Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
File: AbP6KriQG0FeEIOIcsY9nwzhNq0.mft (raw, json)
Hash identifier: emXHI+op4rcz8CCWU/N0tcVI+KoUxgDPlRJqA0BH7GQ=
Subject key identifier: 02:10:08:C5:7A:C4:82:F3:D2:57:18:FF:BD:24:75:7E:AB:87:70:8F
Authority key identifier: 01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
Certificate issuer: /CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Certificate serial: 01A0C8FD9BF31CC04F9444942F4BD04C7FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 12:00:58 +0000
Manifest this update: Tue 22 Sep 2026 12:00:58 +0000
Manifest next update: Wed 23 Sep 2026 12:00:58 +0000
Files and hashes: 1: AbP6KriQG0FeEIOIcsY9nwzhNq0.crl (hash: rla8/9VDGJrUfS1V+e/a7zn9DXRVLtrr2p8LpuvDz5g=)
2: ScMeUXtgJA8SRus0dm3wNSK0EOE.roa (hash: cMjCrYF2rReOwGbNBwruLGRrluqmFIhueIspSRNu/dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:9b:f3:1c:c0:4f:94:44:94:2f:4b:d0:4c:7f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Validity
Not Before: Sep 22 12:00:58 2026 GMT
Not After : Sep 23 12:00:58 2026 GMT
Subject: CN=021008c57ac482f3d25718ffbd24757eab87708f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3e:69:25:f4:2e:bb:5d:64:a0:8d:69:9d:c7:
e4:5c:39:ac:17:c1:69:2c:9d:2b:c5:a4:05:4a:4b:
26:86:df:66:6c:1b:99:4e:8d:f7:59:4a:c5:58:4b:
77:0f:cf:75:8b:9e:bd:f9:9c:b6:93:93:c8:fd:bf:
4b:a6:18:ce:78:a0:80:39:91:d3:ab:03:3f:fd:a0:
f3:b5:55:54:f4:5a:02:c5:4d:25:20:b9:a6:44:06:
44:7c:c8:ea:f3:65:80:95:b3:b5:2c:95:1d:11:76:
07:d9:1b:a3:d3:36:3e:ee:fb:08:ff:c9:74:10:93:
03:c2:db:f1:97:c9:fb:c6:71:6f:39:64:6f:17:5e:
9a:da:9b:9b:ed:7f:2b:d8:79:e9:17:e8:13:36:65:
f1:f5:7b:1c:53:a7:6d:dd:b4:d6:9d:37:af:a7:c9:
19:b8:0c:a6:54:e9:2f:92:ca:09:d8:a7:99:11:51:
7c:6c:b5:7a:dc:31:f9:54:13:47:19:48:23:1b:36:
47:a2:74:c5:28:86:7a:74:71:6f:04:1f:c1:a9:43:
c9:bf:74:ad:7f:ff:ec:8a:53:78:f0:f6:64:d0:7d:
9e:81:32:29:e6:d5:aa:cc:97:f9:e9:b9:aa:a1:a7:
97:b0:9a:9e:39:50:d0:5c:98:3a:03:3a:0f:ae:1a:
26:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:10:08:C5:7A:C4:82:F3:D2:57:18:FF:BD:24:75:7E:AB:87:70:8F
X509v3 Authority Key Identifier:
keyid:01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c7:67:60:63:bf:48:a7:83:70:fe:5c:b4:7d:12:db:a7:6f:
99:46:f7:ba:40:8b:f2:75:c0:23:54:d9:5d:63:d2:77:64:2d:
fd:57:03:25:2c:ee:38:2d:c0:fa:72:f5:40:0c:fb:44:fc:9e:
11:da:d6:ca:94:3b:dc:69:cd:d6:50:f8:22:cf:6f:fa:0f:9e:
13:d5:bc:da:21:9d:2b:fd:91:9a:2e:aa:74:f0:f1:87:03:b1:
87:78:89:6b:ab:94:15:93:b0:2c:df:20:de:4b:78:8d:a1:ce:
7e:a8:64:89:01:dc:8a:62:e3:6f:03:ff:a3:71:01:17:f5:0e:
59:9a:4a:8f:8f:1c:f5:03:f3:e2:e0:b8:ee:2e:fa:e4:87:75:
6e:cc:9a:8d:2d:fc:1b:e7:ba:42:f8:ce:c7:54:94:5f:9f:c6:
0a:a1:53:f4:20:38:36:1c:73:ab:6e:5c:f7:f5:95:cf:ea:20:
57:35:81:5d:c6:31:ec:d5:e3:1c:28:f8:62:30:d0:e4:ec:12:
08:f3:7e:cc:d9:02:86:70:3b:9b:4b:eb:9b:e6:4e:b9:f7:79:
27:21:ef:e1:36:47:c7:77:cf:96:82:e8:64:b9:55:9c:c9:7d:
7b:10:5d:23:3f:38:71:65:83:a9:68:f4:55:10:47:ad:bd:1b:
37:c3:97:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:04:03 2026 by rpki-client