Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
File: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft (raw, json)
Hash identifier: cH+GgtoLgE9Qc+uPwggoO5I+seX45K6MEf/fPup5+58=
Subject key identifier: 84:FA:62:5F:90:56:EA:58:58:9B:67:84:FA:2B:C5:F7:22:54:0B:6F
Authority key identifier: C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
Certificate issuer: /CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Certificate serial: 019EB7D838AD6AE8C26CAF189BD814AE5657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
Manifest number: 03E4
Signing time: Thu 11 Jun 2026 18:01:01 +0000
Manifest this update: Thu 11 Jun 2026 18:01:01 +0000
Manifest next update: Fri 12 Jun 2026 18:01:01 +0000
Files and hashes: 1: ISCc4tni62UOSGX9mZkRawtzVJ4.roa (hash: l+zMFWNINgv4W3LV5PF3KVOBpyu0Rw4iE2F/LywZLlg=)
2: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl (hash: zRLMYXIoUmkyOhFMsuCAXZh8O8L8vBtpGMyvV9ut4+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d8:38:ad:6a:e8:c2:6c:af:18:9b:d8:14:ae:56:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Validity
Not Before: Jun 11 18:01:01 2026 GMT
Not After : Jun 12 18:01:01 2026 GMT
Subject: CN=84fa625f9056ea58589b6784fa2bc5f722540b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1d:fd:de:0c:75:5a:87:72:0a:ca:c7:6b:13:
ff:fb:b0:bf:b1:2f:9c:27:82:ce:de:cd:b3:04:1e:
2a:0c:83:c1:a7:45:52:31:69:7f:d9:7b:b3:1f:e7:
45:85:81:d2:df:f7:93:55:7f:96:73:ad:48:6e:9a:
69:4a:f4:56:95:f8:85:4f:da:f6:b8:b9:da:1f:11:
f9:38:79:ea:37:0f:70:4a:fe:41:28:68:8a:73:8a:
be:ef:62:dd:cb:bf:c4:f3:ac:69:f0:d7:82:ec:cf:
2d:14:27:ca:8c:6b:16:f6:f6:70:7c:8f:f8:d8:0a:
43:06:06:b8:6c:4e:2b:73:bf:e9:ad:cc:a0:96:57:
c0:0e:fe:6f:f4:56:c9:4c:4e:4d:30:3f:d8:7d:c6:
a7:22:5b:d4:77:99:d6:6c:20:7e:03:79:3a:42:73:
86:1f:47:ce:72:0e:ce:5e:21:43:26:5e:44:77:bd:
45:d1:f4:77:11:93:eb:3c:5d:1e:b9:ae:87:c9:fc:
b3:55:94:19:c7:85:1e:be:de:94:20:ba:c5:5a:e1:
87:00:8e:62:a8:ad:37:3f:7f:10:b8:6c:74:30:6d:
05:7f:da:f7:86:60:cf:98:e1:db:e2:1c:b6:85:57:
69:05:c8:86:ef:5b:0b:c8:ff:cf:6e:71:bf:fb:6b:
3b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FA:62:5F:90:56:EA:58:58:9B:67:84:FA:2B:C5:F7:22:54:0B:6F
X509v3 Authority Key Identifier:
keyid:C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:47:73:c0:88:71:52:c5:7b:e4:d1:a5:7e:b2:c5:fb:e8:9f:
3a:06:11:fb:32:de:c7:cc:c7:69:64:84:36:c1:85:c3:af:29:
a4:b1:5f:47:5a:ad:69:17:a9:6a:18:f6:19:ab:46:07:22:ae:
85:f0:fb:80:9f:f6:4d:ba:1f:38:e6:4f:ae:99:ab:8f:11:e8:
f5:28:74:07:cc:c1:58:7a:4b:ca:18:5f:44:37:30:8a:34:33:
f2:6e:fe:01:0f:68:a0:e5:e0:56:19:ab:af:6b:79:eb:84:ee:
92:48:90:e3:86:44:93:12:07:e5:4a:82:fd:75:30:23:1b:a1:
42:54:43:b1:44:a4:26:58:b9:45:47:39:f0:3d:3a:ac:f3:fa:
a8:6d:33:5c:2d:af:7b:83:af:b6:2a:6f:6b:59:93:b5:6c:63:
4b:bc:65:81:ad:f9:40:e0:5d:0e:2b:77:3a:ec:63:da:63:f8:
3c:78:6c:91:00:0e:4c:6c:17:de:96:3f:fe:82:ed:9c:7a:1f:
94:0d:97:cb:b9:76:08:98:91:d7:a7:84:b1:19:97:e5:23:16:
4a:9d:e1:9b:8f:e6:63:15:ed:6f:24:f7:54:68:28:51:9e:cd:
68:61:d0:ce:4b:b0:e2:c3:f4:65:e2:e9:bb:f9:5c:b1:8f:84:
7d:8b:fa:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:26 2026 by rpki-client