Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
File: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft (raw, json)
Hash identifier: Qb1ojv7/oj4VcJK3DdDsbcIlJLN6Dp7XyU+EsGt+GtU=
Subject key identifier: 96:0C:54:23:BC:31:E2:1A:1E:28:C3:77:F7:C1:3A:C4:86:EC:AA:10
Authority key identifier: 01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
Certificate issuer: /CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Certificate serial: 01A0E43ECE3AEF004E70BCCEE0B738CE19E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
Manifest number: 1A79
Signing time: Sun 27 Sep 2026 19:01:56 +0000
Manifest this update: Sun 27 Sep 2026 19:01:56 +0000
Manifest next update: Mon 28 Sep 2026 19:01:56 +0000
Files and hashes: 1: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl (hash: 6qHUpwmPbsXbvF7eiYRAmAA+B7xs6ZbFq4MQiOh7Ssw=)
2: lU3BCZBDNlCDk-8OFyyOit3pGFs.roa (hash: AWI11iVTlePwywxMYMGqGux5nESZadW+LVNcBQPGHWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3e:ce:3a:ef:00:4e:70:bc:ce:e0:b7:38:ce:19:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Validity
Not Before: Sep 27 19:01:56 2026 GMT
Not After : Sep 28 19:01:56 2026 GMT
Subject: CN=960c5423bc31e21a1e28c377f7c13ac486ecaa10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:91:c4:dc:90:2c:7d:d4:e7:04:43:1f:fc:72:
6a:ac:31:71:21:fa:f9:1c:f5:6d:5f:11:35:00:78:
f0:1d:b7:58:db:37:7f:0f:f2:65:85:5c:c8:da:47:
41:7e:74:10:c8:0f:9b:be:cd:bd:ee:0a:3b:42:c6:
36:2f:43:8a:4f:4b:91:88:5c:5c:5a:1e:b2:85:a6:
22:6d:7d:c0:42:2f:26:d4:31:3d:10:78:7c:19:1c:
d5:02:aa:2e:a3:02:6d:23:70:9f:dc:c0:a9:b9:ea:
a7:fe:85:0f:8b:8f:b3:8f:9f:b6:49:87:d5:b6:14:
44:dd:4e:69:a9:06:c4:5a:a9:0e:51:47:7f:5d:a5:
70:a4:fb:a8:a4:26:2c:36:b0:10:5e:99:09:e5:f6:
4c:a6:7f:aa:70:56:69:74:69:2b:0f:d2:18:b7:1d:
a1:eb:8b:c6:43:7b:cb:f7:51:de:72:75:e2:60:83:
14:14:3b:fe:85:bb:2f:c3:61:05:fb:7d:b2:e6:6c:
b9:4f:bc:88:a9:55:be:51:22:71:b6:4e:12:1e:8b:
c5:47:53:ed:be:57:21:5d:19:a2:55:a0:59:0d:40:
24:e3:72:2d:cc:73:ab:05:99:fc:5e:e0:1b:a6:53:
48:b1:c6:fb:b8:b0:5a:04:16:e1:fb:bc:61:4c:51:
97:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0C:54:23:BC:31:E2:1A:1E:28:C3:77:F7:C1:3A:C4:86:EC:AA:10
X509v3 Authority Key Identifier:
keyid:01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:2a:7b:9a:d2:0f:08:27:3b:d3:f9:14:c1:50:9e:f6:a4:b6:
a4:6b:07:74:22:77:3d:e4:1b:3b:cd:08:e2:61:9e:b9:f4:24:
5e:00:6c:16:8c:63:53:bd:34:85:7e:e4:eb:60:68:ad:0b:57:
49:39:83:ea:3d:e3:b0:e2:a3:1c:9e:31:e7:13:ff:1c:bb:19:
d5:4f:d2:fd:bb:77:4c:4f:25:83:ce:65:ec:78:c3:52:b4:68:
51:14:31:61:30:70:8c:af:e8:04:1d:f6:e0:ef:22:ef:ba:d5:
88:98:aa:17:4f:f1:91:05:49:f0:47:dc:93:39:af:d6:1a:09:
02:e5:65:31:f8:47:11:e6:a4:d3:3a:df:d8:9d:07:92:41:0c:
42:87:2e:ad:a0:22:29:74:9a:04:d7:0d:94:e3:7e:49:22:78:
ac:32:c9:4f:3b:9a:7a:55:d8:86:a0:c1:07:93:fb:c3:5e:0c:
07:b1:12:34:fb:7a:81:90:82:d0:f7:04:c7:2a:17:06:ab:d1:
c7:35:a3:ff:f7:93:94:f3:b2:56:a5:4d:e6:4a:c3:56:16:2a:
70:db:62:61:3c:bf:e3:0b:fe:01:ee:a1:81:3b:99:a3:83:e0:
b1:63:d8:49:15:3f:08:ef:8c:ac:f0:66:0c:40:d1:cf:48:23:
15:82:e1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:01:33 2026 by rpki-client