Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
File: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft (raw, json)
Hash identifier: JVVUPSszsSGOBFbyehtGNyYPT4mr93mZcjfq5Xhzp0s=
Subject key identifier: 43:53:93:A5:F0:64:70:9A:E5:E0:91:45:F1:8E:70:EE:D7:DD:2C:E7
Authority key identifier: C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
Certificate issuer: /CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Certificate serial: 01A08B30E4FDB0F34F7B408C869DBCB09460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
Manifest number: 04D6
Signing time: Thu 10 Sep 2026 12:00:32 +0000
Manifest this update: Thu 10 Sep 2026 12:00:32 +0000
Manifest next update: Fri 11 Sep 2026 12:00:32 +0000
Files and hashes: 1: ISCc4tni62UOSGX9mZkRawtzVJ4.roa (hash: l+zMFWNINgv4W3LV5PF3KVOBpyu0Rw4iE2F/LywZLlg=)
2: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl (hash: ypZbJw7CWjN/r203QdYvsk+s6wUqwS5n/R1v1/1LdyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:30:e4:fd:b0:f3:4f:7b:40:8c:86:9d:bc:b0:94:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Validity
Not Before: Sep 10 12:00:32 2026 GMT
Not After : Sep 11 12:00:32 2026 GMT
Subject: CN=435393a5f064709ae5e09145f18e70eed7dd2ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:21:86:01:fd:d0:88:8f:ed:fe:78:fc:b0:
35:c7:bb:fa:9c:07:de:40:d5:e1:8a:b9:0a:ec:a6:
90:a3:ca:cb:ca:b2:86:b1:b8:1c:bc:67:2d:85:50:
ca:ac:5b:a1:b0:de:15:9c:fe:93:1c:3f:b4:65:a6:
6b:d7:e6:73:c2:b9:bb:ce:d0:b4:e3:7d:ed:fc:f5:
58:cb:87:d0:9e:65:8d:76:f8:29:bf:fb:40:85:5c:
81:44:5a:e3:77:0c:da:70:83:87:9d:ab:91:ab:96:
db:ce:5e:0d:74:51:ed:6e:5f:68:d6:c3:49:69:89:
36:d5:bb:51:73:eb:2a:4b:cd:cb:8d:0d:62:cd:c2:
a7:80:bf:da:50:88:d3:1b:ce:45:c7:2b:1d:32:1b:
a6:eb:ed:2c:90:1f:d2:59:1b:f7:7b:74:cf:ab:bf:
11:89:7c:9a:d6:a3:6f:f1:fe:ef:7d:ad:b7:99:eb:
94:ba:f4:01:ec:0d:b2:91:88:a8:bd:4c:a7:29:d5:
ae:c2:fe:98:b0:fb:de:e0:ae:8a:eb:bd:f5:42:8b:
02:e1:d6:f3:98:fb:8c:81:8c:92:a8:a8:b6:21:10:
95:08:40:da:d6:08:a9:99:27:1d:ed:d7:ef:cf:2e:
d1:28:3a:11:99:5e:ec:09:1d:e6:19:7f:02:cc:97:
1d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:53:93:A5:F0:64:70:9A:E5:E0:91:45:F1:8E:70:EE:D7:DD:2C:E7
X509v3 Authority Key Identifier:
keyid:C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1d:c0:c3:83:b2:db:29:88:03:47:6c:f7:95:f7:3d:3d:01:
77:73:d4:15:6d:e3:1f:3a:b7:61:05:ef:98:7b:0f:d6:bf:ef:
1e:6e:c8:74:f7:91:c3:f6:c6:3a:ef:76:73:76:c9:0b:a8:31:
46:e6:1b:27:f4:02:72:b1:f5:17:ae:56:99:27:38:96:07:26:
96:b8:06:59:b0:21:eb:0a:bc:dd:90:96:ff:61:60:12:2b:e8:
12:a7:ce:fc:23:b4:cf:0a:51:25:31:7b:78:07:37:a6:3a:a6:
22:e6:96:68:c5:38:b8:c7:52:fb:ea:11:71:0c:79:05:2a:2e:
8f:da:39:a7:24:ca:16:10:8a:9d:d3:40:a5:19:0a:1e:9b:9c:
0f:d1:5d:83:4a:2c:62:37:01:32:41:da:c6:49:d8:82:6f:c0:
47:28:08:a4:c3:45:84:79:82:a3:0f:3c:fd:14:bd:fc:30:1b:
84:bf:b6:97:c4:15:41:d9:97:02:74:9d:9f:0e:5d:08:7a:55:
cc:15:3e:80:5e:d0:ae:88:74:93:be:e5:f7:55:a1:3b:86:8d:
68:14:2f:1a:45:d1:22:59:d4:f5:6e:31:14:5c:79:32:4f:47:
9d:4a:df:64:0d:10:d0:46:05:28:f1:ea:22:22:06:03:66:fd:
67:09:50:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:38:51 2026 by rpki-client