Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
File: AblFvZ9KDnOPSRWctrba8iSG1cA.mft (raw, json)
Hash identifier: vnEUs1yn4IJkkZn9dP0v6bN7ZAHEYZDF+G3xgbtD5z8=
Subject key identifier: E3:7F:BB:04:A7:5F:B6:0B:FD:B5:C1:CA:7D:87:29:9E:49:E9:79:20
Authority key identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
Certificate issuer: /CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Certificate serial: 019EC06D44CF91BFA103CC76AA485FF08E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
Manifest number: 102A
Signing time: Sat 13 Jun 2026 10:00:46 +0000
Manifest this update: Sat 13 Jun 2026 10:00:46 +0000
Manifest next update: Sun 14 Jun 2026 10:00:46 +0000
Files and hashes: 1: AblFvZ9KDnOPSRWctrba8iSG1cA.crl (hash: 9e9FyaRmYh+/HjMYBd2fVs3nDgP/BfmmD+B0j44dQuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:44:cf:91:bf:a1:03:cc:76:aa:48:5f:f0:8e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Validity
Not Before: Jun 13 10:00:46 2026 GMT
Not After : Jun 14 10:00:46 2026 GMT
Subject: CN=e37fbb04a75fb60bfdb5c1ca7d87299e49e97920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bb:60:6d:16:e2:7e:c1:38:f2:54:9a:44:76:
ac:ff:e5:ea:a6:62:68:5b:d1:5c:46:a6:e8:48:af:
da:ec:44:a0:2b:bd:a2:a2:b3:1c:95:33:e9:b1:54:
f2:ef:d7:4c:2d:fb:74:96:f5:22:62:da:37:f4:10:
3d:e3:7b:8d:6d:b3:e7:e1:a4:96:16:47:be:8e:3b:
e6:87:e5:4a:72:09:9d:3b:b2:03:0d:c6:f6:59:dc:
77:29:82:1f:4c:af:b0:45:89:5a:33:13:e1:01:1c:
4c:20:60:87:35:c4:59:6c:80:ad:7e:2e:7e:cd:be:
7b:ad:d0:46:b8:ee:18:36:95:ae:2b:51:d5:5e:86:
bc:61:9b:e9:fb:4b:e7:9f:8e:19:80:c5:4e:a9:3d:
62:b5:61:1c:d0:78:9d:6b:aa:53:6f:22:9c:cd:ab:
6a:9b:d8:37:8f:35:77:c3:22:3e:c5:ae:ea:30:c8:
6e:65:a5:55:4b:62:fb:d4:be:c1:f7:4f:16:bd:5f:
84:65:4a:2e:29:06:20:0a:92:e4:b3:62:88:10:1b:
12:55:b3:cf:88:00:22:d4:dc:b5:14:6c:02:88:84:
53:7a:b9:61:a8:22:f0:e1:30:f7:5a:69:67:ba:41:
e7:86:55:13:b9:1f:0f:e7:7b:68:c2:1b:19:32:f9:
09:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7F:BB:04:A7:5F:B6:0B:FD:B5:C1:CA:7D:87:29:9E:49:E9:79:20
X509v3 Authority Key Identifier:
keyid:01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:dd:e0:fe:a1:fd:6d:65:24:95:47:2a:15:4e:bd:dd:9f:4d:
d0:c6:54:12:a2:50:d6:eb:81:af:75:5e:e2:78:d1:d1:0e:b4:
3a:08:49:a4:08:73:db:ca:29:9b:06:61:63:ee:9a:9c:cd:89:
68:8d:8a:93:da:42:7e:aa:aa:c1:94:9d:44:ab:d5:0f:29:2b:
29:ed:d3:c1:d4:d7:02:47:04:91:28:40:3d:ea:8c:b5:7f:cb:
3b:39:7d:68:c4:dc:13:d8:0b:f2:e0:1c:51:df:4f:22:92:2b:
45:f8:b8:17:2e:60:6d:d0:c7:69:28:67:d5:f1:b3:60:b3:cb:
61:ab:5e:ff:64:09:82:54:d3:e2:97:49:f9:5d:74:fc:b7:77:
36:12:96:13:bd:40:ef:1c:72:7d:23:aa:20:40:2e:92:35:ee:
d4:7d:72:a9:30:15:72:ed:21:3c:d1:4f:69:05:db:a8:91:d2:
a0:9f:73:7a:9d:16:06:c0:c9:6f:04:8c:b9:8a:32:42:5e:94:
cb:cd:5b:e7:24:e5:35:36:3f:ca:1a:de:98:ea:c8:fe:3c:5f:
11:fe:fc:82:89:82:34:68:ba:d9:d2:9a:b9:1c:20:be:22:de:
b7:f2:6d:07:f4:1c:2d:fe:5f:11:d0:16:fa:21:93:a5:88:24:
a6:76:cf:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbUTPkb+hA8x2qkhf8I4KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYjk0NWJkOWY0YTBlNzM4ZjQ5MTU5Y2I2YjZkYWYyMjQ4
NmQ1YzAwHhcNMjYwNjEzMTAwMDQ2WhcNMjYwNjE0MTAwMDQ2WjAzMTEwLwYDVQQD
EyhlMzdmYmIwNGE3NWZiNjBiZmRiNWMxY2E3ZDg3Mjk5ZTQ5ZTk3OTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrtgbRbifsE48lSaRHas/+XqpmJo
W9FcRqboSK/a7ESgK72iorMclTPpsVTy79dMLft0lvUiYto39BA943uNbbPn4aSW
Fke+jjvmh+VKcgmdO7IDDcb2Wdx3KYIfTK+wRYlaMxPhARxMIGCHNcRZbICtfi5+
zb57rdBGuO4YNpWuK1HVXoa8YZvp+0vnn44ZgMVOqT1itWEc0Hida6pTbyKczatq
m9g3jzV3wyI+xa7qMMhuZaVVS2L71L7B908WvV+EZUouKQYgCpLks2KIEBsSVbPP
iAAi1Ny1FGwCiIRTerlhqCLw4TD3WmlnukHnhlUTuR8P53towhsZMvkJ8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFON/uwSnX7YL/bXByn2HKZ5J6XkgMB8GA1UdIwQY
MBaAFAG5Rb2fSg5zj0kVnLa22vIkhtXAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWJsRnZaOUtEbk9QU1JXY3RyYmE4aVNHMWNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84YzllZGItYTIyNi00NWFkLThiM2It
ZDNiZDdhYjNlZDM2LzEvQWJsRnZaOUtEbk9QU1JXY3RyYmE4aVNHMWNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy84YzllZGItYTIyNi00NWFkLThiM2ItZDNiZDdhYjNlZDM2
LzEvQWJsRnZaOUtEbk9QU1JXY3RyYmE4aVNHMWNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVd3g/qH9
bWUklUcqFU693Z9N0MZUEqJQ1uuBr3Ve4njR0Q60OghJpAhz28opmwZhY+6anM2J
aI2Kk9pCfqqqwZSdRKvVDykrKe3TwdTXAkcEkShAPeqMtX/LOzl9aMTcE9gL8uAc
Ud9PIpIrRfi4Fy5gbdDHaShn1fGzYLPLYate/2QJglTT4pdJ+V10/Ld3NhKWE71A
7xxyfSOqIEAukjXu1H1yqTAVcu0hPNFPaQXbqJHSoJ9zep0WBsDJbwSMuYoyQl6U
y81b5yTlNTY/yhremOrI/jxfEf78gomCNGi62dKauRwgviLet/JtB/QcLf5fEdAW
+iGTpYgkpnbPHw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:52:47 2026 by rpki-client