Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
File: abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json)
Hash identifier: tLPmIoNciOWdNN3C9dvwjQiZKF+ke6fapyQZ3fTOJNM=
Subject key identifier: FE:77:EC:0B:B5:65:9D:50:DE:59:EE:70:11:21:37:6B:0E:26:17:82
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 019E216D0483F2874C45DA550C0DA0032074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
Manifest number: 0D43
Signing time: Wed 13 May 2026 13:00:53 +0000
Manifest this update: Wed 13 May 2026 13:00:53 +0000
Manifest next update: Thu 14 May 2026 13:00:53 +0000
Files and hashes: 1: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: /MjE1K/IYx8HVFNS7ZMRCKOBmneRxZJON9lFZwbySk8=)
2: epJ5NtfvH1g3tuK4xd9nscSiEoA.roa (hash: niW0UBzEk+eWx8n4afLHbWheyJix/ATlxCY23FXANN8=)
3: hpFPFF4swm17BfKeLPrET14DerI.roa (hash: /w3PMxP9jyIQ4EgZwsRkLDa6435IO8C6U7QCr8ty+WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:04:83:f2:87:4c:45:da:55:0c:0d:a0:03:20:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: May 13 13:00:53 2026 GMT
Not After : May 14 13:00:53 2026 GMT
Subject: CN=fe77ec0bb5659d50de59ee701121376b0e261782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9e:e0:48:8e:e0:82:d3:21:45:cc:ed:62:71:
a6:8e:2e:99:68:ab:2b:9f:a8:c2:b4:f8:e6:8e:a6:
36:b8:a8:16:03:5d:8b:51:7a:42:7f:81:ae:a7:75:
f4:2e:16:b7:b0:e6:95:50:b8:e4:3f:52:07:fb:fb:
01:f5:0f:c8:b5:55:6f:83:1a:80:4c:9e:be:f0:52:
99:5d:bd:f1:3a:e2:4b:62:a5:b9:10:a4:51:10:c4:
3b:65:02:4d:47:a7:f4:04:fc:3a:4d:ed:15:9a:20:
7b:74:bf:27:63:01:2e:fd:1a:26:ce:51:83:42:c8:
67:07:7d:ce:e3:b4:74:bb:71:71:58:bf:63:1a:b1:
6f:26:e0:64:74:cb:9c:a6:a5:f0:5b:00:24:ec:f4:
44:5e:a8:16:7d:09:e4:f7:9a:a3:26:b1:ff:a3:7a:
a9:dd:a7:c0:a3:91:b2:7a:b9:36:b1:25:bf:2d:53:
3e:7e:42:ac:5c:c4:8c:80:50:17:9f:e2:0a:c7:0a:
1c:d1:05:d8:5f:50:a8:1e:6a:c7:f2:dd:f0:52:78:
d8:57:45:c7:67:6e:ac:df:e0:7e:05:96:7c:00:d4:
4c:2f:06:b4:c0:f5:f7:20:69:fe:f4:1d:77:be:3f:
db:96:d6:e2:94:3c:9e:77:1d:30:bd:1f:45:ad:47:
d1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:77:EC:0B:B5:65:9D:50:DE:59:EE:70:11:21:37:6B:0E:26:17:82
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ef:90:10:2b:c1:84:d2:b9:bf:be:37:df:77:79:86:bf:c7:
35:4a:86:61:3c:2e:a9:fc:78:ae:7b:33:b2:cb:32:4e:06:3c:
bf:15:39:fb:e7:e6:bc:28:5d:d6:2b:c3:de:e1:35:79:09:43:
58:c4:aa:82:e8:85:4a:b6:f1:19:a2:0a:ee:33:0b:b9:98:c0:
ab:23:03:f6:96:89:a2:f8:1d:f3:aa:0e:85:5f:63:57:46:8d:
4a:78:ca:05:97:55:23:b1:d8:f6:06:06:af:5c:ca:2a:6e:62:
c9:66:d8:df:a3:20:2b:ed:8d:ad:de:a1:c1:ec:86:85:36:19:
c6:78:65:29:be:3e:09:eb:87:eb:a9:61:be:b5:97:d1:c8:64:
cd:ba:c7:3f:1e:d8:71:2d:c8:d7:64:e2:e8:d5:cf:da:c0:bb:
40:18:c6:1d:f2:48:ea:9c:fe:d1:78:f0:5d:1a:e9:14:f3:91:
1a:fc:35:e6:b6:13:f9:96:bd:f8:2c:40:88:77:54:d2:99:4d:
6a:dd:4e:6f:80:74:23:77:e0:07:76:15:ab:a7:4e:18:0b:f5:
2b:5d:eb:7b:57:8f:41:e4:76:e6:50:67:15:51:40:8b:de:9d:
0b:f9:90:a3:11:f8:37:0e:d4:f4:57:67:df:d9:8d:be:db:63:
33:8a:72:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:08:55 2026 by rpki-client