Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
File: AbP6KriQG0FeEIOIcsY9nwzhNq0.mft (raw, json)
Hash identifier: yoBHsK9vIhhepAlRuvnBd2J+h89qinYeu9BgZ59Wsy0=
Subject key identifier: 31:0E:41:31:B2:A6:DD:4C:B0:BC:FA:34:A5:19:5B:22:79:1B:AD:05
Authority key identifier: 01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
Certificate issuer: /CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Certificate serial: 019CAC7E1380251AF02EB0DB25099F718090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 03:01:09 +0000
Manifest this update: Mon 02 Mar 2026 03:01:09 +0000
Manifest next update: Tue 03 Mar 2026 03:01:09 +0000
Files and hashes: 1: AbP6KriQG0FeEIOIcsY9nwzhNq0.crl (hash: +e4IuxNwUcp48oYF/l5qy9XOIOHNZi0uBeCpmcfCitw=)
2: ScMeUXtgJA8SRus0dm3wNSK0EOE.roa (hash: cMjCrYF2rReOwGbNBwruLGRrluqmFIhueIspSRNu/dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:13:80:25:1a:f0:2e:b0:db:25:09:9f:71:80:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Validity
Not Before: Mar 2 03:01:09 2026 GMT
Not After : Mar 3 03:01:09 2026 GMT
Subject: CN=310e4131b2a6dd4cb0bcfa34a5195b22791bad05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6b:ab:4e:cb:91:2d:ba:d2:f5:16:db:fb:05:
ce:13:e8:3f:db:43:9e:5b:8b:b5:13:f1:ff:79:c0:
08:bb:e5:59:8c:7c:4a:58:ea:d2:a0:a7:9a:41:1d:
2f:44:d1:e1:4f:ec:06:f4:8c:30:30:81:05:5d:b6:
ae:6d:7d:19:0b:9c:54:b6:2a:f0:29:f6:a2:22:ca:
0c:f9:7d:69:6f:a1:92:d6:2f:ae:b2:47:be:b8:d5:
25:56:16:91:1c:80:a2:e1:3c:71:34:57:26:21:93:
06:f6:eb:ae:f4:db:f2:c4:cc:a8:e4:da:b5:04:d6:
70:85:b9:c7:34:f3:6b:9d:69:d3:52:22:cf:af:86:
f8:2f:e9:4e:88:79:6c:27:3c:28:ba:9f:3d:03:74:
e0:b0:27:6a:80:f7:85:5b:ae:b1:52:8e:b4:60:55:
a7:16:ba:8e:e0:84:f8:a2:ce:a7:44:d1:12:4c:6f:
9a:51:c4:e0:23:fe:d2:c5:1c:ff:4d:ce:74:63:6e:
3a:99:06:0d:41:a0:6a:fe:b1:ed:fe:b6:ea:a6:e5:
11:54:7e:23:73:12:00:ce:c9:cf:8e:f3:a9:e4:f2:
56:aa:2a:5f:25:37:b9:ef:d4:86:f4:39:8c:c0:7e:
d2:93:62:09:a9:55:54:ad:b6:3e:a7:61:bb:df:68:
33:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0E:41:31:B2:A6:DD:4C:B0:BC:FA:34:A5:19:5B:22:79:1B:AD:05
X509v3 Authority Key Identifier:
keyid:01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:30:f2:cd:56:01:76:82:0e:b3:62:fd:e7:e1:47:c8:68:a6:
b6:56:11:d2:f8:bd:d0:f8:32:e9:0c:aa:2b:55:c0:68:68:05:
31:da:5e:7c:6f:8f:03:4c:0a:66:94:c9:48:ca:6c:1d:67:d7:
15:5e:70:b3:08:01:ea:61:11:68:f7:cf:09:1b:d3:56:2a:6a:
71:58:67:de:55:54:95:d7:1e:a3:c0:b2:a2:f6:68:8f:0b:99:
6b:6c:39:e9:73:21:a9:64:47:3a:53:e1:7b:80:46:d7:e9:5d:
ef:77:92:68:d3:54:ba:6b:c0:0e:00:93:44:90:4b:ae:b0:c5:
e9:f4:80:6f:7d:69:6a:ef:3b:90:df:53:69:4f:4b:ca:64:c2:
64:f0:c2:f8:9b:e0:56:18:7d:07:da:c6:f6:14:ee:62:7b:94:
5b:24:b0:d8:34:8f:c5:88:49:28:33:58:b1:3c:08:92:6c:20:
83:f8:67:d2:c5:e0:89:ec:d4:23:c6:eb:3a:f3:7a:60:90:d8:
4a:1c:4c:ce:13:64:8e:83:2e:4f:02:42:20:a1:60:34:d3:e2:
23:8f:dd:e9:5a:01:2a:88:d2:3a:e6:42:b6:9c:10:21:89:37:
f8:a5:c9:96:8a:68:df:18:0c:34:65:ea:9a:48:b9:a7:5f:fc:
6e:a6:88:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:45 2026 by rpki-client