
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
File: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft (raw, json)
Hash identifier: /VkySueA1xm2sOqgiXORCbeenauZalCr1B9V+sSB030=
Subject key identifier: 89:BA:39:91:B4:C3:12:DB:60:B4:50:6A:88:72:ED:98:DB:B3:D6:91
Authority key identifier: C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
Certificate issuer: /CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Certificate serial: 01A0DA5F19471BACC6A35DA40628D72FD927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
Manifest number: 04FF
Signing time: Fri 25 Sep 2026 21:01:00 +0000
Manifest this update: Fri 25 Sep 2026 21:01:00 +0000
Manifest next update: Sat 26 Sep 2026 21:01:00 +0000
Files and hashes: 1: ISCc4tni62UOSGX9mZkRawtzVJ4.roa (hash: l+zMFWNINgv4W3LV5PF3KVOBpyu0Rw4iE2F/LywZLlg=)
2: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl (hash: R9U9TepOIJfajJ3q+txUCwVloxt2G4/morQoS/S/rQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:19:47:1b:ac:c6:a3:5d:a4:06:28:d7:2f:d9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Validity
Not Before: Sep 25 21:01:00 2026 GMT
Not After : Sep 26 21:01:00 2026 GMT
Subject: CN=89ba3991b4c312db60b4506a8872ed98dbb3d691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:a2:84:87:04:41:4d:6c:2b:3d:f2:92:18:
3b:b6:d1:3d:cc:76:b3:ce:ff:07:2a:b3:a0:05:10:
4c:fc:77:6d:6c:48:c1:54:f0:5e:e6:ff:73:aa:70:
3c:7e:e2:64:ec:79:3e:7b:04:4f:77:fd:84:98:f1:
41:18:fd:9b:a1:77:d1:f5:97:3e:0a:c9:b5:e1:a8:
f2:81:c4:a8:39:f2:de:a1:f5:5c:88:ab:92:f8:8e:
bf:33:f6:b1:69:8c:3a:35:5c:26:c4:8c:8e:ce:c5:
06:02:0e:2e:1a:4b:95:90:63:a4:4c:68:dd:75:01:
32:4d:77:b4:53:34:23:29:26:6d:92:54:2e:78:7d:
a4:d6:a2:b2:3b:0e:55:57:b2:5c:5d:60:77:7c:b2:
d0:e0:69:3a:38:94:08:3c:a6:6b:80:c5:9e:15:d7:
b3:90:a9:e3:b7:93:20:af:12:a5:0a:be:51:de:45:
57:c7:e4:88:28:cd:dd:d2:79:82:20:b6:2a:34:74:
e9:76:56:75:0e:a8:c7:86:da:78:87:61:96:c8:f4:
ea:6b:2f:ec:81:01:3d:e3:ee:92:7d:9d:4e:c5:ba:
47:c4:66:d1:00:21:9f:f2:87:39:cd:d7:90:a7:f0:
44:e7:38:72:24:26:af:ad:7c:8c:30:2a:b0:2b:28:
4d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BA:39:91:B4:C3:12:DB:60:B4:50:6A:88:72:ED:98:DB:B3:D6:91
X509v3 Authority Key Identifier:
keyid:C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:35:5e:2c:0b:61:85:42:27:60:3e:8d:b3:db:ca:92:1b:52:
ae:c9:13:0b:9b:b0:bb:71:19:fc:88:01:94:5f:a8:3b:19:46:
9e:40:35:22:44:fb:03:23:64:be:3e:62:aa:c8:8c:15:36:29:
bd:b7:b1:47:d4:44:0c:52:c9:13:85:4a:2d:2b:d1:e9:77:63:
59:fe:de:b2:c9:7d:91:a1:94:aa:d1:0d:54:9b:90:06:9a:ad:
16:3f:00:7d:0e:7f:69:4e:e8:16:aa:30:b7:23:66:67:f2:3d:
7e:2f:9d:40:b7:62:54:54:fe:fd:1d:41:45:ff:7b:3b:b5:a9:
60:22:30:98:55:b5:ae:97:b3:ef:1f:b5:8d:1f:5b:d7:2c:32:
fc:1b:a3:b4:e9:49:b5:38:b4:53:dc:e5:61:d5:2d:34:3c:f1:
af:11:25:d1:e5:8f:d3:a3:7f:15:77:83:78:dd:ec:93:28:cd:
35:d6:b5:85:bb:e1:bd:b6:d7:3c:af:3e:1b:31:8c:11:3b:99:
21:21:44:88:5b:f3:56:a8:3a:66:4e:8d:4a:59:cf:7c:26:db:
df:e4:b6:f5:09:7e:b7:1d:e6:48:a2:dd:5e:fa:c2:9b:e1:64:
05:7f:9c:88:4b:57:2e:61:40:99:ef:43:d2:67:8c:58:70:78:
4b:b0:2b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:58:15 2026 by rpki-client