Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
File: AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft (raw, json)
Hash identifier: SvXkMm8sYGPxL+V1CsVNbqq1TENzGckypvEECajFeCs=
Subject key identifier: A2:11:F5:7D:B8:47:0A:1D:04:79:D3:1B:60:7C:43:77:A4:89:5F:A1
Authority key identifier: 01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
Certificate issuer: /CN=01bae509df7ec524d4f750ff809274ab00649322
Certificate serial: 019CAA21F8FEFAC85E0D7411F70D6AD98684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
Manifest number: 12B9
Signing time: Sun 01 Mar 2026 16:01:18 +0000
Manifest this update: Sun 01 Mar 2026 16:01:18 +0000
Manifest next update: Mon 02 Mar 2026 16:01:18 +0000
Files and hashes: 1: AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl (hash: B3Ju5oe9ria1ZRWxaW7L7MPTQP15uPDmI0x+KsVztn8=)
2: Tovu6XYvf5FhR28kdlA-7wKtBkE.roa (hash: mC271DkpvmHL0CjopsqGxIT+uNy91sh6WEkjNwzeRxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:f8:fe:fa:c8:5e:0d:74:11:f7:0d:6a:d9:86:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01bae509df7ec524d4f750ff809274ab00649322
Validity
Not Before: Mar 1 16:01:18 2026 GMT
Not After : Mar 2 16:01:18 2026 GMT
Subject: CN=a211f57db8470a1d0479d31b607c4377a4895fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:3c:15:d4:4c:1b:8b:90:c9:cd:4a:90:65:
3d:cb:b1:0e:f6:c8:5b:37:f2:ff:11:da:2b:0c:92:
73:00:42:bb:59:8d:38:92:62:58:9b:6e:d0:3a:63:
a1:ba:d9:6e:17:a9:0d:89:78:25:d4:cb:5c:71:79:
a9:47:10:2b:b5:1f:6a:83:37:35:98:18:50:fa:f2:
55:62:53:78:9d:a6:cf:4c:b7:bc:d0:95:1c:9f:96:
3a:ff:d4:fb:ea:9b:f2:12:f7:e2:7f:87:b1:9d:d9:
c2:71:4c:5f:54:1b:1c:34:4e:08:dc:e7:39:9f:9b:
30:2b:eb:08:6c:d3:7a:a4:06:d7:27:05:28:08:6d:
68:f4:6c:bb:33:23:e6:4e:a8:54:95:cd:c5:4c:6a:
a5:8e:55:87:bf:12:24:dc:20:f6:ad:3c:39:3d:2a:
2f:f1:f7:bf:df:f1:92:38:e8:8f:f4:bb:1a:53:47:
72:1a:1c:d3:24:04:6c:53:32:19:7e:12:b4:9e:4f:
01:0e:25:94:d7:5d:c0:88:8a:f2:45:5b:b4:c4:db:
9a:42:77:ab:d5:b2:7d:7f:9b:a0:97:2c:40:e6:f1:
95:73:6b:50:5a:7d:29:8f:c1:df:f3:bf:c3:33:7e:
cd:35:23:e7:91:ff:9e:2b:2d:9b:a3:da:b6:6c:76:
6e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:11:F5:7D:B8:47:0A:1D:04:79:D3:1B:60:7C:43:77:A4:89:5F:A1
X509v3 Authority Key Identifier:
keyid:01:BA:E5:09:DF:7E:C5:24:D4:F7:50:FF:80:92:74:AB:00:64:93:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrlCd9-xSTU91D_gJJ0qwBkkyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/afbac0-e7a5-4c95-88b6-84a9efec0d1b/1/AbrlCd9-xSTU91D_gJJ0qwBkkyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c6:86:81:b8:d0:05:aa:a7:db:37:14:d6:c2:f5:f2:54:90:
e7:22:70:28:df:d9:00:09:b5:ed:24:42:01:83:5d:a9:c1:ef:
ca:0c:0d:aa:d4:07:18:45:72:8c:e9:c4:b8:7c:bf:d2:10:70:
37:37:c8:47:c1:16:7c:e6:2b:c3:c2:fa:e4:9c:ca:25:95:95:
7a:53:77:68:78:4e:50:cb:40:d4:5d:a3:3c:0c:08:a3:a2:41:
37:13:95:60:eb:ad:7d:58:98:e9:88:57:14:1e:02:b7:a2:ef:
ed:f2:69:23:32:f8:a5:66:0c:38:38:82:22:45:4e:d9:c5:87:
0e:fa:e5:a9:3f:74:3f:5b:5f:64:72:fe:fb:ca:63:45:9e:26:
6c:2a:26:2d:43:c4:cc:da:01:09:67:0b:e5:1c:46:bd:ac:c6:
5d:d8:53:5e:03:8d:6e:3f:30:b9:74:5f:e9:d6:6e:81:7a:f6:
14:05:93:c8:6e:7a:07:6b:59:a3:98:2b:0b:e8:4f:0b:2f:05:
f5:49:34:96:67:d7:a7:62:48:60:e3:21:35:e5:96:97:2a:e3:
74:cd:8b:6d:67:4d:c1:9c:f4:56:55:87:03:9c:12:1f:de:e8:
dc:5f:d1:13:dd:9a:e1:8d:be:5d:bd:90:c6:67:cb:7e:83:9b:
e4:f4:1a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:35 2026 by rpki-client