Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
File: aBYXGz-RsdELBEWYf2EUKKvxPho.mft (raw, json)
Hash identifier: Zw60LIUf7rR3TW9qa5zHUD5vyEK8JTKNb1bGgmMDXg4=
Subject key identifier: D2:DD:10:05:FB:92:F7:35:43:38:9C:01:E2:81:EF:5F:7F:B5:F4:0F
Authority key identifier: 68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
Certificate issuer: /CN=6816171b3f91b1d10b0445987f611428abf13e1a
Certificate serial: 019E1ED9967A9C813F029053C4D0D90F89E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
Manifest number: 03EC
Signing time: Wed 13 May 2026 01:00:36 +0000
Manifest this update: Wed 13 May 2026 01:00:36 +0000
Manifest next update: Thu 14 May 2026 01:00:36 +0000
Files and hashes: 1: aBYXGz-RsdELBEWYf2EUKKvxPho.crl (hash: cy+uzyfdRUonGa7MO6YoAf3tJAihNjtWkhNQza23Gz0=)
2: cHu9ZbMPrKX8ZIjRFicqBMQg5dQ.roa (hash: K/TDSx0Je1BxRBjDUlA95sURJvSjJ3GjsGy0WuwiR/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:96:7a:9c:81:3f:02:90:53:c4:d0:d9:0f:89:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6816171b3f91b1d10b0445987f611428abf13e1a
Validity
Not Before: May 13 01:00:36 2026 GMT
Not After : May 14 01:00:36 2026 GMT
Subject: CN=d2dd1005fb92f73543389c01e281ef5f7fb5f40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:eb:ba:22:10:e0:8d:40:b9:25:a0:ac:71:f2:
47:76:b5:e6:2f:ae:09:14:da:c6:7c:75:df:3c:a0:
72:8f:4b:d4:d5:1d:ee:ea:61:fd:da:87:2c:1e:25:
5e:86:98:20:43:bc:69:08:b0:b7:51:83:b2:40:e2:
b5:29:86:5a:96:11:61:9d:4a:90:43:00:6a:1b:d1:
ad:00:91:31:31:0d:b4:01:23:50:73:03:9d:8b:db:
62:7e:ad:b8:4c:3c:b9:5e:d6:5d:cf:4e:40:95:09:
cd:9c:70:23:72:9b:36:b9:b4:d4:0f:05:f6:77:6f:
14:6b:2c:a6:92:ad:8d:3f:50:8a:70:4d:a8:27:5c:
80:c5:c8:c9:c7:ee:a5:1c:d4:73:4c:db:a2:9b:cb:
2c:90:d1:b5:0e:34:60:2b:4e:18:bf:63:bf:08:cc:
b2:53:15:5a:fc:f9:5b:e6:f4:d2:0b:c3:49:0c:f4:
80:8b:89:27:84:d4:c3:ef:d6:5b:16:15:6b:e7:e7:
9e:9b:bf:ec:2d:95:31:c8:05:9d:fa:fb:92:4c:01:
d7:8c:b0:7f:5f:b8:92:ef:03:1a:4f:d8:b4:f1:47:
93:fc:34:32:60:b8:f6:32:f9:49:07:6c:17:31:7d:
6d:61:c4:08:fc:56:10:4c:75:1e:fe:21:f3:e5:fb:
bf:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DD:10:05:FB:92:F7:35:43:38:9C:01:E2:81:EF:5F:7F:B5:F4:0F
X509v3 Authority Key Identifier:
keyid:68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:28:cb:b8:54:a8:09:2a:ea:82:a7:16:73:98:3a:7f:5c:2a:
8b:71:a4:60:6e:57:f9:b9:91:be:d4:de:0d:3d:5d:36:fc:e0:
cb:5e:d8:06:ba:d6:0f:e7:c7:9f:c6:c2:cd:d8:ea:5a:74:b7:
b8:05:e7:11:7d:1a:a2:52:50:82:f0:77:27:27:90:9e:b3:eb:
2d:16:a6:30:cc:bd:c9:c3:84:79:2b:2d:c4:0e:df:de:44:e4:
8c:12:d6:3c:12:ed:b6:22:d8:48:ee:ad:9f:5c:f2:b4:06:31:
ee:22:fb:c9:52:96:b9:3e:dc:49:8c:01:f4:e5:18:cc:9b:2c:
8c:16:29:17:82:23:ec:79:6b:09:0a:0e:22:7b:09:f9:4e:8e:
65:c0:da:15:c5:eb:d8:8d:2a:9b:d1:ad:3e:df:fd:89:fc:f0:
a8:55:65:59:a3:17:43:c5:c9:b0:7c:9d:7f:e0:f7:fe:f1:d9:
c3:ca:33:2b:31:87:d7:21:c4:11:40:6b:26:22:35:d6:e5:d1:
75:80:38:16:73:1c:ee:a9:6b:2f:6b:6b:6b:66:a8:f2:30:02:
d5:9c:4b:90:63:18:94:bd:7a:95:bc:46:6c:c9:65:ed:54:c1:
34:3b:50:9c:3e:9a:98:dc:55:c2:45:ed:26:72:b4:3d:d7:37:
1d:8e:a5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:39:39 2026 by rpki-client