Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
File: abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json)
Hash identifier: 3LjMMFOCd9EKle7RJIcrxXUG1G6Fm49fn67D5FObuYc=
Subject key identifier: F2:BD:D4:44:0A:53:0A:6C:08:83:E6:E7:23:42:7F:80:5D:90:06:59
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 019D2A3BBE15BE63CB8968B37E67F8152B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
Manifest number: 0CC3
Signing time: Thu 26 Mar 2026 13:00:51 +0000
Manifest this update: Thu 26 Mar 2026 13:00:51 +0000
Manifest next update: Fri 27 Mar 2026 13:00:51 +0000
Files and hashes: 1: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: Hd2p8XKNbwpw9hAf4sjZd4JqDnoBv1Wq7RCa4JG29T8=)
2: epJ5NtfvH1g3tuK4xd9nscSiEoA.roa (hash: niW0UBzEk+eWx8n4afLHbWheyJix/ATlxCY23FXANN8=)
3: hpFPFF4swm17BfKeLPrET14DerI.roa (hash: /w3PMxP9jyIQ4EgZwsRkLDa6435IO8C6U7QCr8ty+WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:be:15:be:63:cb:89:68:b3:7e:67:f8:15:2b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: Mar 26 13:00:51 2026 GMT
Not After : Mar 27 13:00:51 2026 GMT
Subject: CN=f2bdd4440a530a6c0883e6e723427f805d900659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:39:69:aa:d2:8c:89:4c:e7:98:1c:ba:cc:27:
f0:05:9a:08:77:c7:be:a9:a0:2e:c9:8a:df:bc:ff:
00:58:21:45:8f:aa:28:b4:78:b4:80:71:b1:30:58:
42:d2:95:db:9b:77:14:7b:0b:20:4c:d8:0a:b4:bf:
15:3f:a8:6c:d0:70:fd:0b:04:f4:58:fa:dc:08:2d:
d4:fc:88:9b:ab:a1:f2:28:16:63:84:ec:f6:05:da:
89:06:ae:20:23:66:d4:af:8f:6f:8c:27:2d:ec:5a:
47:fd:54:08:5e:99:54:a4:41:92:c2:cd:dc:5f:80:
b3:73:66:b1:e2:9b:ff:40:7c:23:f2:bf:d2:52:9e:
e4:66:e1:8e:8b:8b:0e:16:53:80:37:b0:35:56:b5:
eb:cf:d2:c1:6d:99:49:10:78:a5:af:14:86:6f:67:
26:b0:ed:32:80:58:aa:b5:f1:37:56:16:f4:08:03:
4d:8e:7b:c9:61:25:d4:ac:08:1d:3b:8f:b7:0f:7f:
6a:e6:e2:1b:bf:58:b9:8a:38:ac:f4:07:ca:36:70:
a0:c9:db:14:e4:4e:7b:a0:fe:e9:d0:dd:e2:a7:a7:
f8:22:77:b1:98:d1:0c:06:14:07:24:8f:8e:30:c3:
b6:b9:be:83:5e:72:c2:a2:7b:8b:37:d4:07:ec:f9:
31:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BD:D4:44:0A:53:0A:6C:08:83:E6:E7:23:42:7F:80:5D:90:06:59
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fb:d0:c6:de:e7:48:d9:68:0b:33:c1:67:eb:8c:4d:c9:78:
85:51:b1:83:1c:4b:d5:12:f5:f4:96:42:0e:f5:44:b3:bc:f5:
84:06:5f:d0:57:fc:1c:af:06:32:5e:b9:6c:66:32:c6:33:ff:
33:62:e6:8f:d1:76:32:89:80:13:20:c3:0b:9f:44:db:72:62:
a3:8e:64:6b:f7:9b:a2:b7:01:9e:c5:ea:b6:f6:78:3b:41:ab:
fa:12:89:bd:1b:da:e5:b2:84:c3:f1:df:f7:14:8b:9e:dd:a5:
dc:0f:ae:a1:6d:6e:ab:a2:a8:d0:1d:5b:e6:d3:91:b0:09:44:
91:3a:a8:6f:bb:77:92:4c:8f:13:85:ca:3e:72:03:73:1b:9f:
c1:45:9f:db:69:22:7a:ce:61:90:81:b6:5f:03:6e:ad:0d:d1:
bb:bc:e7:9b:28:c5:38:d0:4a:04:6c:57:39:f9:47:03:9f:5d:
ac:36:e1:96:22:e9:24:af:45:c3:bb:cd:84:9b:9b:cd:e3:b6:
5d:9a:0a:be:7d:2d:79:5b:41:c8:8c:38:0c:32:5c:f3:13:7b:
75:9c:ac:e4:ab:69:ad:2c:c6:70:f0:d6:c0:cb:51:ef:e2:70:
84:39:48:f5:c3:81:a3:d9:df:86:ce:c6:ec:b0:c9:cb:e6:b1:
e2:b3:95:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:42:46 2026 by rpki-client