Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
File: ABCrc5F2m18sVOM8i1p9-fN6M6g.mft (raw, json)
Hash identifier: PsKLmwYZ3A7kBmv7SjVu4hUlFWmqykfr/UBxgSgjRrc=
Subject key identifier: 03:DD:2E:63:11:65:6D:E2:6B:B0:3E:4B:8D:FE:34:46:A0:D0:9B:72
Authority key identifier: 00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8
Certificate issuer: /CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
Certificate serial: 019CAA8F9A66090FCC2F264192E75305D493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 18:01:03 +0000
Manifest this update: Sun 01 Mar 2026 18:01:03 +0000
Manifest next update: Mon 02 Mar 2026 18:01:03 +0000
Files and hashes: 1: ABCrc5F2m18sVOM8i1p9-fN6M6g.crl (hash: NVpW1hciM6NK2C6hrY1o5QSdHQIlA6zqiCVgucuIcko=)
2: kgWGA2scOy7vL1BHpP0g-5WfRCQ.roa (hash: FazW3OzSsWSS9InjuTMHlSSn57uFOu+iI9WBoJvuTOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:9a:66:09:0f:cc:2f:26:41:92:e7:53:05:d4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0010ab7391769b5f2c54e33c8b5a7df9f37a33a8
Validity
Not Before: Mar 1 18:01:03 2026 GMT
Not After : Mar 2 18:01:03 2026 GMT
Subject: CN=03dd2e6311656de26bb03e4b8dfe3446a0d09b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:05:a6:ee:4b:e0:dd:89:ad:64:56:d2:ca:77:
51:3f:ea:42:ec:8a:9c:4a:c5:db:95:dd:02:7e:99:
32:0a:3b:6c:b1:8b:1a:6e:22:de:e7:00:a6:60:73:
21:a5:fa:bf:96:92:9a:82:38:e9:bf:84:46:b8:1f:
26:05:59:be:a2:58:2a:dd:f3:92:a9:48:98:89:6b:
48:51:39:42:98:c1:e9:45:dd:73:f6:64:eb:a2:7d:
2d:e9:41:20:2e:53:67:08:28:87:7f:1d:83:74:ff:
91:0c:70:a1:56:a9:41:bf:4d:ad:27:d1:2b:20:44:
31:c3:31:81:5b:c4:a9:02:3c:21:27:0a:c2:09:46:
07:00:09:a4:23:8c:7c:ce:e2:97:2d:f7:5c:65:40:
78:2f:85:f5:6a:60:b9:a0:b1:51:56:15:0a:7c:a2:
bf:d1:fe:4c:85:a3:2d:97:0d:81:08:b1:04:0a:15:
77:9c:b4:f8:f9:a0:18:f0:a1:26:11:8b:cc:d2:53:
b7:5e:46:3c:e6:63:51:85:01:97:26:ef:f6:23:19:
89:3b:4a:bf:59:94:92:e3:77:3d:73:b8:c7:50:40:
36:b1:dc:3d:d6:48:12:5f:59:4b:e3:85:ef:cd:ec:
f5:77:3e:cd:c7:3f:f7:9f:81:1b:1c:40:92:fc:1f:
39:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DD:2E:63:11:65:6D:E2:6B:B0:3E:4B:8D:FE:34:46:A0:D0:9B:72
X509v3 Authority Key Identifier:
keyid:00:10:AB:73:91:76:9B:5F:2C:54:E3:3C:8B:5A:7D:F9:F3:7A:33:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABCrc5F2m18sVOM8i1p9-fN6M6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c22f61-133c-4d0c-88cf-a155e3f9d529/1/ABCrc5F2m18sVOM8i1p9-fN6M6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ff:49:2e:30:13:c2:32:d7:99:75:ea:ad:f4:98:f2:e5:1b:
b3:d7:bd:b2:97:c6:b8:d9:34:5b:79:05:8e:4d:98:37:93:5e:
86:ac:a6:bd:19:db:6b:68:9a:e4:a1:fc:48:1e:dd:9c:47:db:
34:cf:c7:e4:57:d6:e4:77:2c:b1:9f:56:d3:e2:cc:3c:6a:77:
76:87:32:03:1d:f5:f4:50:d3:fe:52:73:a8:3a:8c:39:57:18:
30:8e:ef:85:d8:c6:7b:81:a8:9b:eb:4a:9e:29:25:1f:14:c1:
c8:15:8f:34:a3:43:2a:09:a7:af:75:e3:31:86:92:59:48:ae:
89:72:6c:40:d9:73:82:07:41:19:68:d6:98:4d:36:db:2a:44:
8b:b8:41:fa:68:1d:d3:1c:91:8a:c7:83:53:aa:61:6f:7b:b2:
f2:de:4c:a1:42:45:5c:1e:ad:a9:e1:b4:dc:94:22:03:28:ba:
ae:fd:83:2b:e5:61:8e:64:32:12:1e:fb:63:fb:76:81:98:5e:
f5:77:35:35:41:49:0a:cf:ba:ed:d1:9d:61:45:8b:42:2e:33:
ff:bc:5c:6c:ea:39:7b:8d:51:b7:dc:1a:68:ba:46:0c:1b:c1:
a2:12:a7:ba:3c:a3:40:b2:f2:20:48:6b:67:b4:9e:d6:df:4e:
43:65:5c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:46 2026 by rpki-client