Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
File: abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json)
Hash identifier: Q/a5wSK1seoDVYtHqDWBB0ZEy9op/W0jE0pl5cxNYBU=
Subject key identifier: 62:E1:F7:58:6F:A0:8E:CC:79:1E:C2:05:F5:95:D1:C3:39:01:5C:57
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial: 019D9C2C69F793DDA2EE1888A021DB14F745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
Manifest number: 0CFE
Signing time: Fri 17 Apr 2026 16:00:49 +0000
Manifest this update: Fri 17 Apr 2026 16:00:49 +0000
Manifest next update: Sat 18 Apr 2026 16:00:49 +0000
Files and hashes: 1: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: XneANu24BSYMD/veKhG9IVW4r3Nbva92NjJeXCD/9n0=)
2: epJ5NtfvH1g3tuK4xd9nscSiEoA.roa (hash: niW0UBzEk+eWx8n4afLHbWheyJix/ATlxCY23FXANN8=)
3: hpFPFF4swm17BfKeLPrET14DerI.roa (hash: /w3PMxP9jyIQ4EgZwsRkLDa6435IO8C6U7QCr8ty+WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:69:f7:93:dd:a2:ee:18:88:a0:21:db:14:f7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
Validity
Not Before: Apr 17 16:00:49 2026 GMT
Not After : Apr 18 16:00:49 2026 GMT
Subject: CN=62e1f7586fa08ecc791ec205f595d1c339015c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5b:db:75:27:5c:1a:8d:17:30:3d:47:75:29:
b8:73:3c:e0:f1:a2:43:14:56:27:81:65:c0:88:28:
68:f3:a8:d3:76:37:45:4c:bd:4f:58:e5:25:0f:0b:
ca:ec:0b:3c:d0:9d:f5:30:0b:1d:7d:58:43:c2:5e:
be:34:af:0f:55:eb:cb:1b:40:d2:f9:b5:66:40:aa:
56:54:01:1d:cf:3f:dc:82:4f:32:ed:38:64:f4:14:
73:e5:77:5c:8e:73:eb:ab:8e:0e:6d:d7:00:6a:94:
07:a5:4c:5a:7f:7d:8d:40:be:af:40:0e:4b:63:a1:
76:1d:8f:e1:94:ce:0a:f0:93:2d:f6:95:a4:db:4a:
1f:17:07:d4:d2:ab:8a:13:68:d5:3b:cb:35:53:5f:
8a:34:51:39:27:83:3d:3a:d1:88:aa:5c:3d:9a:1d:
aa:dc:50:b7:11:70:69:3e:f1:c3:15:15:1a:0e:9c:
f0:c4:43:ad:d2:ee:b2:7f:5c:be:7e:73:92:e9:81:
5a:6e:1e:6b:41:9b:91:a4:10:4f:53:f7:5b:e9:bf:
c7:36:8a:c4:7a:8f:aa:bc:0c:ed:90:0e:07:82:70:
14:0e:79:83:a7:59:80:91:d3:16:f1:f5:e9:bf:33:
b8:9b:86:03:ca:d6:1e:13:c9:0d:08:10:d2:cb:cc:
e9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E1:F7:58:6F:A0:8E:CC:79:1E:C2:05:F5:95:D1:C3:39:01:5C:57
X509v3 Authority Key Identifier:
keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f2:55:fb:6f:b8:1e:46:df:84:61:d0:00:ec:e6:95:f4:aa:
a0:57:86:fb:cb:7c:4d:1e:07:d6:9a:fe:b0:41:03:da:14:b8:
e1:f7:95:ee:4a:d1:64:d0:19:7f:9f:9e:f4:77:86:28:e9:38:
e8:98:48:5c:53:0c:b1:28:5f:04:60:25:31:5a:f0:c2:53:23:
d3:3d:be:26:d8:0a:77:bf:12:fe:37:bd:d0:c9:77:68:2d:64:
84:6b:04:49:6f:a6:3b:0f:9b:8d:c0:0d:9e:11:93:47:0a:e5:
83:f3:e5:e9:40:14:3b:46:c5:b7:07:4a:b4:f1:17:a7:48:1a:
3e:22:46:e4:92:e8:04:de:5e:66:e9:bd:2f:6e:0d:83:69:b9:
91:06:4b:08:7c:46:48:b6:11:08:10:2e:f9:53:6e:9b:04:58:
cb:d1:15:c2:43:77:6a:0e:89:4e:7e:88:b1:f4:7c:e0:06:0d:
e1:50:b6:14:45:07:30:95:40:37:00:f0:73:c2:bb:73:b9:a8:
ec:65:6b:57:03:99:0e:02:1e:6d:77:f9:fd:3e:75:ab:d1:02:
2e:c5:d8:4f:04:7c:23:95:fa:38:3c:24:3d:8c:db:9a:de:e5:
b4:01:ed:d6:4a:f7:4b:69:07:5e:4f:16:01:dc:4f:14:07:42:
60:97:31:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:06:31 2026 by rpki-client