2d:
76:c8:78:e0:34:76:57:58:bb:7b:af:33:5c:23:9d:e0:7e:9e:
2c:f1:9f:9f:2f:da:e6:fa:b1:b3:e3:97:35:5f:63:42:0d:63:
61:f3:f8:21:aa:88:7d:d7:8e:42:30:f8:dd:5a:cc:90:eb:c5:
3f:de:f9:74:1d:48:1a:e2:37:f7:da:86:2c:80:06:6c:e0:34:
ba:d4:47:0b:9e:4e:d3:09:10:b5:4b:d0:a9:00:f0:d5:80:b8:
a3:11:0d:f2:2d:e9:a7:83:af:fa:11:d5:86:69:3b:fa:7b:00:
8e:94:b6:92:b3:cb:d0:dc:a9:95:ff:18:19:90:7d:ae:97:12:
f9:ca:31:0f:06:4c:c5:8b:0b:da:45:ce:c0:a5:35:ea:af:c8:
99:19:fd:80:4b:bf:4a:1c:03:09:49:d9:12:15:eb:fc:0b:7a:
f6:fd:4f:dd:8c:e4:8c:10:39:80:7b:9b:4a:89:b7:f3:dc:b4:
e0:16:6c:1d:88:30:13:20:78:66:37:cd:bf:03:0e:2b:70:76:
26:fc:80:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:02 2026 by rpki-client