Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
File: aBnbgbSauhKxgQyzopnu5GMt1yA.mft (raw, json)
Hash identifier: mVn/mqI45s06g0uxDpk79pHatf6pk5iZTL9i+vHeH68=
Subject key identifier: 8C:CC:C9:BD:A5:98:88:31:17:BA:87:C5:F5:C7:43:9F:33:E2:9B:BD
Authority key identifier: 68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
Certificate issuer: /CN=6819db81b49aba12b1810cb3a299eee4632dd720
Certificate serial: 01A13AB6B46563A4436C2828397321113D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
Manifest number: 0673
Signing time: Wed 14 Oct 2026 14:00:14 +0000
Manifest this update: Wed 14 Oct 2026 14:00:14 +0000
Manifest next update: Thu 15 Oct 2026 14:00:14 +0000
Files and hashes: 1: PK2HVjD3GmdLB06ij0s7w3X0wCo.roa (hash: 1RKfa7PhpjR33QDEm1HWDfBtwC3Ch5Bq/qvovHpolJ0=)
2: aBnbgbSauhKxgQyzopnu5GMt1yA.crl (hash: ovxJMLy7tWk5G+FAOFl4u/Cq3xLfcIjWRMz1iWlvk60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:b6:b4:65:63:a4:43:6c:28:28:39:73:21:11:3d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6819db81b49aba12b1810cb3a299eee4632dd720
Validity
Not Before: Oct 14 14:00:14 2026 GMT
Not After : Oct 15 14:00:14 2026 GMT
Subject: CN=8cccc9bda598883117ba87c5f5c7439f33e29bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:04:e3:4d:2a:f6:08:74:c5:9b:61:9c:8a:4c:
ff:b2:9f:d7:45:a4:18:fc:04:68:0e:76:2e:70:d2:
ed:75:fe:6a:eb:15:7c:ae:3b:54:f7:62:71:97:49:
0d:9b:ad:ac:16:20:33:e9:fe:9b:53:e0:a5:e2:58:
3b:f7:28:61:07:ac:3e:0f:8e:4d:35:bd:07:ce:50:
e1:8e:a0:21:2f:08:d7:e9:92:18:9e:02:43:b2:0e:
e7:ec:b4:30:5b:00:9c:c8:7e:af:5b:85:97:2d:89:
bf:4b:97:af:24:af:15:31:a5:0f:77:ad:e8:58:4d:
50:2e:c8:fc:4a:0b:2e:e3:3f:d0:44:78:8f:26:27:
cf:c1:ea:22:0b:c9:94:ae:06:e4:fe:c5:5c:ee:fd:
76:f4:6d:60:d7:73:bb:4a:9c:9e:56:a8:52:fd:d0:
fc:ad:91:c7:89:b4:81:f5:2b:bd:f8:6b:14:37:56:
31:d8:4b:9c:35:ce:88:f0:42:0d:42:b2:4e:ca:b8:
19:24:b9:d9:d8:93:62:cc:08:4c:1c:28:4c:01:95:
fa:55:22:6c:e7:96:c7:97:26:93:1c:87:9d:68:24:
21:bb:72:e8:85:24:bd:98:45:bd:b1:2a:40:1f:31:
46:4f:e2:6e:ae:6e:da:6d:fc:c7:66:d2:b4:5f:3a:
5a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CC:C9:BD:A5:98:88:31:17:BA:87:C5:F5:C7:43:9F:33:E2:9B:BD
X509v3 Authority Key Identifier:
keyid:68:19:DB:81:B4:9A:BA:12:B1:81:0C:B3:A2:99:EE:E4:63:2D:D7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBnbgbSauhKxgQyzopnu5GMt1yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0e766a-72fe-47d2-a435-9035b0836243/1/aBnbgbSauhKxgQyzopnu5GMt1yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f4:04:bc:d2:60:35:a6:fb:ba:ae:e2:e0:57:23:cb:30:d4:
31:ed:41:e5:e6:27:66:a2:e7:c9:f3:f6:54:d8:71:6e:23:f1:
bb:ec:82:9d:65:d9:9a:46:a7:2f:f6:24:0f:b4:24:2b:2a:e5:
df:7a:04:60:1d:d3:2a:9f:5a:99:fa:93:4b:ee:64:2c:b7:45:
85:17:63:82:19:bd:6f:80:d7:96:63:30:40:28:ea:6f:79:dd:
f8:2b:f1:7a:90:96:63:09:da:f3:28:d6:5a:64:be:49:6f:37:
26:c0:f4:61:07:33:c0:94:ad:09:0c:d1:06:90:a1:5a:90:79:
88:b5:14:f9:22:00:ee:be:e7:7e:3e:38:51:0b:b7:03:44:2f:
20:37:d0:f2:a6:c9:f8:da:fd:4c:e6:7b:12:94:c4:6b:de:59:
36:fb:3a:88:47:62:27:b9:ca:1f:32:23:0b:16:68:ad:ef:0e:
52:d9:0f:65:3c:4a:80:3d:c9:93:63:9b:3e:44:f4:44:7f:ed:
4e:aa:3e:8c:2e:cc:8b:eb:6d:4e:c0:7c:17:ff:e5:0a:fd:6f:
7a:bd:2e:8f:52:4f:e7:d4:10:d5:53:81:22:9a:a6:04:de:9c:
3b:f9:8a:16:df:2d:88:45:10:38:10:3f:4b:35:33:c7:86:88:
43:7c:c2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:57:35 2026 by rpki-client