Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
File: AblFvZ9KDnOPSRWctrba8iSG1cA.mft (raw, json)
Hash identifier: +GuUAjlM9aq/7+F3IBC4eOOMLST3GAFoix9kACcH8Dc=
Subject key identifier: CF:76:6D:87:21:54:E8:D0:4C:CE:35:81:7E:91:86:71:24:AB:96:99
Authority key identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
Certificate issuer: /CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Certificate serial: 019FAA1A352B5ACDCAF67DB61EA64DDDC60D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
Manifest number: 10A3
Signing time: Tue 28 Jul 2026 19:01:11 +0000
Manifest this update: Tue 28 Jul 2026 19:01:11 +0000
Manifest next update: Wed 29 Jul 2026 19:01:11 +0000
Files and hashes: 1: AblFvZ9KDnOPSRWctrba8iSG1cA.crl (hash: 12nxbXEceMzUS4RVoa/xHJdUsGiF9Acfrfs3v22zJD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:35:2b:5a:cd:ca:f6:7d:b6:1e:a6:4d:dd:c6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Validity
Not Before: Jul 28 19:01:11 2026 GMT
Not After : Jul 29 19:01:11 2026 GMT
Subject: CN=cf766d872154e8d04cce35817e91867124ab9699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:dd:4b:9a:4a:91:5e:3d:61:3e:14:b8:f9:c4:
d5:86:c1:39:b4:b8:98:08:8e:79:94:48:b0:59:3e:
eb:c2:48:a7:9a:01:05:ba:f3:c9:d6:bd:f7:da:e3:
29:f9:85:ff:12:62:04:49:d8:de:2c:3d:bd:9a:20:
d0:18:c9:88:04:11:1d:82:c6:93:f8:ff:5a:df:3c:
4b:1e:d8:a4:ea:09:7e:37:5b:86:1b:fc:0d:5b:bd:
ad:36:0f:f7:f7:b5:c5:2a:40:98:35:6f:95:01:f8:
1f:4a:1a:39:4d:cd:e6:89:f1:e2:49:4b:53:05:c9:
89:74:6a:db:43:77:61:c5:05:97:d7:43:aa:91:76:
5a:4e:97:ff:2b:d3:a2:10:fa:1c:5a:49:e4:d0:64:
8c:7d:79:58:2f:58:cd:b2:02:fa:a5:12:7e:00:9b:
b1:29:62:3c:2c:a0:af:80:21:2c:33:98:e7:d4:2b:
3f:76:bb:4c:5d:34:8e:29:c7:bf:9f:4c:fc:08:77:
73:40:4c:8e:78:05:02:6d:fa:f0:5d:a9:c6:6c:3a:
42:b8:e6:42:91:32:87:71:e7:c9:1f:c5:ca:bc:ed:
7d:9a:b5:64:94:bc:75:96:9a:11:b7:70:e5:7e:54:
df:8f:57:db:a9:46:09:9e:d2:06:ca:15:d1:70:93:
7f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:76:6D:87:21:54:E8:D0:4C:CE:35:81:7E:91:86:71:24:AB:96:99
X509v3 Authority Key Identifier:
keyid:01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:50:a5:da:6b:95:52:7e:cd:39:48:56:d3:4b:7a:a2:98:99:
fd:7e:45:44:9b:81:4b:3b:f8:5b:c0:4b:73:2b:bd:c7:da:eb:
4a:29:e1:31:cc:d8:ad:50:0d:32:9c:1b:46:34:10:f5:6b:2c:
a1:43:f3:9d:3a:03:52:2c:8b:92:e3:5c:e2:74:b4:30:af:50:
65:77:39:7c:ba:44:56:88:e9:60:31:b7:5c:c2:05:27:a1:f2:
6e:75:39:7f:f9:52:e0:e8:84:e9:ce:56:f9:70:5f:75:76:3b:
41:ee:92:60:e0:b3:2e:5d:4c:40:75:61:8b:63:0a:4b:5a:a7:
ce:e7:62:00:9d:58:d5:43:aa:12:62:d7:44:0f:3d:82:37:44:
83:ff:86:be:f7:21:94:7a:e7:e7:0d:c2:bb:68:af:b1:79:2e:
6b:ad:9b:f2:8f:89:7e:44:35:c3:3b:bd:fb:a6:62:93:af:ce:
da:94:0e:2e:0b:70:b6:e6:14:34:9a:58:5a:cd:bc:76:81:d2:
7b:94:a5:4b:16:aa:7a:62:6d:bf:7b:c2:f5:03:8e:55:69:0b:
7b:d2:24:50:70:16:e2:5f:4f:ea:57:04:c0:96:78:0f:c6:f1:
37:bd:3b:c0:7e:a7:c9:e8:04:d3:42:4e:31:6d:16:b7:da:35:
09:d7:07:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGjUrWs3K9n22HqZN3cYNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYjk0NWJkOWY0YTBlNzM4ZjQ5MTU5Y2I2YjZkYWYyMjQ4
NmQ1YzAwHhcNMjYwNzI4MTkwMTExWhcNMjYwNzI5MTkwMTExWjAzMTEwLwYDVQQD
EyhjZjc2NmQ4NzIxNTRlOGQwNGNjZTM1ODE3ZTkxODY3MTI0YWI5Njk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjd1LmkqRXj1hPhS4+cTVhsE5tLiY
CI55lEiwWT7rwkinmgEFuvPJ1r332uMp+YX/EmIESdjeLD29miDQGMmIBBEdgsaT
+P9a3zxLHtik6gl+N1uGG/wNW72tNg/397XFKkCYNW+VAfgfSho5Tc3mifHiSUtT
BcmJdGrbQ3dhxQWX10OqkXZaTpf/K9OiEPocWknk0GSMfXlYL1jNsgL6pRJ+AJux
KWI8LKCvgCEsM5jn1Cs/drtMXTSOKce/n0z8CHdzQEyOeAUCbfrwXanGbDpCuOZC
kTKHcefJH8XKvO19mrVklLx1lpoRt3DlflTfj1fbqUYJntIGyhXRcJN/QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM92bYchVOjQTM41gX6RhnEkq5aZMB8GA1UdIwQY
MBaAFAG5Rb2fSg5zj0kVnLa22vIkhtXAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWJsRnZaOUtEbk9QU1JXY3RyYmE4aVNHMWNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84YzllZGItYTIyNi00NWFkLThiM2It
ZDNiZDdhYjNlZDM2LzEvQWJsRnZaOUtEbk9QU1JXY3RyYmE4aVNHMWNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy84YzllZGItYTIyNi00NWFkLThiM2ItZDNiZDdhYjNlZDM2
LzEvQWJsRnZaOUtEbk9QU1JXY3RyYmE4aVNHMWNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlCl2muV
Un7NOUhW00t6opiZ/X5FRJuBSzv4W8BLcyu9x9rrSinhMczYrVANMpwbRjQQ9Wss
oUPznToDUiyLkuNc4nS0MK9QZXc5fLpEVojpYDG3XMIFJ6HybnU5f/lS4OiE6c5W
+XBfdXY7Qe6SYOCzLl1MQHVhi2MKS1qnzudiAJ1Y1UOqEmLXRA89gjdEg/+Gvvch
lHrn5w3Cu2ivsXkua62b8o+JfkQ1wzu9+6Zik6/O2pQOLgtwtuYUNJpYWs28doHS
e5SlSxaqemJtv3vC9QOOVWkLe9IkUHAW4l9P6lcEwJZ4D8bxN707wH6nyegE00JO
MW0Wt9o1CdcHjg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:35:22 2026 by rpki-client