Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
File: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft (raw, json)
Hash identifier: LSD9VJECAb4c19wFuaajGQtZPzIrQoLi7/rPZ82XQaI=
Subject key identifier: D9:A0:BA:73:8E:B8:35:10:3E:42:1E:D3:D4:05:60:D7:9C:B5:48:65
Authority key identifier: C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
Certificate issuer: /CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Certificate serial: 019FAD1AF2B0CC743BFF9530D9FF766C870C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
Manifest number: 0463
Signing time: Wed 29 Jul 2026 09:00:52 +0000
Manifest this update: Wed 29 Jul 2026 09:00:52 +0000
Manifest next update: Thu 30 Jul 2026 09:00:52 +0000
Files and hashes: 1: ISCc4tni62UOSGX9mZkRawtzVJ4.roa (hash: l+zMFWNINgv4W3LV5PF3KVOBpyu0Rw4iE2F/LywZLlg=)
2: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl (hash: Kqv3iQSgXRznhp063bpDX1B4M901Grq2a9VBHtXmbf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:f2:b0:cc:74:3b:ff:95:30:d9:ff:76:6c:87:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Validity
Not Before: Jul 29 09:00:52 2026 GMT
Not After : Jul 30 09:00:52 2026 GMT
Subject: CN=d9a0ba738eb835103e421ed3d40560d79cb54865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e1:14:ae:32:71:14:48:67:4a:6d:75:58:ec:
4d:9d:aa:dc:4d:8b:27:14:53:c3:e2:fd:a3:01:f7:
09:aa:3f:6f:d6:4d:0f:26:e3:11:f1:25:a2:95:ce:
26:71:b4:14:67:3e:e9:ad:e4:13:7f:81:49:d1:60:
e2:65:08:31:85:cf:e3:90:3c:97:10:63:34:ee:f9:
5f:d6:1b:3f:87:b1:14:4a:41:06:d4:42:ec:a6:e0:
e0:e9:6b:c9:b4:4c:73:c9:8a:81:92:0f:56:eb:85:
29:88:71:6a:dd:4f:5c:e8:e0:bd:5b:e8:8d:5c:48:
ee:54:55:0c:50:c1:b5:2d:28:73:fb:3a:71:5d:8b:
7e:0f:f3:19:fd:77:4e:f8:d1:3f:09:20:5a:df:e4:
a9:f0:d0:46:a0:ac:e9:f4:22:98:26:f9:09:e5:d4:
59:95:1e:8b:02:40:09:62:ef:5a:25:a3:09:26:d6:
b2:87:61:8b:c7:50:e2:f4:72:4d:0d:e2:54:86:ad:
60:41:54:aa:38:8a:15:a7:75:01:0a:ac:d7:89:32:
32:c4:58:a8:54:0c:11:be:7a:e1:b8:3f:60:5b:67:
3a:ee:1f:0c:ab:4b:9e:99:da:85:cb:bd:78:62:66:
28:e6:34:38:18:ff:7b:0d:ea:82:3e:65:c8:bc:2c:
f6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A0:BA:73:8E:B8:35:10:3E:42:1E:D3:D4:05:60:D7:9C:B5:48:65
X509v3 Authority Key Identifier:
keyid:C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:24:87:da:bc:5b:05:6e:40:c2:22:b7:c2:af:ab:da:6d:95:
82:d4:a9:05:7a:09:1c:03:84:cb:fd:3e:94:1c:66:07:33:3a:
11:f6:ec:9c:e7:71:6b:85:a1:7b:f7:10:9c:f4:a9:0f:c3:ca:
22:6c:1f:e6:8a:17:7c:69:7b:6a:fc:e4:ab:1d:a8:71:1d:86:
c9:55:2d:07:79:0c:92:be:a4:dd:4d:26:4d:b9:0d:7c:f0:6f:
a9:b0:26:2c:2a:d8:35:49:09:05:c7:82:1e:ca:b0:52:f1:49:
3f:4a:12:15:67:4d:d5:aa:01:a6:b3:0e:97:b6:7e:1b:cd:d6:
15:22:da:db:45:31:63:56:05:31:86:f5:0e:09:55:97:d6:72:
63:89:d3:7c:a4:ba:36:46:44:60:03:30:dc:b3:8c:99:38:40:
0f:46:4b:97:29:7c:9b:4c:0e:ec:5a:80:28:ac:3d:6d:6e:c3:
0a:96:16:20:1a:37:6b:3d:95:50:02:61:32:34:ac:3a:eb:5f:
be:53:28:2b:fb:7b:c5:cb:75:57:32:ef:1a:a7:91:d0:f6:3f:
cf:88:23:af:14:03:ae:fc:58:0d:01:9a:19:cc:44:0b:07:c6:
10:4c:61:c5:15:db:8c:68:1c:e9:de:ae:9e:43:70:6f:30:c9:
19:04:7d:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tGvKwzHQ7/5Uw2f92bIcMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MDZlYThkNWQ3MDU0ZWY4OTk3ZTYyOTJlM2IwNDRiMDkz
YTI3YzYwHhcNMjYwNzI5MDkwMDUyWhcNMjYwNzMwMDkwMDUyWjAzMTEwLwYDVQQD
EyhkOWEwYmE3MzhlYjgzNTEwM2U0MjFlZDNkNDA1NjBkNzljYjU0ODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeEUrjJxFEhnSm11WOxNnarcTYsn
FFPD4v2jAfcJqj9v1k0PJuMR8SWilc4mcbQUZz7preQTf4FJ0WDiZQgxhc/jkDyX
EGM07vlf1hs/h7EUSkEG1ELspuDg6WvJtExzyYqBkg9W64UpiHFq3U9c6OC9W+iN
XEjuVFUMUMG1LShz+zpxXYt+D/MZ/XdO+NE/CSBa3+Sp8NBGoKzp9CKYJvkJ5dRZ
lR6LAkAJYu9aJaMJJtayh2GLx1Di9HJNDeJUhq1gQVSqOIoVp3UBCqzXiTIyxFio
VAwRvnrhuD9gW2c67h8Mq0uemdqFy714YmYo5jQ4GP97DeqCPmXIvCz2VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmgunOOuDUQPkIe09QFYNectUhlMB8GA1UdIwQY
MBaAFMQG6o1dcFTviZfmKS47BEsJOifGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMWIyNmMtMmI3Yy00MTE3LWIyMzUt
OGIzMDFiYWMzMGM5LzEveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iMWIyNmMtMmI3Yy00MTE3LWIyMzUtOGIzMDFiYWMzMGM5
LzEveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyiSH2rxb
BW5AwiK3wq+r2m2VgtSpBXoJHAOEy/0+lBxmBzM6EfbsnOdxa4Whe/cQnPSpD8PK
Imwf5ooXfGl7avzkqx2ocR2GyVUtB3kMkr6k3U0mTbkNfPBvqbAmLCrYNUkJBceC
HsqwUvFJP0oSFWdN1aoBprMOl7Z+G83WFSLa20UxY1YFMYb1DglVl9ZyY4nTfKS6
NkZEYAMw3LOMmThAD0ZLlyl8m0wO7FqAKKw9bW7DCpYWIBo3az2VUAJhMjSsOutf
vlMoK/t7xct1VzLvGqeR0PY/z4gjrxQDrvxYDQGaGcxECwfGEExhxRXbjGgc6d6u
nkNwbzDJGQR9Hg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:06:21 2026 by rpki-client