Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
File: AblFvZ9KDnOPSRWctrba8iSG1cA.mft (raw, json)
Hash identifier: /FoTZFcA1pH99dsTaJvxbP5JrmH49dVclWkJhzQ1f4Y=
Subject key identifier: 9A:3F:D4:4C:A1:F6:0F:7F:E1:36:4B:3F:2F:5A:08:92:33:4B:1E:3A
Authority key identifier: 01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
Certificate issuer: /CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Certificate serial: 019DA29CB936E1A3E8AA66EEDCB474F75D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
Manifest number: 0F96
Signing time: Sat 18 Apr 2026 22:01:13 +0000
Manifest this update: Sat 18 Apr 2026 22:01:13 +0000
Manifest next update: Sun 19 Apr 2026 22:01:13 +0000
Files and hashes: 1: AblFvZ9KDnOPSRWctrba8iSG1cA.crl (hash: 2OJ3aMmjLL1M18Xfi4UfmOZb6KHY8KEWl0drNOvpUd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:b9:36:e1:a3:e8:aa:66:ee:dc:b4:74:f7:5d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01b945bd9f4a0e738f49159cb6b6daf22486d5c0
Validity
Not Before: Apr 18 22:01:13 2026 GMT
Not After : Apr 19 22:01:13 2026 GMT
Subject: CN=9a3fd44ca1f60f7fe1364b3f2f5a0892334b1e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c4:a6:42:58:c6:93:dd:07:3b:a7:95:dc:bb:
37:ce:02:a9:10:3e:ae:ae:4d:c3:92:98:10:18:fa:
aa:e8:a7:40:77:b7:07:3b:1b:30:e5:12:30:2b:06:
01:56:80:b4:f0:d3:da:16:01:80:76:90:4c:48:e8:
0b:92:89:dc:56:48:e3:a2:c3:12:49:95:b8:83:7f:
db:f8:96:e3:92:c8:df:6b:d9:6c:67:de:96:96:ad:
08:38:72:7a:ca:13:5a:eb:f6:0d:44:bf:e6:69:0a:
c1:89:72:37:51:f3:04:f7:d3:2c:42:1e:14:69:e8:
45:35:88:30:8a:68:43:90:b9:4a:ef:31:9e:4a:cf:
39:f9:f2:4b:a1:9e:08:12:31:99:fd:07:66:d8:40:
ec:99:46:65:09:b0:b2:57:44:b2:94:f0:d1:a9:62:
2c:e9:de:12:49:c3:f5:53:b1:05:91:f9:af:15:fa:
c4:ea:c1:06:23:af:0c:5a:59:eb:e1:89:ee:4a:d7:
6e:2d:c8:8a:97:a9:c2:db:fe:77:84:7e:d8:91:23:
c0:cf:90:49:15:8d:76:4b:61:72:06:f7:13:65:ea:
02:e3:b2:fe:1b:0c:4f:11:e9:8a:b6:10:19:36:01:
ac:f0:93:fd:5e:90:2c:66:a1:80:6c:95:bf:d0:1d:
21:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3F:D4:4C:A1:F6:0F:7F:E1:36:4B:3F:2F:5A:08:92:33:4B:1E:3A
X509v3 Authority Key Identifier:
keyid:01:B9:45:BD:9F:4A:0E:73:8F:49:15:9C:B6:B6:DA:F2:24:86:D5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AblFvZ9KDnOPSRWctrba8iSG1cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8c9edb-a226-45ad-8b3b-d3bd7ab3ed36/1/AblFvZ9KDnOPSRWctrba8iSG1cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b2:66:37:45:01:5c:6b:e4:8c:6c:a6:50:fd:62:bb:d2:9b:
37:00:9d:e0:8f:44:a8:70:a1:95:e1:e3:58:4c:3c:fc:02:1d:
ff:44:78:77:bf:b1:96:8b:9c:d2:66:2a:08:e7:1d:24:d2:e6:
0b:6a:e0:f4:fb:de:80:76:f5:b2:b1:bb:b7:c0:73:88:a8:38:
e2:92:3f:62:23:b5:0f:29:5f:80:0e:25:9a:35:34:21:21:25:
23:b7:81:1a:6d:b9:06:41:ba:1b:47:2f:eb:21:ca:a0:b8:2d:
55:a9:9b:29:10:66:f8:57:4b:d1:43:3f:04:c1:75:db:9f:b5:
62:da:dc:05:c1:d3:66:36:bd:d6:38:af:8d:14:b0:4d:37:55:
cc:9f:50:1c:1a:cb:e5:ee:5b:26:13:3b:b1:f6:4e:7f:ef:71:
3d:69:87:86:1c:10:82:55:31:4f:7a:2e:7a:40:83:79:05:50:
35:ef:3d:f0:49:d3:3a:23:b6:0e:e5:22:0c:74:12:46:07:32:
c4:da:9b:cc:dc:8a:74:2b:36:61:c7:46:bc:63:88:ee:9a:48:
18:10:77:b9:40:fb:63:96:e1:fb:ab:67:9d:db:15:2e:db:26:
a8:84:68:50:ac:68:67:b9:ff:93:a3:3f:c0:7d:2a:de:0d:86:
80:83:97:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:29 2026 by rpki-client