Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
File: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft (raw, json)
Hash identifier: 1Th+4E5PpCngyDCEMCT89EHDIuJy9GnRdbgEpZnk2Dk=
Subject key identifier: DC:8F:56:5B:37:C7:DA:4A:13:4C:07:EF:3C:62:6A:EC:D3:48:E7:D9
Authority key identifier: C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
Certificate issuer: /CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Certificate serial: 01A13CDC38D7AC017FCA4202BA10CE237099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
Manifest number: 0532
Signing time: Thu 15 Oct 2026 00:00:27 +0000
Manifest this update: Thu 15 Oct 2026 00:00:27 +0000
Manifest next update: Fri 16 Oct 2026 00:00:27 +0000
Files and hashes: 1: ISCc4tni62UOSGX9mZkRawtzVJ4.roa (hash: l+zMFWNINgv4W3LV5PF3KVOBpyu0Rw4iE2F/LywZLlg=)
2: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl (hash: hKkdpwk1HadtO0uY1TEoXFNB1dZhrB6/QMqBqqstSZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:38:d7:ac:01:7f:ca:42:02:ba:10:ce:23:70:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Validity
Not Before: Oct 15 00:00:27 2026 GMT
Not After : Oct 16 00:00:27 2026 GMT
Subject: CN=dc8f565b37c7da4a134c07ef3c626aecd348e7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:60:82:92:a0:7c:07:a7:ed:6e:6e:d7:ee:32:
95:63:71:7c:21:54:b2:50:01:dd:56:f0:0b:f4:8e:
22:16:dd:52:6d:a6:56:5d:fd:47:35:fd:6d:2e:94:
5a:c2:9e:01:00:2b:c8:ef:e6:4b:fa:96:ac:73:12:
21:7b:13:60:d4:93:38:6a:55:f1:b0:8f:fe:5c:ce:
aa:9e:91:f2:61:0d:54:c4:d7:a9:5a:55:04:b0:5c:
e9:b5:d9:fc:c0:d9:aa:5a:65:1b:f1:29:2d:51:4a:
be:59:cf:1c:2d:e5:2a:3b:ac:6e:b8:5b:32:39:a6:
87:0c:23:eb:d6:fc:39:7a:03:0f:eb:08:1a:26:b3:
2e:fd:31:da:c7:11:ec:88:ce:2e:85:86:e3:9e:81:
4c:71:9d:31:ca:30:6c:ea:86:f8:73:9d:7f:78:f7:
88:a4:7a:89:54:0f:c1:44:48:fb:55:b1:80:9f:ad:
e4:6d:f7:e5:8c:f0:c3:07:8e:1f:5a:4e:03:93:34:
64:bc:ac:83:bd:3b:f2:d2:79:14:75:41:9b:ed:9d:
a6:4b:88:0d:59:44:94:e6:c8:6b:ad:d1:ed:60:a2:
dc:60:83:df:67:a4:18:4c:96:b6:93:29:10:e0:ae:
b2:5d:04:87:42:37:e9:cf:e5:7e:39:b2:1e:92:ad:
43:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8F:56:5B:37:C7:DA:4A:13:4C:07:EF:3C:62:6A:EC:D3:48:E7:D9
X509v3 Authority Key Identifier:
keyid:C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:de:14:ba:47:4c:b3:98:1c:84:6c:9a:2f:d3:c2:e8:58:d5:
6d:7a:ef:dd:4d:0c:d1:9a:3f:85:74:cf:ad:db:67:3f:b2:6a:
6a:1c:38:c6:a9:d8:d2:aa:9a:93:b0:5c:4e:f5:29:dc:99:ba:
63:f6:19:03:92:6a:c0:0b:80:1c:a7:22:19:ea:46:93:64:cf:
e2:d7:cb:51:cc:ff:d3:25:76:f7:5c:08:d8:8f:7e:20:3f:e0:
04:0d:04:43:dc:84:29:d0:20:0d:b9:a6:8f:b5:ba:79:76:1c:
c2:69:93:e3:10:76:5e:c8:ce:74:dc:4b:ae:8d:7c:e6:96:db:
d3:47:f9:7b:6a:07:d5:3b:de:49:9e:c5:c5:27:33:0e:7f:91:
d4:5f:5e:8d:6d:e3:ed:f4:40:45:22:ee:7b:42:40:26:e5:f5:
25:98:49:1b:50:f9:bf:4c:a0:75:f2:03:b9:09:14:28:91:7b:
4e:bb:73:cb:b9:96:d3:bc:12:9d:22:16:2c:0e:45:9c:dc:e7:
9b:89:e0:07:30:95:e4:8e:62:f9:c7:c2:40:87:5e:5c:0f:93:
3b:9d:6e:dc:76:f3:a4:45:5b:c3:81:fe:c0:22:b8:3a:8c:27:
79:e0:c9:cd:4d:02:19:f2:25:5e:24:5e:ab:29:42:3e:de:63:
d7:2d:f3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:42:32 2026 by rpki-client