Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/768c81-1a84-4a3f-89b8-9f44913926ab/1/qABrMI2UNkxB70cIgEr9utcazzI.mft
File: qABrMI2UNkxB70cIgEr9utcazzI.mft (raw, json)
Hash identifier: WT/Tnrdd3cvMpISb465YzUnldt6HFuLbZvi0rWq3XEY=
Subject key identifier: 28:38:66:A9:1E:51:A4:8D:4F:F2:CA:43:60:AC:E7:1D:F4:35:89:FC
Authority key identifier: A8:00:6B:30:8D:94:36:4C:41:EF:47:08:80:4A:FD:BA:D7:1A:CF:32
Certificate issuer: /CN=a8006b308d94364c41ef4708804afdbad71acf32
Certificate serial: 01A0D4CC0683104670D5C1F0E9B11A753378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qABrMI2UNkxB70cIgEr9utcazzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/768c81-1a84-4a3f-89b8-9f44913926ab/1/qABrMI2UNkxB70cIgEr9utcazzI.mft
Manifest number: 0A
Signing time: Thu 24 Sep 2026 19:02:15 +0000
Manifest this update: Thu 24 Sep 2026 19:02:15 +0000
Manifest next update: Fri 25 Sep 2026 19:02:15 +0000
Files and hashes: 1: 1-MYXb6Dn8l9Sni47o7eWRZtN3fo.roa (hash: zMSUZdzn/nIFjJVu5UqN5nxZSdS9vq4wDRYE1tXZj7E=)
2: qABrMI2UNkxB70cIgEr9utcazzI.crl (hash: WbQjw1XiK8pkWPdxdvPvkO+Sk6tOSrBGlYfrLWetStQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/768c81-1a84-4a3f-89b8-9f44913926ab/1/qABrMI2UNkxB70cIgEr9utcazzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/768c81-1a84-4a3f-89b8-9f44913926ab/1/qABrMI2UNkxB70cIgEr9utcazzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qABrMI2UNkxB70cIgEr9utcazzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cc:06:83:10:46:70:d5:c1:f0:e9:b1:1a:75:33:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8006b308d94364c41ef4708804afdbad71acf32
Validity
Not Before: Sep 24 19:02:15 2026 GMT
Not After : Sep 25 19:02:15 2026 GMT
Subject: CN=283866a91e51a48d4ff2ca4360ace71df43589fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:3b:23:fb:b9:71:d9:ac:e0:94:90:cc:a8:
1c:60:ad:f2:7a:14:02:32:e8:00:53:a5:47:af:fe:
44:8b:b0:57:2d:ec:ae:76:42:6e:e7:f9:23:07:22:
ca:e6:dd:8c:08:8a:d9:af:90:99:ab:82:88:d8:45:
f6:7e:24:5e:bf:76:9f:39:af:63:fd:a7:7f:72:1a:
6d:ad:02:b8:fc:42:a7:7d:b6:fa:31:5d:32:00:8b:
db:bc:5a:fd:79:83:46:0e:6c:e4:ab:6c:92:c9:4a:
21:85:fe:aa:e6:08:7e:13:f5:01:b8:fa:ac:4b:a3:
2a:55:1c:4f:c0:1d:20:26:28:f5:6e:ae:e8:7e:52:
74:ad:a4:69:4d:04:e5:72:6e:56:10:c0:89:6b:1b:
eb:c5:92:49:43:2f:95:99:31:77:05:64:a8:9f:f2:
c9:97:b4:ed:3e:9c:cd:95:2e:f3:bb:21:f7:a7:b3:
58:dc:ce:57:5b:4a:1f:9c:10:42:f7:77:f3:78:54:
51:a8:4d:1f:2d:5a:78:cc:a8:e9:3a:11:29:8a:df:
6b:ab:b3:2a:da:77:19:45:85:df:84:37:70:c9:b0:
1a:c4:de:8c:74:a1:57:9b:e2:a9:f0:c5:00:4e:51:
6c:69:3a:60:71:17:e8:aa:be:6e:14:1f:89:07:f8:
6c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:38:66:A9:1E:51:A4:8D:4F:F2:CA:43:60:AC:E7:1D:F4:35:89:FC
X509v3 Authority Key Identifier:
keyid:A8:00:6B:30:8D:94:36:4C:41:EF:47:08:80:4A:FD:BA:D7:1A:CF:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qABrMI2UNkxB70cIgEr9utcazzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/768c81-1a84-4a3f-89b8-9f44913926ab/1/qABrMI2UNkxB70cIgEr9utcazzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/768c81-1a84-4a3f-89b8-9f44913926ab/1/qABrMI2UNkxB70cIgEr9utcazzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3a:55:4b:24:3b:d2:5d:99:99:85:d7:b1:27:42:b0:80:f9:
df:f8:5c:34:bb:00:b0:87:9d:26:ab:14:34:07:89:10:34:ba:
fa:40:c8:57:b0:e1:27:ea:d1:a7:bc:c5:7b:f9:aa:66:23:d2:
8b:35:db:87:5b:94:c7:8e:14:e9:43:1d:63:b7:ba:97:54:89:
71:6a:ff:a2:6b:d8:d8:3f:ac:53:b9:f3:3d:fa:9d:14:20:2a:
86:49:be:d2:38:b7:22:6f:b1:bd:9d:a5:bb:2f:05:bb:0e:cb:
ee:de:c4:af:c8:53:d5:a7:57:83:94:17:82:b4:cc:9a:bc:d8:
c1:a7:e0:b4:fd:f1:93:1f:4f:c2:1f:89:0d:a1:48:f6:23:a8:
06:87:09:34:48:ed:67:f7:9b:08:18:83:ab:a5:a0:ac:fe:b5:
31:40:55:df:32:2f:77:4a:27:6a:ab:e7:86:8e:44:94:ea:f3:
a4:3b:a0:a6:0a:99:26:43:5d:ee:3a:96:64:00:71:98:35:0a:
7c:ad:90:a8:2a:ea:c2:e8:a6:61:92:2c:c5:1a:24:10:2b:9c:
e5:9e:ca:85:7f:43:0a:33:5a:07:45:88:93:80:96:66:b2:13:
6d:f4:90:b0:41:14:6e:08:30:77:d8:cb:83:4a:1a:c7:21:18:
55:ef:d8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:21:34 2026 by rpki-client