Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
File: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft (raw, json)
Hash identifier: r7qXiOCyxmr3qY7le6WMUJufSuJWv1pSkcoq4SHD0vM=
Subject key identifier: FE:33:1D:B2:3A:95:61:38:C9:7A:BE:46:96:C0:9E:B0:A9:BF:2D:F6
Authority key identifier: C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
Certificate issuer: /CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Certificate serial: 019D37894651462613BF71F661F610789B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
Manifest number: 031D
Signing time: Sun 29 Mar 2026 03:00:36 +0000
Manifest this update: Sun 29 Mar 2026 03:00:36 +0000
Manifest next update: Mon 30 Mar 2026 03:00:36 +0000
Files and hashes: 1: ISCc4tni62UOSGX9mZkRawtzVJ4.roa (hash: l+zMFWNINgv4W3LV5PF3KVOBpyu0Rw4iE2F/LywZLlg=)
2: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl (hash: Xr0etSJKsf7zqY3Ztbl1oOshbCrRMNtS/T2hxN7YZP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:46:51:46:26:13:bf:71:f6:61:f6:10:78:9b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Validity
Not Before: Mar 29 03:00:36 2026 GMT
Not After : Mar 30 03:00:36 2026 GMT
Subject: CN=fe331db23a956138c97abe4696c09eb0a9bf2df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5a:d0:52:9d:ab:c1:d7:6f:3a:71:e1:bf:b5:
1c:4d:71:b6:86:2a:a8:87:56:63:20:07:78:74:69:
40:5c:2b:ac:ba:5f:b4:44:0d:74:1e:d7:97:36:30:
8f:c0:52:83:b7:97:89:ba:f1:21:c2:59:3c:99:7d:
58:cb:8d:9a:25:a9:78:70:5a:73:c7:cb:5f:23:d3:
da:74:f6:9c:5b:5e:d3:2f:90:d3:92:ed:8e:21:15:
41:e5:b5:f6:a9:4a:e7:71:e5:23:54:0d:cc:10:5e:
ac:17:7a:23:91:09:4b:b2:25:9b:73:8a:1c:1a:04:
8d:25:4a:69:7d:64:4b:5c:36:8e:de:2a:e1:87:da:
53:93:04:65:6d:81:52:57:6b:fc:ba:cd:f1:1d:87:
24:2a:32:41:8d:63:c9:a2:ff:af:1e:38:44:2d:c9:
04:be:64:90:03:4c:af:d6:12:2c:32:7b:49:0f:93:
fe:36:8d:1d:4d:4e:ef:43:c8:f0:40:73:66:bf:35:
45:8b:9c:3d:2b:43:53:b2:3a:cb:d4:e3:69:b7:ef:
9f:78:b1:7a:75:18:4d:23:63:63:91:97:0a:f2:8b:
fa:ae:1e:0c:54:de:02:94:0c:ce:aa:d1:cf:eb:a9:
04:df:e4:fb:bd:7e:cc:32:7d:3a:b4:34:21:50:17:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:33:1D:B2:3A:95:61:38:C9:7A:BE:46:96:C0:9E:B0:A9:BF:2D:F6
X509v3 Authority Key Identifier:
keyid:C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3e:79:da:e5:7e:f2:82:89:05:ea:66:6e:0f:97:db:5c:39:
0a:8a:35:b9:5d:03:1e:af:7c:d5:b1:99:25:87:07:2d:d7:5f:
60:3c:cc:79:ec:7d:78:2f:5f:eb:f9:05:1e:56:b4:23:f9:9e:
5c:8a:c5:8f:fa:3c:cb:38:d5:48:88:e7:c7:63:1a:0c:ea:f3:
6e:65:4e:c9:66:b3:f9:8f:9d:a0:61:bb:e0:db:a3:46:4a:b5:
33:53:19:81:b3:ab:70:e2:44:9c:9d:f5:6f:6c:ad:7d:a7:37:
12:4d:f8:31:ef:79:69:10:7a:c0:f2:29:c7:f3:6b:2d:41:a5:
36:82:d2:05:fb:a3:f4:db:93:39:37:e5:12:dc:77:66:d7:25:
56:3b:60:94:8e:16:aa:49:de:e9:94:cb:d5:eb:65:ec:f6:e2:
a8:04:35:54:8c:43:3f:7c:0e:32:f6:47:66:8f:23:17:32:fa:
58:c9:11:97:38:f0:ca:82:93:a4:89:bf:95:39:e6:30:31:27:
78:a1:49:8c:5a:01:89:26:0f:09:c7:f4:4c:f0:19:26:9e:f3:
6f:be:a3:78:3c:68:38:57:b0:74:97:4b:81:ab:f3:af:88:47:
ad:52:42:e3:56:20:75:e3:66:ec:52:38:09:d6:fb:72:89:a4:
71:e1:4e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:18 2026 by rpki-client