Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
File: AblFvZ9KDnOPSRWctrba8iSG1cA.mft (raw, json)
Hash identifier: I5MRBTuK1AqJrqrFVeI8Ns0GiXufq35gjJcXaa1WLZU=
Subject key identifier: 5D:38:AD:17:0B:67:4C:8A:2B:54:57:E2:2B:27:52:8E:5B:CC:85:AD
Authority key identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
Certificate issuer: /CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Certificate serial: 019CAB6B97FA155B1705DFD9A0FB7C83A95A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
Manifest number: 0F16
Signing time: Sun 01 Mar 2026 22:01:21 +0000
Manifest this update: Sun 01 Mar 2026 22:01:21 +0000
Manifest next update: Mon 02 Mar 2026 22:01:21 +0000
Files and hashes: 1: AblFvZ9KDnOPSRWctrba8iSG1cA.crl (hash: M1IX62kZaZPraTm2NLYwN2K/jImHBCviqAiyrpWM848=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:97:fa:15:5b:17:05:df:d9:a0:fb:7c:83:a9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Validity
Not Before: Mar 1 22:01:21 2026 GMT
Not After : Mar 2 22:01:21 2026 GMT
Subject: CN=5d38ad170b674c8a2b5457e22b27528e5bcc85ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a8:5b:bc:97:26:6d:20:7b:c3:3e:3d:22:e8:
c9:ef:e1:00:72:0e:53:3f:2a:2b:52:45:4d:2b:0b:
5f:87:c3:56:cc:ad:ab:31:3b:36:86:e6:37:ea:d4:
d9:ad:7b:1b:09:28:64:13:fc:27:3c:fb:96:89:c3:
bb:d1:6a:9d:af:1a:cf:68:76:17:47:63:f2:27:38:
72:5f:ff:c6:2c:fc:a7:5c:37:f8:02:94:71:f8:9d:
60:1b:38:33:66:4f:58:dd:e7:3d:20:8d:98:39:48:
86:93:16:58:04:55:41:7a:d7:1e:24:71:7c:3c:b0:
4a:9c:57:fc:6a:ed:e3:ee:0d:d2:a9:c7:60:42:f8:
52:ba:c0:ea:92:96:68:6b:48:d6:7d:31:62:33:9d:
f2:19:e3:56:02:9f:76:93:da:44:53:a0:d9:d0:4c:
15:e5:5c:5a:f1:a4:2e:3a:07:55:c0:3a:c9:6e:87:
90:f6:31:9f:0f:a5:a7:2c:f9:a8:72:d4:85:35:a6:
38:b6:75:9a:35:b5:5f:5d:84:78:45:10:49:6f:0d:
9f:8f:4d:2a:32:86:b4:9b:f9:63:1b:ec:89:ef:2a:
2e:ab:40:98:53:80:15:b9:20:22:87:3f:cd:93:c7:
f9:df:7f:b9:14:36:c9:e0:51:9b:1c:07:50:ae:e4:
0e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:38:AD:17:0B:67:4C:8A:2B:54:57:E2:2B:27:52:8E:5B:CC:85:AD
X509v3 Authority Key Identifier:
keyid:01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8e:55:69:34:a5:dc:9d:3d:b6:b8:8e:0c:6d:33:fb:d7:72:
69:f0:c7:1b:b2:2b:4b:45:e0:ec:5a:2b:77:dc:78:6e:1e:0f:
3f:90:6c:2a:97:14:68:9c:bc:53:b0:8e:4f:63:58:bf:15:8f:
67:d5:06:95:d1:1d:0e:17:c6:d9:35:41:35:27:8b:fd:a8:f0:
de:7f:0d:e9:aa:2e:1a:da:97:8e:17:7c:83:47:a5:7d:92:77:
e7:43:d9:f0:09:6b:84:47:dd:ff:b3:a4:bd:7f:7a:ac:0e:51:
4c:e7:1b:0d:9c:e1:1e:3e:89:18:54:ca:19:60:04:fa:6a:f6:
04:16:36:cd:33:78:2d:8d:25:12:eb:c2:14:2e:a6:c7:b5:e1:
1c:bd:d1:b9:22:aa:73:96:b6:c6:ca:c3:ff:11:fa:65:a0:22:
fd:ce:39:7b:95:fd:88:0d:94:81:12:cd:5c:b3:97:ca:f5:69:
85:a5:eb:11:11:b4:cc:ce:6c:10:9e:a3:31:c5:6c:08:cf:4e:
e5:13:0c:5e:df:a0:f8:7a:43:dd:41:15:dc:e9:5e:07:c4:4f:
68:5e:88:e6:e7:73:66:98:b2:f6:e1:7d:3c:b5:f4:2c:d7:f2:
56:90:c1:54:3c:26:8a:6b:91:6b:84:d7:40:d2:2a:b1:a8:c6:
94:ee:7c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:27 2026 by rpki-client