Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
File: abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json)
Hash identifier: /ZijZRD6oGiqRG04LTRVtg6CuRo2FrvsUIv4VwyV38Q=
Subject key identifier: 3B:AA:8D:7B:1B:FF:DF:59:F3:C8:69:8E:47:A0:C1:3C:9E:B1:6A:D6
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 01A0BF8C7A655178B0DEC3657B7D04AB4219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
Manifest number: 0E9E
Signing time: Sun 20 Sep 2026 16:00:49 +0000
Manifest this update: Sun 20 Sep 2026 16:00:49 +0000
Manifest next update: Mon 21 Sep 2026 16:00:49 +0000
Files and hashes: 1: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: iRS+/YJixdkxDpomrFuLSn/vX6R8aobhyI2hFj5/ztY=)
2: epJ5NtfvH1g3tuK4xd9nscSiEoA.roa (hash: niW0UBzEk+eWx8n4afLHbWheyJix/ATlxCY23FXANN8=)
3: hpFPFF4swm17BfKeLPrET14DerI.roa (hash: /w3PMxP9jyIQ4EgZwsRkLDa6435IO8C6U7QCr8ty+WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:8c:7a:65:51:78:b0:de:c3:65:7b:7d:04:ab:42:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: Sep 20 16:00:49 2026 GMT
Not After : Sep 21 16:00:49 2026 GMT
Subject: CN=3baa8d7b1bffdf59f3c8698e47a0c13c9eb16ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:19:06:18:04:36:be:39:df:e5:fe:ad:42:
9c:8d:3d:4e:47:1c:78:ad:26:dc:07:fb:68:20:be:
8f:8c:03:d1:86:5b:31:22:57:53:91:86:77:09:d7:
83:49:a7:13:67:e6:9f:4a:d0:9e:7c:e3:81:a8:08:
a8:1f:72:cc:42:89:e0:c2:0d:d3:03:18:14:22:86:
f4:03:c4:8e:8c:fa:af:ae:42:73:70:b4:67:53:f4:
6e:f5:dd:fb:f9:58:c5:e0:5a:ab:e3:ef:32:7c:b1:
5e:79:e2:cc:c8:75:b9:b7:57:79:93:b1:2f:4d:dc:
4d:fa:3b:a9:4c:10:a2:3a:ae:1b:8b:6d:26:eb:b6:
91:a5:ce:14:95:7c:30:d4:7a:52:73:b3:75:61:e0:
14:42:bd:fd:3a:cb:27:d1:8e:ab:99:6f:d7:5d:46:
1e:d3:66:bf:39:6e:1a:f9:d9:a0:7d:0a:8e:23:f2:
90:0e:e8:3f:83:f7:af:c1:fe:41:9f:65:44:ba:d2:
c4:19:f1:3b:f8:14:05:8b:98:74:8f:c0:fd:d0:67:
d1:e2:a4:ed:1f:bf:1c:1d:d6:cb:15:ea:81:c2:9a:
c3:4f:ff:e7:c2:02:4d:4c:e2:bd:ba:24:58:45:06:
08:98:65:97:ea:d6:bf:32:65:71:fc:72:d0:ee:cc:
72:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AA:8D:7B:1B:FF:DF:59:F3:C8:69:8E:47:A0:C1:3C:9E:B1:6A:D6
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:e7:51:3b:a5:c5:ee:d5:31:50:f3:05:59:59:37:8d:db:7e:
94:39:d5:cb:8a:12:44:cb:4f:89:68:af:5c:b0:dd:4c:ed:36:
1a:e3:1b:3f:e1:bd:5a:cf:58:22:e7:f1:ca:64:1c:79:c6:e4:
71:87:a2:dd:85:35:70:74:14:03:ee:ed:99:8d:51:2d:9a:b5:
7d:0b:f6:a9:54:de:03:20:e0:0a:d1:af:42:94:5d:62:d6:c0:
58:49:3c:22:dc:f2:03:00:6c:e6:1d:55:89:e0:9a:fd:bd:92:
fc:42:52:c4:77:fa:d6:4b:73:18:2f:c6:bb:90:db:69:72:51:
f6:15:f6:83:d2:20:54:2c:ab:1b:78:9a:b4:6a:86:58:e3:ef:
11:94:30:e7:ba:6c:02:6e:73:c9:96:89:2d:b8:d7:ab:b8:49:
3b:1c:72:59:b8:5b:14:55:b4:77:0d:05:da:a6:e0:77:31:4a:
aa:dd:e4:c6:99:06:cc:15:24:d9:55:43:2a:2b:65:59:d7:00:
0e:85:29:fd:23:21:19:f9:d3:98:bb:7a:fb:fa:99:6f:f2:7a:
14:50:c3:09:38:ff:b8:a2:5e:0a:a2:c9:20:11:30:3f:cf:5d:
bd:5b:dd:89:ca:2b:86:0c:45:13:fb:ef:63:98:be:83:32:e7:
4c:24:2b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:00:33 2026 by rpki-client