Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
File: AbP6KriQG0FeEIOIcsY9nwzhNq0.mft (raw, json)
Hash identifier: OECI8W1HtmIQivCiBishBsubrY2xwHvNIRra5rAyOYU=
Subject key identifier: 86:23:F0:C6:1C:AC:9A:C0:93:8D:24:24:C4:E6:3B:68:9C:11:36:F8
Authority key identifier: 01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
Certificate issuer: /CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Certificate serial: 019D9A076439FF25DB2862F65413C5F037CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 06:01:08 +0000
Manifest this update: Fri 17 Apr 2026 06:01:08 +0000
Manifest next update: Sat 18 Apr 2026 06:01:08 +0000
Files and hashes: 1: AbP6KriQG0FeEIOIcsY9nwzhNq0.crl (hash: BuISUk7LCsCUErUKWHwZCIjJnIRnC2LKJJm4a+W0Jqs=)
2: ScMeUXtgJA8SRus0dm3wNSK0EOE.roa (hash: cMjCrYF2rReOwGbNBwruLGRrluqmFIhueIspSRNu/dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:64:39:ff:25:db:28:62:f6:54:13:c5:f0:37:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b3fa2ab8901b415e10838872c63d9f0ce136ad
Validity
Not Before: Apr 17 06:01:08 2026 GMT
Not After : Apr 18 06:01:08 2026 GMT
Subject: CN=8623f0c61cac9ac0938d2424c4e63b689c1136f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:61:e4:68:56:b2:89:ee:7b:9f:50:46:22:
da:8e:50:28:93:b4:27:2c:46:6f:52:c2:57:f1:33:
a1:d6:ec:49:fa:a2:9f:eb:67:02:44:a6:48:b9:dd:
67:3a:a5:00:68:bc:12:5d:ce:f3:94:09:cf:1e:40:
77:52:64:48:3d:2b:d0:39:a3:47:f3:46:ba:ec:de:
4c:5b:2c:64:0b:80:03:f0:a8:0d:78:c2:b4:69:66:
20:61:52:c6:ec:00:3e:83:e5:49:51:32:b0:7c:af:
94:91:0c:20:24:18:50:1e:50:78:0f:14:38:ae:3b:
66:f1:d8:93:1e:a3:7f:bb:c8:1e:41:e3:d3:d8:44:
5c:9b:bc:9b:53:84:8d:e6:cc:95:68:75:d2:1a:46:
e7:15:09:cf:a3:1a:22:68:c4:c3:77:68:b3:ab:3e:
9a:de:1c:3b:6b:e2:df:1e:0d:84:5c:ea:0f:ea:a8:
cd:f9:f6:a5:be:84:90:66:ac:57:80:0c:f5:c1:46:
5a:e9:b8:ee:77:32:64:8f:77:b3:52:91:88:1a:4d:
26:d9:74:4f:5c:21:4b:35:d3:17:cf:cb:49:8f:9f:
5e:09:7f:11:31:aa:9f:59:86:fa:7e:5f:c1:0c:00:
49:70:5d:70:ff:00:12:13:29:b8:f2:e5:79:db:cb:
f5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:23:F0:C6:1C:AC:9A:C0:93:8D:24:24:C4:E6:3B:68:9C:11:36:F8
X509v3 Authority Key Identifier:
keyid:01:B3:FA:2A:B8:90:1B:41:5E:10:83:88:72:C6:3D:9F:0C:E1:36:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbP6KriQG0FeEIOIcsY9nwzhNq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/42bda6-a5da-471b-a3bf-81ecb490fb86/1/AbP6KriQG0FeEIOIcsY9nwzhNq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:cb:ca:fa:5c:06:73:94:43:c9:34:db:df:42:2d:f6:01:97:
95:77:2a:a0:b7:b2:01:00:43:8b:29:07:68:f3:f3:99:dd:79:
84:e5:08:b8:03:f5:97:de:e8:b3:c2:11:9c:92:ad:d9:20:2d:
d2:e8:5a:49:90:e8:85:2c:0c:d1:9a:46:77:24:56:32:b5:8d:
5b:c2:4b:59:3d:ab:26:4e:9a:91:fe:8c:85:6f:39:0f:da:96:
3e:d2:b4:f4:a3:f8:11:a4:4e:ef:7b:0a:d7:30:07:53:e6:c5:
62:b7:3e:38:c5:71:48:8c:97:87:24:16:dc:64:75:f6:73:c8:
b4:90:5d:23:c4:63:92:1a:3e:f6:21:db:da:b9:5a:04:89:8d:
0f:91:ff:c2:6f:29:8f:7f:be:d3:b2:45:7d:b7:d5:47:cf:59:
fd:3b:90:7a:5f:31:68:49:ee:15:3c:e7:f8:69:fd:bd:f9:41:
0f:cc:59:e2:f1:9d:0e:6b:ab:65:da:dc:05:01:da:1b:7f:df:
aa:a3:78:f5:a3:b9:c5:30:4e:8a:73:a1:50:0c:f8:ee:25:00:
d5:0c:a9:c0:20:4c:d4:fe:bd:59:34:a8:61:22:0b:b5:e5:3a:
6c:c9:12:7a:65:7b:cd:70:3d:c9:20:00:ed:79:ed:f1:37:8b:
ca:0f:85:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:16 2026 by rpki-client