Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
File: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft (raw, json)
Hash identifier: DsN3cBDxvKvihFKwLq9P3oesE+25atbRq5wEQbOTGVk=
Subject key identifier: 29:EA:F0:18:47:7A:BB:C1:2D:BF:0C:FB:4B:AF:6A:43:2A:87:26:3A
Authority key identifier: C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
Certificate issuer: /CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Certificate serial: 019EC36E356EF00375764C9EAB71C34EBD80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
Manifest number: 03EA
Signing time: Sun 14 Jun 2026 00:00:40 +0000
Manifest this update: Sun 14 Jun 2026 00:00:40 +0000
Manifest next update: Mon 15 Jun 2026 00:00:40 +0000
Files and hashes: 1: ISCc4tni62UOSGX9mZkRawtzVJ4.roa (hash: l+zMFWNINgv4W3LV5PF3KVOBpyu0Rw4iE2F/LywZLlg=)
2: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl (hash: t3musiqnFHDQGa8PZuaeIVUfihxO8vYam19Wa4mOICA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6e:35:6e:f0:03:75:76:4c:9e:ab:71:c3:4e:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Validity
Not Before: Jun 14 00:00:40 2026 GMT
Not After : Jun 15 00:00:40 2026 GMT
Subject: CN=29eaf018477abbc12dbf0cfb4baf6a432a87263a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:41:9c:b3:9b:e3:37:ce:5d:54:16:df:21:63:
b5:96:74:74:aa:2b:8e:7b:fd:bf:e1:8b:8b:c2:7f:
d5:9e:84:97:ab:81:ce:c0:e1:3c:04:38:77:15:ad:
95:83:c5:19:68:bd:c4:51:8c:21:7c:52:44:96:09:
e8:9e:50:d1:97:22:aa:97:ae:1e:91:8b:63:26:f5:
5c:d8:8a:39:da:97:c6:03:bf:cd:6f:78:da:af:e6:
e4:03:f6:9f:58:2a:82:19:bf:d9:d4:11:73:c1:e0:
f9:85:fa:9b:62:3b:a4:d5:40:8c:3b:32:73:bb:03:
90:db:d6:3a:80:ee:04:52:b5:9b:98:54:90:13:a0:
a6:3a:24:bd:65:16:92:51:f7:c4:04:92:af:2c:03:
79:73:b1:01:38:91:b5:b5:72:d6:73:de:85:d0:62:
ae:38:52:40:5b:48:46:85:3b:d3:17:a9:29:de:ae:
6e:c3:17:dd:c6:0a:1f:ef:9e:ed:89:25:51:81:a7:
1f:2f:5a:0d:36:f9:f5:cf:0d:26:4f:d4:34:f8:31:
52:c4:b1:ea:90:ca:f8:96:81:81:2b:29:d8:47:9a:
48:ac:f8:a3:3d:64:ee:c5:b3:46:2d:61:7c:eb:1b:
5b:9c:b8:7b:9c:08:8a:a6:7c:27:44:62:d8:bd:64:
1b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EA:F0:18:47:7A:BB:C1:2D:BF:0C:FB:4B:AF:6A:43:2A:87:26:3A
X509v3 Authority Key Identifier:
keyid:C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b7:0a:6b:da:92:0e:52:c1:fd:7e:9d:c1:86:f2:be:e8:de:
ee:b4:d4:95:83:34:73:e2:8a:57:3a:be:66:ce:99:d7:d0:bf:
6c:5e:e6:e1:5d:92:e7:40:94:e9:fa:c3:80:14:31:fa:fb:52:
b6:c6:bc:95:aa:95:02:c0:15:16:a4:ab:d2:f6:cc:63:df:60:
b7:f7:5c:ee:f0:6f:fb:7c:5e:e9:13:3a:e6:72:fb:0b:06:a7:
ed:16:47:7b:fd:c6:19:bc:ae:26:7b:34:5c:f0:4a:74:02:04:
25:ca:a7:20:60:c6:57:55:2f:a5:a5:d2:56:c4:24:a6:7f:fd:
dc:f1:b3:a1:08:ad:21:7d:15:19:b5:78:6e:0d:76:cd:ae:a5:
49:35:76:e8:86:04:24:da:7a:21:70:6a:b0:a8:66:9f:48:fd:
c1:54:37:30:ca:40:2f:96:8e:01:3d:a9:4f:c6:ff:67:4d:5b:
4a:76:42:c3:6c:87:70:81:25:47:de:d3:6f:3a:b3:55:2e:4b:
40:aa:ab:c6:16:56:a7:0c:66:5e:f0:8a:f8:00:14:b6:96:1a:
3c:b7:a0:42:d8:a8:02:a1:94:22:3d:6c:dc:6f:02:69:7b:5c:
e5:bb:e3:e4:5e:80:0c:09:fb:59:13:9a:4e:e7:f8:a0:b2:97:
6b:bb:ed:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:20 2026 by rpki-client