Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
File: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft (raw, json)
Hash identifier: SG3I1vztkRD19LkiAzAia2g75i8UHsQEq9wtlqW+Se8=
Subject key identifier: 71:A7:93:A4:77:82:5F:0F:5D:96:1D:6F:3D:A8:E7:DE:14:7B:58:EA
Authority key identifier: C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
Certificate issuer: /CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Certificate serial: 01A18450DCDF83294450A7A1B237821640CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
Manifest number: 0557
Signing time: Wed 28 Oct 2026 21:00:54 +0000
Manifest this update: Wed 28 Oct 2026 21:00:54 +0000
Manifest next update: Thu 29 Oct 2026 21:00:54 +0000
Files and hashes: 1: ISCc4tni62UOSGX9mZkRawtzVJ4.roa (hash: l+zMFWNINgv4W3LV5PF3KVOBpyu0Rw4iE2F/LywZLlg=)
2: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl (hash: vOLE0lF3/eqYYoFBbu3a5k5W1+gaXe0UarJEyX0C6to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:50:dc:df:83:29:44:50:a7:a1:b2:37:82:16:40:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Validity
Not Before: Oct 28 21:00:54 2026 GMT
Not After : Oct 29 21:00:54 2026 GMT
Subject: CN=71a793a477825f0f5d961d6f3da8e7de147b58ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:39:c5:95:c5:e4:75:1c:6a:50:e0:ae:c8:
07:fd:68:0f:66:a2:40:e9:a6:e9:b1:cd:e4:d9:da:
6e:84:ed:f2:8c:6b:5b:45:2d:bd:87:4f:13:c0:1b:
b4:39:88:5c:07:59:59:c4:8f:0c:05:2f:61:09:50:
22:b8:7b:11:2b:44:a2:9a:d6:cb:e0:05:0b:b4:17:
38:f8:7a:82:60:78:8d:cf:0c:58:ad:83:b5:78:bc:
2c:77:38:e2:6d:35:11:51:af:be:f5:ab:2d:ed:41:
65:a2:da:1e:de:cf:47:cc:45:27:84:1f:98:d0:1b:
dd:bd:0c:74:c5:aa:7a:35:c7:cf:4c:86:a1:39:0f:
4d:ff:54:d3:8d:2b:e0:c9:ac:cd:6a:ee:0b:ee:cd:
6a:17:4c:38:5e:dd:fd:e7:b5:e5:5d:96:28:77:d6:
a4:28:2f:e9:e3:e8:10:26:0d:c2:26:12:2f:51:c8:
76:89:ec:2d:04:6f:c0:b0:b8:0c:54:f1:a3:34:67:
6a:7f:5d:03:6e:87:e8:36:62:a4:75:6f:fe:99:23:
f8:67:a9:d7:ce:bd:89:28:5f:07:f4:5f:ad:64:29:
ad:7d:a6:fd:d9:70:b2:a5:b0:4d:3e:aa:ae:47:21:
29:f5:47:c2:8e:3d:a4:f6:e9:16:08:58:9e:5b:b3:
19:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A7:93:A4:77:82:5F:0F:5D:96:1D:6F:3D:A8:E7:DE:14:7B:58:EA
X509v3 Authority Key Identifier:
keyid:C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:a6:20:31:f6:ec:ef:af:3c:12:35:08:ca:54:96:a9:a0:01:
f6:c0:7e:f3:52:4c:4b:46:94:7a:e0:3d:32:14:24:9c:8b:06:
07:16:e1:44:6f:05:84:9e:9f:b7:a5:52:31:8f:b9:6f:0b:14:
e9:e7:21:00:07:18:33:57:5e:8c:c9:49:17:8f:77:ad:58:b9:
5f:9d:f4:56:e0:08:2b:b3:35:4c:ee:e9:ee:80:d1:16:60:6f:
af:58:f8:20:ea:27:25:2c:94:f1:c8:3c:f0:8e:e5:eb:ee:8d:
d2:72:f3:fb:e8:19:45:a8:fc:3a:10:33:1a:91:96:bc:5c:77:
7a:34:b2:ac:a6:57:09:f4:26:43:bf:3b:e4:b6:8d:03:b5:b3:
c1:a9:c2:c4:9f:46:94:23:74:c7:7b:3f:ca:25:95:4d:5c:51:
3e:ad:6b:01:3e:dc:d8:a9:00:be:60:ea:68:af:59:c9:c1:3c:
c0:88:d6:eb:90:57:d4:c7:c1:33:63:dd:ab:7a:b1:b2:bc:40:
8c:0e:e2:b5:f4:88:9f:c5:ff:4b:55:d8:17:68:93:90:b7:cd:
b2:de:f1:71:91:f1:72:5e:3d:b6:06:e7:f5:ba:3f:56:6d:ec:
cb:ed:10:9e:74:b8:a0:3e:ea:b4:6c:d1:01:08:22:cc:88:24:
71:8c:74:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 02:17:03 2026 by rpki-client