Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
File: aBYXGz-RsdELBEWYf2EUKKvxPho.mft (raw, json)
Hash identifier: 09IaxG8hw1KSxIhEpESJi5KNbuBr8FFxwaJK3U36d9M=
Subject key identifier: 95:20:6C:06:CE:AA:71:22:E8:77:7B:84:EA:83:40:4A:E2:D1:2B:2D
Authority key identifier: 68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
Certificate issuer: /CN=6816171b3f91b1d10b0445987f611428abf13e1a
Certificate serial: 019D299722A607E764AC3CF8836DAFF69E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
Manifest number: 036D
Signing time: Thu 26 Mar 2026 10:01:03 +0000
Manifest this update: Thu 26 Mar 2026 10:01:03 +0000
Manifest next update: Fri 27 Mar 2026 10:01:03 +0000
Files and hashes: 1: aBYXGz-RsdELBEWYf2EUKKvxPho.crl (hash: OC+qG2jzx+8Xf7VCmMjhyonJeEMpT5AEjXF1tLj5T70=)
2: cHu9ZbMPrKX8ZIjRFicqBMQg5dQ.roa (hash: K/TDSx0Je1BxRBjDUlA95sURJvSjJ3GjsGy0WuwiR/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:22:a6:07:e7:64:ac:3c:f8:83:6d:af:f6:9e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6816171b3f91b1d10b0445987f611428abf13e1a
Validity
Not Before: Mar 26 10:01:03 2026 GMT
Not After : Mar 27 10:01:03 2026 GMT
Subject: CN=95206c06ceaa7122e8777b84ea83404ae2d12b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:82:42:86:ab:42:d7:b0:ca:2b:a9:d6:82:78:
c4:e6:77:9e:32:7d:71:c9:76:c8:0b:6c:49:7d:29:
b2:e0:e6:64:fd:f9:57:7a:cf:07:a5:d8:99:55:a3:
84:65:ea:68:1b:84:d2:32:c4:20:81:1d:eb:e7:58:
40:65:8f:5b:cb:51:8a:e4:da:67:3d:12:77:47:20:
8e:96:fd:a5:c3:ae:27:8a:88:a0:52:b2:27:f7:95:
a2:37:48:8d:f1:68:d2:3e:d1:a7:e2:7f:8c:e3:9e:
c0:15:41:22:f2:68:b5:18:d2:14:d2:53:35:34:5b:
92:43:04:42:88:46:e3:4f:3e:d6:40:a7:68:04:95:
0a:34:0b:c2:db:95:7b:6c:9e:ba:11:12:81:aa:2a:
46:11:cc:b5:ce:81:9e:6e:31:3d:68:0a:8a:ac:76:
88:31:ca:a3:2d:0f:a3:bd:0f:77:38:46:cb:c6:8c:
af:88:33:61:d8:2b:7c:84:28:d3:ba:ba:70:33:5c:
12:06:d2:29:92:e1:01:3e:d9:af:6a:39:7e:f3:24:
83:7d:7b:ec:1f:a9:bf:92:9a:f4:bf:7b:13:96:e4:
2c:e2:19:e7:ae:48:6d:ed:bf:42:a5:4f:3a:07:16:
e4:9d:32:13:f5:86:0d:50:c3:4d:81:82:0d:a4:1c:
05:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:20:6C:06:CE:AA:71:22:E8:77:7B:84:EA:83:40:4A:E2:D1:2B:2D
X509v3 Authority Key Identifier:
keyid:68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:01:9e:a2:d6:bf:6f:02:18:c6:23:32:56:2e:a9:01:71:7a:
4f:2f:3e:d3:83:35:77:66:87:52:64:5b:d1:2e:84:bd:c8:ae:
70:51:0e:44:f3:6d:c0:06:bb:ee:5d:55:80:60:49:ac:c4:c9:
05:c2:e6:5e:9b:ee:a3:16:77:8c:1d:a8:93:7b:b8:e2:52:84:
22:f1:1a:f0:57:68:c8:a2:88:a6:8b:bf:db:5c:dd:69:14:16:
b9:00:e9:69:a0:13:6b:fa:5c:30:c9:1e:ed:1e:57:e7:4b:cc:
81:8f:b8:48:46:46:2c:31:5c:a6:85:67:cf:5e:3b:d5:9c:66:
9b:b1:60:55:77:b5:95:b2:5c:ad:53:8d:56:e7:8b:07:fb:ed:
42:54:67:5f:e3:3b:91:c6:0d:d4:fe:95:db:f3:0f:4b:66:5a:
30:d8:e5:c2:25:22:ec:6a:ea:b4:2e:a3:86:0e:9d:6e:08:53:
4c:77:69:93:8d:5b:25:06:38:a7:b7:d0:b9:32:01:48:d1:50:
73:50:5a:b0:e9:6d:2a:15:06:f3:f7:de:7c:39:7f:00:5c:e7:
77:eb:ea:a9:6b:f6:47:93:20:67:80:9f:1d:a3:73:19:b2:82:
40:5a:c0:b8:75:83:80:1b:db:1f:47:2a:86:6e:41:ee:f4:18:
20:61:10:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:26:43 2026 by rpki-client