Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
File: abZsbpoUxv13P6Md-YILM5aVLi4.mft (raw, json)
Hash identifier: 7lkvOb0PZ5DOGLpGYSAbrtWF6bfKMeh3kAIro45OT5k=
Subject key identifier: 53:30:7D:67:96:37:8C:B7:B7:C7:C8:B8:DC:D1:3F:21:B5:53:B7:56
Authority key identifier: 69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
Certificate issuer: /CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
Certificate serial: 019D9999900548112676FC21EF8DF0098A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
Manifest number: 068D
Signing time: Fri 17 Apr 2026 04:01:11 +0000
Manifest this update: Fri 17 Apr 2026 04:01:11 +0000
Manifest next update: Sat 18 Apr 2026 04:01:11 +0000
Files and hashes: 1: F6jXQ7ol1eJRO8-zqzGGELWLPpU.roa (hash: VvXIzi7dvfLzRfzq8yrSH5FHAFTW+ckA8+wnrvNtY0E=)
2: abZsbpoUxv13P6Md-YILM5aVLi4.crl (hash: ibcI07wFn+o95OuUu2iv0gtWjLAkeoptQRK77ci8Uo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:90:05:48:11:26:76:fc:21:ef:8d:f0:09:8a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b66c6e9a14c6fd773fa31df9820b3396952e2e
Validity
Not Before: Apr 17 04:01:11 2026 GMT
Not After : Apr 18 04:01:11 2026 GMT
Subject: CN=53307d6796378cb7b7c7c8b8dcd13f21b553b756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:92:92:ba:af:3d:5a:53:74:e2:ab:41:be:ec:
69:b9:85:9d:a7:ef:81:b3:de:cb:5f:fe:6b:62:94:
f5:e7:7d:5d:55:95:d9:96:b9:de:ce:06:4a:58:b4:
ed:fc:e7:37:57:08:ed:8e:18:b2:53:46:cc:04:3c:
8a:4b:89:8b:f3:73:f6:af:e3:2b:39:a7:58:15:2d:
89:2e:e8:f0:0c:a3:53:aa:4a:18:1a:bb:47:5c:0f:
11:8a:d6:0c:5c:c6:fb:9d:27:39:52:8f:11:42:02:
bb:69:dc:d5:ee:75:35:5e:90:6d:e2:40:0c:84:bb:
8e:82:a2:fa:03:29:70:dd:04:4b:91:22:c3:a5:fc:
35:4a:ef:f5:93:a6:21:ac:b7:47:11:79:21:68:0d:
31:d5:44:d7:03:6b:b4:87:f6:d0:8f:93:58:84:1b:
d7:5c:6a:d5:c5:f2:62:6b:71:6f:fd:8c:a4:73:b3:
7e:39:e0:be:88:1d:ae:e0:d5:fe:bd:2c:7c:a8:4e:
0c:c9:4b:76:db:ef:2e:da:66:5b:54:5b:6b:ee:e8:
9e:41:57:5f:ff:40:68:81:a7:81:3a:11:1b:52:00:
9a:ca:96:fa:f0:1d:65:15:81:03:c6:93:f9:c5:56:
a7:35:82:a2:2e:b2:75:a9:0e:43:86:7f:4c:51:78:
4b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:30:7D:67:96:37:8C:B7:B7:C7:C8:B8:DC:D1:3F:21:B5:53:B7:56
X509v3 Authority Key Identifier:
keyid:69:B6:6C:6E:9A:14:C6:FD:77:3F:A3:1D:F9:82:0B:33:96:95:2E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abZsbpoUxv13P6Md-YILM5aVLi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9de70d-7425-4c07-a80f-42dc82cca192/1/abZsbpoUxv13P6Md-YILM5aVLi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f8:7f:e2:63:db:31:71:1b:94:51:df:1b:ee:b3:34:9c:19:
7a:6b:e9:f2:7a:34:70:d2:6e:61:70:23:59:81:2b:c2:2d:f5:
57:5a:e1:a4:68:66:0d:88:11:d2:e2:91:18:c8:90:3d:ef:5c:
26:18:0e:2e:73:ca:15:a4:19:b1:e5:64:6f:bd:98:6b:ff:73:
46:dc:fc:cc:ad:c0:a1:09:d7:30:8c:1d:28:89:28:d2:8c:8b:
6f:40:f8:18:75:a1:94:fa:29:4d:88:39:8e:bc:0a:0c:c2:8a:
01:a3:67:25:aa:81:42:73:04:87:b6:29:8a:fb:cc:8b:08:3e:
d3:d8:62:70:3c:1f:e1:11:a4:b4:1c:18:90:8a:a9:57:ee:6e:
c5:f8:31:e0:58:3a:d8:fe:ae:33:22:2b:82:e7:93:f3:3d:55:
37:5f:00:10:cf:3e:30:a3:27:ed:68:e3:8d:b9:d1:91:e3:cf:
ed:97:41:3e:5d:a6:d1:8e:9e:e2:aa:83:ec:3d:62:9c:5c:94:
61:e0:fe:20:58:b1:5e:a3:01:77:c1:0f:9c:3c:09:af:bd:bf:
33:1f:02:18:ad:7d:53:78:26:ed:d2:7a:38:2c:37:05:8f:a8:
a4:ac:8f:33:e4:70:9c:d0:22:fa:17:dd:4d:35:a7:79:91:e3:
b8:10:b9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:41:44 2026 by rpki-client