Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
File: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft (raw, json)
Hash identifier: eZPClW0pwjPsy1LyuOq23BBs4rkWOBjzh2HX/0tpzCo=
Subject key identifier: 5A:A0:9D:63:A2:9B:E5:07:27:5F:25:36:48:E5:91:E3:22:43:8B:27
Authority key identifier: 01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
Certificate issuer: /CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Certificate serial: 019CACB54952977E3C9304D1649C44AAC36A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 04:01:27 +0000
Manifest this update: Mon 02 Mar 2026 04:01:27 +0000
Manifest next update: Tue 03 Mar 2026 04:01:27 +0000
Files and hashes: 1: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl (hash: ameKJG2Gu3RCPEvH1bTrrD1MpctLmlXm1Zyp2G9RSM8=)
2: lU3BCZBDNlCDk-8OFyyOit3pGFs.roa (hash: AWI11iVTlePwywxMYMGqGux5nESZadW+LVNcBQPGHWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:49:52:97:7e:3c:93:04:d1:64:9c:44:aa:c3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Validity
Not Before: Mar 2 04:01:27 2026 GMT
Not After : Mar 3 04:01:27 2026 GMT
Subject: CN=5aa09d63a29be507275f253648e591e322438b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:02:17:3d:b5:1f:74:99:eb:20:10:35:80:
d3:a8:79:3d:58:5e:d0:ae:84:ce:08:f7:06:d7:83:
6d:60:fc:12:30:1f:a5:60:19:b4:da:f8:b2:d0:eb:
f4:ca:e4:28:d4:f5:4a:ff:86:87:f1:44:5a:18:27:
28:cd:6f:88:ff:c5:82:dd:bd:77:53:02:18:ea:3c:
b9:f4:6c:8d:3c:fb:1a:b4:10:50:dc:2a:ae:a1:c1:
59:c1:73:aa:82:70:57:9b:41:73:77:72:a1:73:a1:
ca:ad:ce:e9:68:e7:96:45:3a:30:e5:6a:94:ac:e1:
e7:98:59:b6:c1:7c:d4:94:a2:dd:33:42:bf:cc:0c:
9e:78:e1:39:99:50:cb:a0:4f:19:8e:a2:42:20:f1:
e6:da:cb:cc:ee:9e:d1:59:9e:6b:23:a2:8f:70:f8:
19:5b:5a:a3:d9:76:24:00:52:0a:6f:29:0f:74:6d:
5c:20:47:fd:54:a1:c3:e3:f2:d4:5c:49:4e:08:aa:
80:52:c9:bb:ae:be:03:66:ff:18:e2:c4:e1:a1:ad:
53:f3:ca:64:d2:6d:37:36:e5:d0:ed:49:a6:61:68:
e8:d9:0e:21:34:a7:2a:94:6c:08:12:8d:da:99:6a:
21:29:be:11:5d:5d:a2:8c:65:1a:5a:8c:71:6c:84:
7a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A0:9D:63:A2:9B:E5:07:27:5F:25:36:48:E5:91:E3:22:43:8B:27
X509v3 Authority Key Identifier:
keyid:01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c8:95:ce:9e:5a:a2:44:1e:9f:43:7b:09:cd:61:ac:da:98:
7b:af:6d:eb:dc:39:11:a3:43:47:7b:3d:8c:4e:25:b1:5f:8f:
7e:d3:59:bd:d2:59:90:36:33:fb:07:ee:3c:53:40:b0:74:d0:
bf:92:21:b7:35:4e:9c:2f:56:5e:23:41:87:7d:f1:be:eb:8e:
e6:18:9a:64:89:e4:81:e5:d0:38:ed:f4:21:c1:7c:2c:ac:7e:
a4:68:3b:59:61:d7:98:97:8b:8d:58:1f:5f:06:2d:43:89:f8:
8e:b2:ad:f3:e6:9a:e7:e9:bb:3c:70:78:d6:76:d0:14:0d:ac:
3c:92:f7:73:fe:14:21:04:81:00:b5:bc:5f:b0:98:89:f5:cc:
19:a7:12:ae:35:33:5d:99:2f:77:ee:f9:20:ee:db:36:5c:1e:
df:f9:e7:ef:c9:12:f7:24:19:a0:e7:6e:dc:ba:9a:13:57:08:
17:7e:f0:8d:de:62:74:09:ae:d6:b8:59:00:da:5b:8a:7a:73:
22:11:31:69:2c:74:69:b6:7a:83:65:ee:dc:1d:55:80:3b:64:
aa:ac:98:85:7a:78:f3:3c:23:52:8d:df:d2:98:31:ec:63:ce:
af:ae:23:39:1f:1c:49:e3:9c:f3:ea:fd:76:bc:72:6e:ff:cc:
98:05:7a:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystUlSl348kwTRZJxEqsNqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYmFjY2NiNzRjNzdiZDVmZDJhYmVhM2U2MTJkODgxZWFi
NzMzNTYwHhcNMjYwMzAyMDQwMTI3WhcNMjYwMzAzMDQwMTI3WjAzMTEwLwYDVQQD
Eyg1YWEwOWQ2M2EyOWJlNTA3Mjc1ZjI1MzY0OGU1OTFlMzIyNDM4YjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn8CFz21H3SZ6yAQNYDTqHk9WF7Q
roTOCPcG14NtYPwSMB+lYBm02viy0Ov0yuQo1PVK/4aH8URaGCcozW+I/8WC3b13
UwIY6jy59GyNPPsatBBQ3CquocFZwXOqgnBXm0Fzd3Khc6HKrc7paOeWRTow5WqU
rOHnmFm2wXzUlKLdM0K/zAyeeOE5mVDLoE8ZjqJCIPHm2svM7p7RWZ5rI6KPcPgZ
W1qj2XYkAFIKbykPdG1cIEf9VKHD4/LUXElOCKqAUsm7rr4DZv8Y4sThoa1T88pk
0m03NuXQ7UmmYWjo2Q4hNKcqlGwIEo3amWohKb4RXV2ijGUaWoxxbIR6awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqgnWOim+UHJ18lNkjlkeMiQ4snMB8GA1UdIwQY
MBaAFAG6zMt0x3vV/Sq+o+YS2IHqtzNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWJyTXkzVEhlOVg5S3I2ajVoTFlnZXEzTTFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9hMTQ0ZTUtZmNlNi00YTUwLWJkMmEt
ODM3NDEwNDFiOGM3LzEvQWJyTXkzVEhlOVg5S3I2ajVoTFlnZXEzTTFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9hMTQ0ZTUtZmNlNi00YTUwLWJkMmEtODM3NDEwNDFiOGM3
LzEvQWJyTXkzVEhlOVg5S3I2ajVoTFlnZXEzTTFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArMiVzp5a
okQen0N7Cc1hrNqYe69t69w5EaNDR3s9jE4lsV+PftNZvdJZkDYz+wfuPFNAsHTQ
v5IhtzVOnC9WXiNBh33xvuuO5hiaZInkgeXQOO30IcF8LKx+pGg7WWHXmJeLjVgf
XwYtQ4n4jrKt8+aa5+m7PHB41nbQFA2sPJL3c/4UIQSBALW8X7CYifXMGacSrjUz
XZkvd+75IO7bNlwe3/nn78kS9yQZoOdu3LqaE1cIF37wjd5idAmu1rhZANpbinpz
IhExaSx0abZ6g2Xu3B1VgDtkqqyYhXp48zwjUo3f0pgx7GPOr64jOR8cSeOc8+r9
drxybv/MmAV6SA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:54 2026 by rpki-client