Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
File: aBYXGz-RsdELBEWYf2EUKKvxPho.mft (raw, json)
Hash identifier: 5z+1X/Lj04rq3sxAFvdnphJ+IXdPsqykw+YYqW/xQzU=
Subject key identifier: B8:69:45:FB:04:BE:28:11:E7:A0:9C:24:15:F7:A1:C3:B1:31:FC:68
Authority key identifier: 68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
Certificate issuer: /CN=6816171b3f91b1d10b0445987f611428abf13e1a
Certificate serial: 01A0D2376E607EB83C5BBD7E4158D64C3AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
Manifest number: 0552
Signing time: Thu 24 Sep 2026 07:00:43 +0000
Manifest this update: Thu 24 Sep 2026 07:00:43 +0000
Manifest next update: Fri 25 Sep 2026 07:00:43 +0000
Files and hashes: 1: aBYXGz-RsdELBEWYf2EUKKvxPho.crl (hash: vTk66SqMaTp3oWcwVtSgw77Ckn8GLI3g30hvQ1bCzcg=)
2: cHu9ZbMPrKX8ZIjRFicqBMQg5dQ.roa (hash: K/TDSx0Je1BxRBjDUlA95sURJvSjJ3GjsGy0WuwiR/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:6e:60:7e:b8:3c:5b:bd:7e:41:58:d6:4c:3a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6816171b3f91b1d10b0445987f611428abf13e1a
Validity
Not Before: Sep 24 07:00:43 2026 GMT
Not After : Sep 25 07:00:43 2026 GMT
Subject: CN=b86945fb04be2811e7a09c2415f7a1c3b131fc68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:a5:20:f7:d2:d2:af:fa:c9:2f:40:05:63:
38:86:dc:f8:92:70:d2:ff:d8:14:45:c9:17:9d:87:
85:1d:22:74:ec:29:6d:50:21:d8:20:34:80:a8:69:
c8:aa:30:f2:c7:a1:bb:46:7e:c9:bb:3e:89:0d:51:
e3:f0:6f:31:9a:c3:2e:ce:3f:ac:0b:98:c0:7d:f4:
fc:0c:e9:ed:d9:cb:33:15:6a:bd:fc:a6:3a:f0:71:
9c:e9:e9:52:1c:38:e7:0a:07:98:20:e0:af:87:73:
a1:f0:51:58:52:a0:a0:d0:93:b1:99:ee:b3:e5:f1:
3e:b1:c7:b9:a5:0a:d9:2b:af:82:55:96:c5:28:4f:
ad:48:e5:06:a4:eb:b0:14:8d:18:c8:fa:8f:f3:e2:
27:2e:5e:72:f3:20:ba:21:4d:c1:99:8e:3d:61:e4:
7c:b4:18:a4:b6:06:18:1a:70:42:0a:78:ad:7a:c5:
61:cd:46:b9:ff:78:45:af:70:81:0c:73:12:1f:26:
a8:99:d3:0d:0d:50:30:3c:bf:2b:2d:02:86:7c:db:
31:06:ea:4d:10:36:e7:ef:a1:5c:12:8e:73:cb:5d:
e0:ca:d2:bb:c7:68:cc:3a:6c:24:95:e3:4c:bd:65:
65:b9:73:22:c0:53:82:4c:6a:be:d2:91:8c:fc:b4:
e7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:69:45:FB:04:BE:28:11:E7:A0:9C:24:15:F7:A1:C3:B1:31:FC:68
X509v3 Authority Key Identifier:
keyid:68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:47:a6:60:87:05:af:06:a5:b0:ab:df:81:47:cd:39:c8:98:
c2:20:84:65:08:3d:8c:16:ea:fa:fd:c3:44:24:7f:24:4b:8f:
0c:cc:db:0f:7e:12:42:f4:06:36:ac:b8:0f:0e:a2:e8:80:65:
4e:1e:c7:a7:1d:a0:87:25:5f:93:95:5f:09:51:2f:23:04:ae:
28:33:60:13:c5:d1:2a:b6:a5:77:45:d6:fd:b7:fc:af:fe:1d:
98:0a:04:cd:8c:5f:d1:28:fe:76:b9:ab:5c:f8:97:f1:2f:83:
37:18:4d:1a:04:b9:59:b8:db:98:56:cd:2d:82:1f:2a:f0:4b:
a9:eb:dc:d3:a1:40:da:07:d2:a8:65:31:35:f7:ea:54:6e:6f:
da:92:d7:9c:5f:47:d1:67:75:0a:87:be:9f:9e:82:c9:9d:83:
67:45:16:7c:60:38:08:42:a7:27:19:15:83:d8:9a:d6:68:c7:
1a:73:97:56:2b:a9:b4:03:f9:96:66:47:c0:60:4f:a3:4c:d9:
ed:2d:2d:77:8b:16:3b:cc:11:6e:b8:8e:ac:e7:09:f2:37:d3:
10:23:24:bf:3e:18:8a:fe:c4:96:db:ed:eb:99:00:c9:f7:d9:
b9:61:58:f5:a0:28:29:2a:6b:50:28:8d:7c:ea:de:97:fe:a5:
f1:16:c7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:09:24 2026 by rpki-client