Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
File: abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json)
Hash identifier: 8C85AH3SetShzwHvNwIQBYVu480zJQSg59cApWGuZIw=
Subject key identifier: 75:E8:C0:7C:E9:C3:12:94:49:CC:0D:85:C0:B9:15:45:34:5A:D5:7B
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 01A11C3E83D87F1B5DA42C368BBFDEA3C687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
Manifest number: 0ECE
Signing time: Thu 08 Oct 2026 16:00:21 +0000
Manifest this update: Thu 08 Oct 2026 16:00:21 +0000
Manifest next update: Fri 09 Oct 2026 16:00:21 +0000
Files and hashes: 1: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: dDQoWZ2Krmpx0SZXA4UWuWCjNrF9Gx1RGuINpp0bZmE=)
2: epJ5NtfvH1g3tuK4xd9nscSiEoA.roa (hash: niW0UBzEk+eWx8n4afLHbWheyJix/ATlxCY23FXANN8=)
3: hpFPFF4swm17BfKeLPrET14DerI.roa (hash: /w3PMxP9jyIQ4EgZwsRkLDa6435IO8C6U7QCr8ty+WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:3e:83:d8:7f:1b:5d:a4:2c:36:8b:bf:de:a3:c6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: Oct 8 16:00:21 2026 GMT
Not After : Oct 9 16:00:21 2026 GMT
Subject: CN=75e8c07ce9c3129449cc0d85c0b91545345ad57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:1f:08:7c:36:66:09:c2:7a:85:c7:96:83:
f1:72:38:7a:b5:fb:b9:fd:bf:79:ee:65:37:4d:d9:
28:7b:0e:5b:0f:93:d5:54:15:ec:7f:ee:40:8f:7c:
fb:6b:7e:af:28:9a:71:c6:39:ef:64:ca:7d:58:93:
89:77:4e:c6:8c:ab:d8:07:2b:cd:95:40:2f:c3:4a:
36:e9:50:ed:c1:51:f0:6a:3b:ec:91:31:9c:c7:57:
c6:f0:92:85:cf:5f:24:7f:7a:eb:31:fe:d3:ae:dc:
0f:e5:e0:fe:46:7e:a3:fb:74:ce:d8:ef:ab:8e:f8:
03:f4:9b:ea:17:b5:13:27:fa:d3:b9:d4:84:7d:b1:
29:f2:0e:c6:27:13:72:9b:a8:b9:3b:4e:01:69:3f:
9a:bf:27:34:4d:af:38:0b:3a:55:d4:b9:8f:43:9b:
11:e2:62:13:ba:f2:51:e2:2f:de:ba:43:21:cf:c4:
a3:d6:4a:11:68:dc:3e:a8:05:f0:09:5e:a4:8d:0b:
8a:3e:f8:42:1f:3f:1e:ed:c1:ae:20:2e:bd:93:f4:
6b:ad:17:81:c1:6e:73:6b:d9:7a:fa:e0:ce:eb:f4:
b1:06:97:56:d1:70:c4:49:19:1b:b1:4a:22:4b:16:
31:30:e0:60:c7:a0:fa:87:6e:9f:0d:ae:01:28:5e:
f3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E8:C0:7C:E9:C3:12:94:49:CC:0D:85:C0:B9:15:45:34:5A:D5:7B
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8c:8a:7f:da:0f:1e:bf:2f:f4:d7:4c:b0:06:61:a5:39:d5:
94:ea:0b:7d:f2:16:06:1c:d7:4d:a4:a3:6b:43:38:04:ff:0d:
12:05:6e:3d:7d:34:d3:78:fd:79:26:96:66:46:d2:e5:09:b3:
0a:1c:15:28:75:de:89:b5:77:ce:fc:e6:46:23:06:cc:7c:00:
c2:7a:9b:4c:08:58:2b:e1:b3:cb:12:f8:b0:f4:41:a1:a4:7f:
d6:a2:66:22:0b:2f:d1:eb:59:ed:a4:ff:34:42:51:53:6d:3a:
2e:4a:b2:c9:84:e0:9e:d5:f8:3e:61:fa:fc:19:1a:53:fe:c6:
2e:57:d1:41:c2:2c:25:3c:b1:cd:9c:79:26:5e:73:53:7e:f2:
50:ee:bc:d2:2f:09:0d:71:6b:4d:14:4f:49:fc:a9:0b:d4:9c:
ad:58:c9:26:81:0f:33:9e:2f:a9:d3:36:e9:59:77:86:76:99:
90:dd:45:25:02:27:2e:f6:7e:2c:a2:8b:a2:4d:ef:32:a3:20:
4a:73:c4:d3:c4:c0:df:a2:f0:ed:69:5b:4e:bf:3c:bf:2d:53:
9b:b6:b1:cb:d7:09:3f:43:b0:e9:bc:37:7d:d5:5e:f0:14:01:
12:41:6f:83:91:09:26:3f:41:1f:ac:c0:3b:4e:91:51:9d:7a:
7f:69:99:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEcPoPYfxtdpCw2i7/eo8aHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5YjAxOTI3YTFhMTc3ZDQyNjEyMjFkOTQ2Mjg1MTRhNTI1
YTk2ZTAwHhcNMjYxMDA4MTYwMDIxWhcNMjYxMDA5MTYwMDIxWjAzMTEwLwYDVQQD
Eyg3NWU4YzA3Y2U5YzMxMjk0NDljYzBkODVjMGI5MTU0NTM0NWFkNTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh4fCHw2ZgnCeoXHloPxcjh6tfu5
/b957mU3Tdkoew5bD5PVVBXsf+5Aj3z7a36vKJpxxjnvZMp9WJOJd07GjKvYByvN
lUAvw0o26VDtwVHwajvskTGcx1fG8JKFz18kf3rrMf7TrtwP5eD+Rn6j+3TO2O+r
jvgD9JvqF7UTJ/rTudSEfbEp8g7GJxNym6i5O04BaT+avyc0Ta84CzpV1LmPQ5sR
4mITuvJR4i/eukMhz8Sj1koRaNw+qAXwCV6kjQuKPvhCHz8e7cGuIC69k/RrrReB
wW5za9l6+uDO6/SxBpdW0XDESRkbsUoiSxYxMOBgx6D6h26fDa4BKF7zzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXowHzpwxKUScwNhcC5FUU0WtV7MB8GA1UdIwQY
MBaAFGmwGSehoXfUJhIh2UYoUUpSWpbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zMjhlYjMtNTYwMy00OTU1LWFhOTIt
MjI1MmJjY2ZkYmY5LzEvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8zMjhlYjMtNTYwMy00OTU1LWFhOTItMjI1MmJjY2ZkYmY5
LzEvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4yKf9oP
Hr8v9NdMsAZhpTnVlOoLffIWBhzXTaSja0M4BP8NEgVuPX0003j9eSaWZkbS5Qmz
ChwVKHXeibV3zvzmRiMGzHwAwnqbTAhYK+GzyxL4sPRBoaR/1qJmIgsv0etZ7aT/
NEJRU206LkqyyYTgntX4PmH6/BkaU/7GLlfRQcIsJTyxzZx5Jl5zU37yUO680i8J
DXFrTRRPSfypC9ScrVjJJoEPM54vqdM26Vl3hnaZkN1FJQInLvZ+LKKLok3vMqMg
SnPE08TA36Lw7WlbTr88vy1Tm7axy9cJP0Ow6bw3fdVe8BQBEkFvg5EJJj9BH6zA
O06RUZ16f2mZ1w==
-----END CERTIFICATE-----
Generated at Thu Oct 8 21:17:47 2026 by rpki-client