Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
File: AblFvZ9KDnOPSRWctrba8iSG1cA.mft (raw, json)
Hash identifier: jp3TUEDMCjXG3I9os38EkUil24RxdKv8MYl4cd07B18=
Subject key identifier: 5A:77:02:21:83:CD:FB:DE:94:60:29:1B:EA:C2:10:0B:65:85:CF:60
Authority key identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
Certificate issuer: /CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Certificate serial: 01A0C21FE1374006EC663B2FCC92ADF8E5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
Manifest number: 1134
Signing time: Mon 21 Sep 2026 04:01:04 +0000
Manifest this update: Mon 21 Sep 2026 04:01:04 +0000
Manifest next update: Tue 22 Sep 2026 04:01:04 +0000
Files and hashes: 1: AblFvZ9KDnOPSRWctrba8iSG1cA.crl (hash: oR7Aaow6Rn7xteOEQbkCLO9z+yQl/Ol1JZs0asOba7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:e1:37:40:06:ec:66:3b:2f:cc:92:ad:f8:e5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Validity
Not Before: Sep 21 04:01:04 2026 GMT
Not After : Sep 22 04:01:04 2026 GMT
Subject: CN=5a77022183cdfbde9460291beac2100b6585cf60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b0:3d:7b:84:af:60:bb:36:2d:c5:a2:b8:c4:
cc:7b:5b:59:cb:6e:e5:e8:3f:70:91:be:a0:d8:ae:
e8:01:28:aa:0d:d1:cd:60:69:ad:4c:a8:da:45:09:
0a:41:9a:5a:a4:9a:f2:4d:67:ad:8d:aa:dc:eb:40:
9e:13:17:8b:a9:fb:c5:a2:42:8d:06:49:cd:26:a6:
60:7e:03:12:d3:74:56:22:3b:ae:6a:5d:0f:2a:75:
0c:a8:17:6b:ca:db:c0:1c:90:49:73:01:9d:87:64:
d8:f8:0a:cd:06:14:76:52:3f:b0:b5:e8:14:f3:b4:
c6:f9:ac:77:0a:78:46:5e:cd:90:1d:12:30:11:23:
66:95:45:38:e4:1f:f5:fe:2c:db:a0:6e:07:ef:7f:
7d:49:5b:ae:e0:61:5e:16:92:54:f8:ed:73:e0:24:
5a:2a:02:ca:4e:a6:4e:c1:8e:10:0c:65:c9:5a:e2:
10:e0:a9:ee:13:4f:4e:da:dd:2c:ad:aa:8c:c6:6f:
84:97:93:0b:b6:d3:25:04:9b:38:e6:5a:df:d1:d1:
4e:64:ae:5e:b5:aa:3a:0c:20:d4:6c:bc:d1:60:42:
60:5c:1c:b1:fc:a0:93:b9:3e:3b:40:b6:63:bb:ad:
4e:7c:10:17:11:44:0d:bd:2e:bd:0d:39:ba:f8:e2:
e4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:77:02:21:83:CD:FB:DE:94:60:29:1B:EA:C2:10:0B:65:85:CF:60
X509v3 Authority Key Identifier:
keyid:01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:89:c7:72:cf:bb:dc:1c:7c:6e:52:bb:dc:8d:e9:94:99:ce:
5c:36:08:38:d5:56:3e:7d:05:e3:e2:96:40:9e:c9:3f:bd:ab:
f1:0b:e3:02:d3:02:32:6c:3d:94:ed:53:89:04:6e:f6:29:01:
5e:12:99:94:a4:36:eb:94:32:a8:7d:01:14:34:ea:52:ae:68:
f0:bb:06:a9:b0:3a:15:3c:3d:0e:b9:e7:7a:8a:ad:38:e9:19:
3e:89:53:54:ec:fe:b0:90:33:8c:08:85:72:96:88:a2:b6:18:
59:e0:0c:ae:e8:97:5d:e6:88:b1:e2:f8:a2:69:d6:b4:fe:80:
8b:95:df:68:9e:9e:07:64:17:47:24:3b:c2:5e:81:79:27:2f:
21:1e:78:b4:cd:42:8b:9f:02:24:7e:51:72:b5:52:3d:7b:f0:
d1:6f:a4:df:d6:f3:5f:3c:9d:f8:c9:37:5f:d9:cf:35:d0:4a:
9d:92:e8:33:79:24:8b:5c:fd:ad:6c:3b:90:a9:95:6e:51:c6:
4a:31:9d:88:98:1b:50:4b:e0:7c:96:01:04:3d:b4:ac:9a:39:
b9:5d:12:41:8f:4b:26:c0:43:ec:5f:9b:0b:c2:cd:ce:fe:30:
5c:3d:cb:01:04:f2:e0:2c:9d:26:3c:ad:40:2d:12:9d:74:01:
f4:df:88:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:05:00 2026 by rpki-client