Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
File: abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json)
Hash identifier: 0gcaaV6TgTELUYj0mQVa+z/+nOqZRlwyifPG/QndobM=
Subject key identifier: BB:F6:37:7E:03:6C:35:31:99:3E:58:C5:6E:09:36:57:03:B5:29:C4
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 019F9624ED57D6A1767AED2ECB8313930212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
Manifest number: 0E04
Signing time: Fri 24 Jul 2026 22:00:29 +0000
Manifest this update: Fri 24 Jul 2026 22:00:29 +0000
Manifest next update: Sat 25 Jul 2026 22:00:29 +0000
Files and hashes: 1: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: TuB1wHixlPZsEUzpiRrkiIyfX28UXyTopfyzWc4snaI=)
2: epJ5NtfvH1g3tuK4xd9nscSiEoA.roa (hash: niW0UBzEk+eWx8n4afLHbWheyJix/ATlxCY23FXANN8=)
3: hpFPFF4swm17BfKeLPrET14DerI.roa (hash: /w3PMxP9jyIQ4EgZwsRkLDa6435IO8C6U7QCr8ty+WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:24:ed:57:d6:a1:76:7a:ed:2e:cb:83:13:93:02:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: Jul 24 22:00:29 2026 GMT
Not After : Jul 25 22:00:29 2026 GMT
Subject: CN=bbf6377e036c3531993e58c56e09365703b529c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5f:b7:f6:0d:95:f7:5e:11:f7:d4:33:51:64:
52:bc:62:ee:49:3a:ea:c7:b6:36:e3:80:86:b3:10:
f6:b2:2a:af:89:91:a3:a2:56:d8:c7:09:2c:29:12:
33:90:dd:a9:5c:7e:ed:98:b2:1c:ce:d4:c3:02:3f:
33:4e:b6:ca:a8:93:13:fc:31:a7:77:c5:ba:1a:b7:
7a:c1:e1:1e:7e:86:5f:70:5f:75:b6:92:ac:07:20:
b1:ea:c4:2d:fa:a5:9f:d9:9f:a7:4a:0b:aa:50:14:
0c:5c:b3:8a:f9:97:02:f2:b9:39:1a:07:95:58:99:
63:2e:11:4c:1f:25:e6:89:35:62:b1:c6:e6:97:9b:
b2:ec:87:ed:7a:c4:2e:c5:9e:dc:68:94:e9:45:e3:
a7:26:8d:73:4e:52:12:2e:36:37:89:ea:be:12:49:
05:f1:5b:dd:94:bb:cf:9a:7b:46:9b:ee:26:3c:7f:
35:c0:30:fe:6a:db:f5:88:00:0f:c5:a6:22:2a:67:
5d:02:e5:f9:99:f1:fc:4d:83:74:87:05:d8:e7:ce:
0e:d2:cc:06:9c:ae:22:f1:22:d8:bc:f4:af:ef:fe:
38:f3:ef:13:6e:d3:f6:22:0d:cf:92:ab:c1:5b:6f:
50:fc:3f:0c:e4:3d:91:a5:da:14:9a:21:68:40:9d:
09:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F6:37:7E:03:6C:35:31:99:3E:58:C5:6E:09:36:57:03:B5:29:C4
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7f:b5:03:07:91:b8:af:ca:60:53:9d:11:98:1c:05:6b:95:
45:5f:c8:c5:42:e6:1c:8c:0a:36:fe:43:2a:ed:f4:73:ab:19:
eb:72:d9:bf:51:59:9b:00:33:99:83:6c:6e:59:a6:61:3a:55:
bf:52:26:78:05:dd:58:f2:ff:4f:5e:1f:8a:02:d7:de:ee:76:
9f:02:51:8f:19:31:e8:f4:74:fb:cd:35:4a:2b:41:bb:98:df:
96:5d:64:fc:7b:62:ea:77:3e:0c:b9:0b:39:24:7f:51:3b:ff:
da:e1:08:32:e3:51:4c:47:f1:a0:2f:b2:2c:2f:62:4f:e8:bd:
40:73:2b:02:ed:49:3b:17:8c:9a:e8:1d:bd:49:4b:4e:d9:1e:
be:db:39:a9:a1:96:dd:f9:8e:ca:92:70:8d:ef:b9:79:78:81:
66:78:2e:9a:42:38:50:6e:a8:4f:1d:15:2f:c4:52:f1:2d:05:
cf:7b:f5:f9:13:dc:62:33:a0:ef:5a:51:18:6d:bc:2f:60:43:
95:31:6f:67:35:63:2c:ce:09:cf:5c:ee:67:e6:d9:c9:93:8a:
da:8f:be:22:4f:62:f6:a3:d5:3e:02:cb:53:48:a1:95:b3:61:
ac:50:48:76:11:a1:3e:ca:ee:6b:0c:ce:6a:38:79:3d:d4:a7:
eb:de:d9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:37:09 2026 by rpki-client