Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
File: AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft (raw, json)
Hash identifier: SksLHUYc3ikt6CNNkTcNbbYXXWHHUR26tCER9pBRYqk=
Subject key identifier: 44:03:D0:3A:7A:97:C1:66:9D:07:95:21:42:17:75:59:76:BC:7D:89
Authority key identifier: 01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
Certificate issuer: /CN=01bae509df7ec524d4f750ff809274ab00649322
Certificate serial: 01A0C4B2313417A6E9E62685DA1595942646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
Manifest number: 14D9
Signing time: Mon 21 Sep 2026 16:00:07 +0000
Manifest this update: Mon 21 Sep 2026 16:00:07 +0000
Manifest next update: Tue 22 Sep 2026 16:00:07 +0000
Files and hashes: 1: AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl (hash: W/Cz3kNKlatxoRX5uthJaA+HCNBrMSZyW9fUaEj6Sn0=)
2: Tovu6XYvf5FhR28kdlA-7wKtBkE.roa (hash: mC271DkpvmHL0CjopsqGxIT+uNy91sh6WEkjNwzeRxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:31:34:17:a6:e9:e6:26:85:da:15:95:94:26:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bae509df7ec524d4f750ff809274ab00649322
Validity
Not Before: Sep 21 16:00:07 2026 GMT
Not After : Sep 22 16:00:07 2026 GMT
Subject: CN=4403d03a7a97c1669d0795214217755976bc7d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:79:df:f7:d7:16:a0:56:53:48:44:95:5d:d1:
6d:3b:5b:f7:e7:c9:c0:1e:45:a0:90:00:cb:f6:84:
d4:06:a8:a7:76:8a:91:2f:46:60:fe:da:d6:9d:2e:
42:09:7c:84:a9:03:e6:26:41:1e:30:45:2e:6c:1f:
f7:12:0d:38:9c:21:ab:87:9e:33:8a:5c:4d:64:16:
ac:87:db:32:f4:91:ff:51:b9:27:22:dd:ac:c4:70:
3e:78:49:d4:76:b9:96:b1:ae:c8:4d:e1:9f:31:1f:
82:8f:f7:85:38:04:f1:e7:01:5b:14:e9:9d:21:9d:
89:5e:97:0e:8a:11:4e:fd:95:56:09:83:31:c5:e8:
af:16:1d:ee:d0:34:26:a1:71:f8:93:24:7d:9c:42:
63:5e:6c:ba:be:4e:98:9a:c3:18:ed:14:08:b1:2c:
6f:2b:cb:ca:d2:30:a4:1b:f0:85:74:be:64:8f:8e:
16:a0:7e:86:50:95:79:49:41:5e:1d:1f:ce:1b:fe:
cc:2e:13:bc:52:27:f1:5c:08:ba:ae:20:0a:21:7f:
5b:c3:3c:da:6c:e9:99:0e:d1:9d:cd:f2:8d:cd:79:
5e:b6:07:24:29:71:90:b5:88:63:fb:b3:e7:3f:bd:
f3:ea:44:77:9d:7f:88:71:e0:9a:20:57:eb:b3:76:
24:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:03:D0:3A:7A:97:C1:66:9D:07:95:21:42:17:75:59:76:BC:7D:89
X509v3 Authority Key Identifier:
keyid:01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:32:d3:cb:c1:05:c9:51:63:44:23:c5:57:bf:ca:fd:72:ef:
a8:f9:7c:09:20:ea:95:9a:42:7a:bf:8d:b6:fc:0b:68:e5:ec:
12:27:b6:cb:6a:26:2f:7b:44:b7:81:c5:80:6e:35:fd:fe:e1:
91:b4:d3:f6:bf:bc:cb:c5:23:9d:a0:f5:33:dd:45:1e:b2:ba:
d2:e3:9d:f2:82:59:e0:4f:29:3a:d2:ed:e5:0d:17:ad:27:a8:
b1:21:19:8f:90:7b:eb:b4:6a:cd:23:02:cc:f9:e1:df:c7:f3:
65:29:8b:f8:e8:e3:4e:81:b3:1b:76:4b:f2:0f:38:bc:39:bf:
7a:a0:3e:90:7b:1e:fd:89:8c:7f:7b:ff:71:c6:3c:ac:9a:8d:
74:91:6d:f3:6c:64:e1:df:04:f6:dd:9c:d0:68:a4:4d:27:e6:
5b:7a:53:09:c5:a7:99:68:e4:8f:bd:4a:1d:c9:38:f2:ff:95:
17:29:7e:2d:c0:6a:2a:cf:98:d2:0f:12:54:49:aa:31:f4:13:
2a:b0:07:ae:68:ef:88:17:fa:63:9d:35:79:08:13:80:1f:93:
75:ec:5f:cb:1c:4e:be:fc:9f:1d:85:6b:15:b0:8a:97:0a:b3:
23:4d:2d:55:46:ab:0b:fc:39:02:71:63:4c:70:e0:dd:e1:6f:
4d:97:4f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:51:04 2026 by rpki-client