Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
File: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft (raw, json)
Hash identifier: dUthO0y7L4r63KTFsF3feKGIUWmlcRilmbaz99H4Aqc=
Subject key identifier: AB:FC:40:1D:76:45:A8:94:82:0B:24:4E:B8:34:BF:25:01:50:6E:20
Authority key identifier: C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
Certificate issuer: /CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Certificate serial: 01A182627DF14743CB49253BA5E6EA955AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
Manifest number: 0556
Signing time: Wed 28 Oct 2026 12:00:55 +0000
Manifest this update: Wed 28 Oct 2026 12:00:55 +0000
Manifest next update: Thu 29 Oct 2026 12:00:55 +0000
Files and hashes: 1: ISCc4tni62UOSGX9mZkRawtzVJ4.roa (hash: l+zMFWNINgv4W3LV5PF3KVOBpyu0Rw4iE2F/LywZLlg=)
2: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl (hash: vLuz/8yGSvIQ6oxE7BmD0eF7l5P6cl320o7ioj2+eLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:62:7d:f1:47:43:cb:49:25:3b:a5:e6:ea:95:5a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Validity
Not Before: Oct 28 12:00:55 2026 GMT
Not After : Oct 29 12:00:55 2026 GMT
Subject: CN=abfc401d7645a894820b244eb834bf2501506e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:36:ec:3d:06:19:48:9a:ec:14:0a:ff:6a:96:
c4:a8:5a:e9:90:c4:5a:7a:da:13:79:a6:59:8d:7e:
34:3f:92:d8:85:00:02:db:32:02:f4:4d:b3:72:10:
50:f9:97:8a:89:af:63:5c:88:f1:d5:fa:de:b6:b2:
b7:87:2f:50:e8:af:4a:f1:9e:07:1a:ef:75:27:fb:
3f:aa:a4:55:88:f8:9b:36:9a:9b:61:ec:06:ed:c5:
46:5d:42:d2:a0:da:4d:56:e3:8c:ac:b8:64:70:d7:
d8:7a:a8:4f:0b:f3:d8:ca:6e:95:5c:67:fa:ad:fd:
77:5a:af:de:ad:02:f9:06:44:f8:5b:ea:e1:6d:1f:
33:24:38:3f:e5:a3:e5:fa:e7:f2:1d:bb:b0:2b:82:
ce:9d:66:ad:43:3b:a6:b3:73:36:f9:be:46:b1:6f:
f3:72:c2:c4:a2:f2:d3:38:af:61:c6:f2:5f:9d:78:
44:d9:2a:d7:6d:f4:f9:f4:b0:0b:06:a0:d3:b6:4c:
c8:8a:a2:c1:c7:55:24:7d:26:69:06:27:74:36:9e:
b2:ef:eb:36:52:1d:59:e2:0d:bc:34:3e:95:36:12:
93:d4:c3:44:85:df:b3:84:d7:65:d9:fb:b7:8f:37:
eb:38:39:f9:fb:67:c4:37:f9:f5:1c:e1:8f:57:24:
7f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FC:40:1D:76:45:A8:94:82:0B:24:4E:B8:34:BF:25:01:50:6E:20
X509v3 Authority Key Identifier:
keyid:C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:eb:16:e0:0f:e1:f4:15:44:9d:06:d1:6c:61:24:d6:e7:af:
09:0c:6b:b3:f1:49:07:28:82:d3:14:33:a3:05:d5:9f:9e:33:
d0:59:d1:4b:6d:e8:11:7c:52:a6:4d:e7:9b:a1:10:e7:f8:d5:
4b:48:82:f2:f7:e9:e2:82:18:da:5f:a6:90:c5:a5:3a:02:72:
f6:6f:51:c6:80:8c:e7:9f:80:ed:85:fb:b6:bb:99:9b:c2:36:
ed:d2:72:23:f0:12:b4:7c:2d:12:8a:ff:79:b1:b1:14:06:be:
bb:a0:7a:38:07:8d:9b:66:4a:38:50:0c:c8:11:c7:a1:bb:d0:
69:a3:4a:df:66:86:92:e1:7b:0f:8e:90:fc:f1:e1:f7:01:a6:
a3:a3:55:00:42:9a:f8:17:c2:65:a6:5f:3e:bf:9f:36:fe:9e:
59:f0:61:ab:16:62:c5:24:47:37:c3:da:3c:3e:ba:8c:64:2a:
40:b1:ef:ba:bf:ea:b3:ba:19:94:b1:ea:b4:55:4a:c9:af:ed:
09:5f:e1:d6:c5:25:86:e1:5f:ba:b5:15:fd:67:74:ff:ed:76:
2e:47:88:87:61:8c:09:22:5c:f9:4f:85:6f:44:e8:f4:69:44:
13:54:96:d6:31:9e:af:3e:8e:52:05:63:1e:d9:48:f3:a2:a4:
99:87:eb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:56:34 2026 by rpki-client