Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
File: AblFvZ9KDnOPSRWctrba8iSG1cA.mft (raw, json)
Hash identifier: BF7qhtyTOdC6jEioNh7ghSTD94m9HByynQFTjQ6MLqU=
Subject key identifier: 38:25:C9:EE:9F:EE:DB:18:E9:C9:CC:6B:3C:1E:A0:81:15:CE:86:18
Authority key identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
Certificate issuer: /CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Certificate serial: 019E1E352780EA22BFCB603422B3267CC14D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
Manifest number: 0FD6
Signing time: Tue 12 May 2026 22:01:00 +0000
Manifest this update: Tue 12 May 2026 22:01:00 +0000
Manifest next update: Wed 13 May 2026 22:01:00 +0000
Files and hashes: 1: AblFvZ9KDnOPSRWctrba8iSG1cA.crl (hash: gNjH60wIrw8TQCra1Ls9bCm+CmsG4t4DxFvHKzqREUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:27:80:ea:22:bf:cb:60:34:22:b3:26:7c:c1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Validity
Not Before: May 12 22:01:00 2026 GMT
Not After : May 13 22:01:00 2026 GMT
Subject: CN=3825c9ee9feedb18e9c9cc6b3c1ea08115ce8618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cf:8d:6b:dd:81:b0:f9:19:e9:85:3f:64:83:
bb:0f:70:94:6f:89:91:6f:66:a1:3a:48:ab:89:90:
b7:ed:60:e9:4c:fb:09:cd:7f:c0:84:8d:c7:6f:5c:
ff:da:87:12:69:69:6e:fd:f7:08:67:9c:cf:64:6f:
45:3e:b3:43:78:19:04:71:23:e0:9e:76:f3:61:ba:
7a:41:9f:b8:d0:5a:fb:18:bf:8d:8b:13:cc:80:0c:
ce:b6:70:6f:24:10:cf:79:51:0f:e2:ac:78:04:63:
aa:5f:1f:0b:33:c4:14:4e:8f:da:27:4d:89:8c:85:
20:9a:53:2d:83:fa:91:d5:28:df:0f:82:a7:1a:79:
90:72:80:0b:98:7e:42:1a:f2:72:d3:d6:fe:fc:b3:
62:60:ac:ad:e0:43:b5:11:5b:1c:d5:95:f6:6a:cb:
42:4e:a0:e8:bf:34:56:e3:b8:6b:4e:60:06:1b:88:
cd:aa:7b:de:8c:8c:73:f5:77:d6:75:99:f6:8f:60:
0d:57:fd:53:a4:19:b2:a7:cf:8a:ce:48:d0:24:72:
93:0b:6a:6d:17:14:92:65:e2:36:21:84:59:4e:d0:
51:fa:46:f4:a4:fb:98:b7:b7:d3:8a:5a:a7:4d:8f:
86:fc:22:aa:bd:bf:e7:f2:60:24:aa:52:a1:f1:c1:
5b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:25:C9:EE:9F:EE:DB:18:E9:C9:CC:6B:3C:1E:A0:81:15:CE:86:18
X509v3 Authority Key Identifier:
keyid:01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:19:60:ba:76:da:a4:ac:72:da:a0:96:67:4e:41:76:95:42:
c8:3c:06:99:d2:0d:02:37:e3:25:31:d4:a8:5e:02:2d:1f:5a:
bd:5a:0e:15:c8:e5:05:ff:bb:d4:9a:e1:21:ce:c3:79:ca:c9:
78:81:58:7a:7c:34:56:3b:bb:61:b4:66:27:65:3c:b2:76:a3:
dd:e5:66:75:38:15:04:ab:d7:d8:38:12:72:e4:83:9d:e2:8d:
b5:4b:13:b1:a4:84:1a:bf:67:8e:0a:68:83:0a:c5:36:e7:b4:
a3:cf:99:d5:10:60:45:97:96:ae:bf:38:fc:75:74:ec:5c:fa:
1b:15:fa:69:fd:a5:14:99:96:cd:06:a2:26:35:cd:ed:ba:3a:
5c:be:64:06:3e:f3:d5:ff:eb:9f:59:ab:3f:84:86:cd:6a:ab:
12:b5:df:a5:b1:61:3a:40:17:6a:ca:da:8d:ca:b9:be:ec:f6:
d2:00:c4:29:79:ee:39:9f:cb:5d:9e:3d:ae:f9:91:f4:11:7c:
4b:38:ad:f1:a3:f1:70:ae:f8:8f:6b:bc:ac:d3:e6:c0:d2:65:
7d:24:b2:36:0c:5d:12:e4:77:f2:b5:cb:3d:24:c1:f7:2f:9c:
bf:89:f6:b7:46:9c:7a:49:2a:92:7d:e6:89:94:9e:b5:36:2a:
f7:38:a6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:22:47 2026 by rpki-client