Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
File: aBYXGz-RsdELBEWYf2EUKKvxPho.mft (raw, json)
Hash identifier: rsHUcL+FrazI2hlbVCYaQZeJwINUdeu0E5aLQgiYeJ8=
Subject key identifier: 91:70:24:36:13:C5:AC:2B:1C:E1:37:DB:C5:25:16:A1:9D:42:32:BC
Authority key identifier: 68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
Certificate issuer: /CN=6816171b3f91b1d10b0445987f611428abf13e1a
Certificate serial: 019CADFE889F7398781A3365EF0C9902B352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
Manifest number: 032D
Signing time: Mon 02 Mar 2026 10:01:05 +0000
Manifest this update: Mon 02 Mar 2026 10:01:05 +0000
Manifest next update: Tue 03 Mar 2026 10:01:05 +0000
Files and hashes: 1: aBYXGz-RsdELBEWYf2EUKKvxPho.crl (hash: oh8DjD3BUwoYEJ6urOR8SvaI6PXumlCzDSMgtdTW0bk=)
2: cHu9ZbMPrKX8ZIjRFicqBMQg5dQ.roa (hash: K/TDSx0Je1BxRBjDUlA95sURJvSjJ3GjsGy0WuwiR/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:88:9f:73:98:78:1a:33:65:ef:0c:99:02:b3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6816171b3f91b1d10b0445987f611428abf13e1a
Validity
Not Before: Mar 2 10:01:05 2026 GMT
Not After : Mar 3 10:01:05 2026 GMT
Subject: CN=9170243613c5ac2b1ce137dbc52516a19d4232bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c7:87:1f:bd:5c:4a:52:8b:d6:22:6a:23:fe:
fe:d7:2b:18:a8:05:9d:8e:fe:83:70:f8:1f:5e:37:
3b:63:74:e8:b0:75:d9:b8:4b:31:96:0d:08:6f:1f:
db:fc:05:45:5a:61:b3:26:4f:ab:a5:d3:45:d8:8d:
0c:0f:63:d1:0c:da:9e:c2:e9:32:d7:3f:29:b8:37:
66:c0:84:08:ee:28:a3:88:65:d9:93:a2:a0:7b:0e:
4c:22:1b:e5:bb:17:83:15:39:89:c1:79:a4:83:eb:
27:23:33:6a:ea:2d:30:59:d9:e9:b5:fd:c9:95:fa:
36:08:a0:f9:f0:67:c3:9e:9f:92:3c:d0:bc:c1:18:
05:83:c3:34:ae:67:35:06:2d:87:a2:86:56:01:ab:
07:41:b7:43:ab:56:19:b0:75:9d:e3:b4:03:3f:26:
48:39:9a:c4:b7:04:7f:a5:19:9c:ab:bb:04:12:68:
5e:c5:5d:79:ad:8f:cb:64:88:cb:bc:3a:73:ed:23:
97:9e:93:51:08:35:3d:6c:d9:57:71:fa:f1:13:83:
b9:66:65:76:6e:0d:45:74:cd:6b:65:d8:11:77:c9:
7a:30:e2:5c:58:a0:10:9c:d3:7a:c5:24:3e:fe:83:
3e:6d:04:b4:4b:56:42:42:ec:ff:d8:d7:3c:b9:5c:
1a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:70:24:36:13:C5:AC:2B:1C:E1:37:DB:C5:25:16:A1:9D:42:32:BC
X509v3 Authority Key Identifier:
keyid:68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:21:43:56:3d:3a:0a:15:7a:fb:73:f5:0a:c1:59:52:2e:64:
97:bb:5b:3d:23:af:1a:68:a7:0b:ae:c1:ab:c5:10:4d:af:cd:
42:0c:06:a1:f5:36:47:55:e1:3f:6a:3c:60:69:d1:01:28:d8:
0d:d6:d7:ad:15:c5:20:a9:65:45:28:b0:b9:1c:ad:21:f5:42:
a0:30:b0:d9:28:33:92:37:16:69:93:7a:64:71:33:63:c7:74:
b1:e3:f6:f1:5c:85:d7:72:09:8f:50:47:e8:b2:61:f9:a6:fa:
00:6e:5f:4b:61:60:48:fc:c0:5b:5b:c4:0e:62:0e:1f:fc:b9:
a4:b9:d1:21:eb:af:c4:71:79:04:30:8d:13:61:77:92:36:d4:
5b:fc:6e:ea:bf:43:24:64:fe:fe:dc:e2:01:6d:02:33:7d:40:
d1:11:23:8b:0a:4a:7e:64:76:65:bf:a2:ea:b3:04:97:5f:c2:
ff:38:96:51:4e:ae:4c:70:c8:a6:ee:52:23:da:b2:87:cb:72:
ac:1c:bb:f6:d1:ae:c4:67:ea:0a:72:5f:6f:bb:e5:67:fe:d4:
c4:2c:a8:5c:45:4f:12:c8:31:06:1e:a8:ac:98:49:7a:45:8d:
55:de:9c:99:38:bb:1c:44:50:e0:26:54:96:ad:2b:61:15:70:
24:c7:ce:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:55:56 2026 by rpki-client