Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
File: AblFvZ9KDnOPSRWctrba8iSG1cA.mft (raw, json)
Hash identifier: ml9nil/vnjw5loChcf6wkjvbwKDG9+nUyoXsKGuaqyw=
Subject key identifier: AA:D8:B7:66:1E:AC:15:4F:B7:EC:D4:F5:B9:2B:DA:51:CA:44:C0:57
Authority key identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
Certificate issuer: /CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Certificate serial: 01A0CBC78A08249747F7D0FF6296D084A5C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
Manifest number: 1139
Signing time: Wed 23 Sep 2026 01:00:46 +0000
Manifest this update: Wed 23 Sep 2026 01:00:46 +0000
Manifest next update: Thu 24 Sep 2026 01:00:46 +0000
Files and hashes: 1: AblFvZ9KDnOPSRWctrba8iSG1cA.crl (hash: bz84Sfd1rc2kn1Hut0cLGBwsTAx1sciHtXuADQVgoPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:8a:08:24:97:47:f7:d0:ff:62:96:d0:84:a5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Validity
Not Before: Sep 23 01:00:46 2026 GMT
Not After : Sep 24 01:00:46 2026 GMT
Subject: CN=aad8b7661eac154fb7ecd4f5b92bda51ca44c057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e8:81:d0:09:de:a0:ea:cc:d1:46:c8:c7:81:
7f:c4:15:4d:12:68:f1:60:69:1f:d3:30:7b:39:0b:
fe:10:15:bd:cc:52:e1:01:3a:49:ea:99:47:73:a2:
f5:9b:be:07:45:24:b6:30:37:21:84:4b:6c:2a:92:
bc:db:2c:a8:33:05:43:cf:10:22:7c:36:5e:2d:3e:
e8:6b:9f:47:2c:81:49:cc:37:86:0b:3d:17:d5:2a:
d1:d0:1e:5c:ec:17:50:d6:b7:80:d8:76:86:b1:5b:
81:07:42:ae:7a:77:93:3e:ce:20:d3:54:bc:43:01:
44:11:e0:b3:cf:c8:c4:47:02:62:d5:39:9c:fd:fa:
d7:59:33:09:ad:f4:cb:e2:a6:cd:b4:08:45:8d:01:
a1:6d:81:1f:1e:49:bd:b0:d6:e5:78:fc:14:73:2d:
06:65:db:ea:f7:89:b7:80:b3:68:61:09:28:51:bb:
c1:f8:23:a9:54:e0:d5:b0:59:25:af:ce:f7:c7:32:
66:78:89:98:d0:52:69:70:f1:ca:02:27:f8:9b:a3:
56:01:7d:c1:a5:29:cc:10:25:c0:fb:e1:08:d5:c0:
63:57:68:49:c8:18:1c:04:b0:88:8d:c0:f9:cc:bd:
0c:45:9a:38:5f:2f:4f:90:d7:d2:db:b4:fa:c8:93:
46:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D8:B7:66:1E:AC:15:4F:B7:EC:D4:F5:B9:2B:DA:51:CA:44:C0:57
X509v3 Authority Key Identifier:
keyid:01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e0:09:cd:b6:bf:19:df:ce:ce:d3:b7:6d:95:b9:82:79:4f:
d7:7a:07:15:f0:b2:1b:57:88:35:bb:d5:48:e6:17:fe:60:fc:
29:aa:4f:ab:e2:e9:42:9c:c3:0e:08:95:ee:8e:35:15:4f:3d:
0c:76:f5:dc:06:2d:b8:3b:59:68:33:c6:3d:44:3d:04:5c:87:
4d:e0:b8:33:a7:09:eb:de:67:4f:9a:86:21:51:3d:0b:cb:78:
99:cb:66:4d:2b:9d:20:4f:fa:29:34:83:0c:c1:15:f3:07:93:
ee:08:ae:bc:d7:4f:eb:5e:c6:f2:03:c3:f5:89:5a:dd:67:b5:
99:3d:a0:a2:17:c0:0a:23:e0:84:0d:ac:c4:88:de:94:78:cd:
04:e1:40:5d:08:7a:8d:1a:09:13:0d:15:b4:d9:2c:0e:1f:5e:
e8:0c:00:c4:7e:8b:78:21:81:fe:6e:2d:6b:0b:17:ca:99:15:
71:21:71:0a:ea:f2:28:ed:06:07:8a:83:2e:1d:65:fc:b2:4c:
15:1d:f4:02:6b:4f:fe:88:38:23:bc:5d:ba:39:d6:5e:c4:8d:
a6:3a:ff:6f:10:4d:a8:f3:db:d2:ce:27:7c:eb:3d:02:9b:89:
9b:7f:43:ef:a0:85:ef:c2:46:f7:92:68:d2:9a:e6:30:d9:67:
51:8b:fe:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:10:33 2026 by rpki-client