Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
File: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft (raw, json)
Hash identifier: IrqbW/eEjt1jvy7q0Z5cXVvYKTNYQ0X5q6ClYAG9U2k=
Subject key identifier: BE:1C:D9:E1:B1:22:56:CE:F8:AD:FC:D8:8D:C9:CF:51:C3:98:9B:58
Authority key identifier: C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
Certificate issuer: /CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Certificate serial: 019E1F480D81BD6A5A5AD3C8A99DF75A2F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
Manifest number: 0395
Signing time: Wed 13 May 2026 03:01:16 +0000
Manifest this update: Wed 13 May 2026 03:01:16 +0000
Manifest next update: Thu 14 May 2026 03:01:16 +0000
Files and hashes: 1: ISCc4tni62UOSGX9mZkRawtzVJ4.roa (hash: l+zMFWNINgv4W3LV5PF3KVOBpyu0Rw4iE2F/LywZLlg=)
2: xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl (hash: /tavC8SCbVadVyarv4HA6bJhcZTDhgcSPEO4wv60MvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:0d:81:bd:6a:5a:5a:d3:c8:a9:9d:f7:5a:2f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6
Validity
Not Before: May 13 03:01:16 2026 GMT
Not After : May 14 03:01:16 2026 GMT
Subject: CN=be1cd9e1b12256cef8adfcd88dc9cf51c3989b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:e4:86:d8:d0:41:cd:e4:6a:c7:d4:d9:69:
56:5e:7c:4d:7c:8b:0e:9a:8b:ed:20:d1:a9:ae:a2:
83:e5:e5:49:34:0d:9a:76:66:f1:3a:c9:86:1e:ec:
a1:77:cb:65:00:2c:9a:f9:f5:81:de:ae:d4:e1:4e:
0a:a5:5f:13:92:10:b7:6d:f7:a4:29:4c:57:0e:dd:
52:78:67:d3:3a:c8:43:d3:14:fe:16:e1:b5:af:62:
30:c8:2f:0e:5f:b7:1f:e0:89:62:75:18:c1:c0:26:
cf:74:99:a6:30:b1:ee:0e:37:71:23:c8:54:46:64:
db:84:bf:f5:dc:9e:26:7b:62:ab:1f:d1:2a:2f:9a:
f6:35:80:da:52:68:ba:3c:35:ba:65:ca:ee:a1:e5:
af:4b:28:2c:86:4e:29:f7:25:d1:99:0a:7c:fa:94:
f7:43:60:10:78:bf:89:81:67:89:53:fa:43:59:7e:
2f:4e:63:ef:83:5b:e8:8c:b2:4e:bf:4b:23:b6:7c:
fd:f2:55:d3:50:0b:54:fc:02:07:0f:83:8f:41:0f:
a1:c3:5b:24:10:ec:ce:ea:f7:6a:3b:0f:5a:fe:69:
d2:d4:ec:93:08:13:b4:0e:b8:93:f3:4c:32:9e:de:
ff:c2:74:89:32:b6:b9:00:2b:d3:f8:cc:d9:90:e5:
b0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1C:D9:E1:B1:22:56:CE:F8:AD:FC:D8:8D:C9:CF:51:C3:98:9B:58
X509v3 Authority Key Identifier:
keyid:C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f3:91:c2:39:30:1a:c1:14:9e:5d:0b:df:46:c6:3e:be:bc:
59:96:d6:f1:8e:5e:79:05:61:87:0e:4d:15:a0:f1:6e:e3:51:
0d:cd:8b:90:f6:7a:f1:8f:9b:61:72:0b:72:71:9c:10:4a:1e:
8f:6f:5a:36:74:33:66:f0:90:d5:2b:54:f8:a4:17:d1:94:44:
b4:4b:92:b5:e1:99:48:00:21:af:9b:19:08:10:10:f4:4b:07:
74:ab:dd:4c:42:3d:24:1b:b8:1b:5b:24:a8:96:8b:6f:43:a0:
95:d6:96:6e:1d:2d:fb:5f:d0:85:b8:f8:42:f2:4f:85:f3:b9:
19:67:7e:f1:5a:67:44:6b:84:cc:94:23:c5:73:bb:9d:d8:33:
53:36:0c:79:78:37:61:b3:7e:65:07:59:18:91:5f:f7:3c:8c:
09:b0:16:f2:2d:18:63:b1:9f:4b:a2:fb:a0:00:bb:fe:e6:e7:
2e:ed:1a:51:1a:a6:63:49:2e:53:d0:2c:22:be:23:c2:eb:33:
81:82:09:2d:4d:31:bb:78:85:ab:f4:88:de:07:7f:a7:0c:18:
85:b8:d2:07:8c:36:9d:69:43:30:aa:a7:bf:d2:71:46:7b:4e:
da:72:9e:82:52:b0:f1:7d:76:1c:d2:c2:72:bf:21:78:68:59:
b0:35:fb:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fSA2BvWpaWtPIqZ33Wi81MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MDZlYThkNWQ3MDU0ZWY4OTk3ZTYyOTJlM2IwNDRiMDkz
YTI3YzYwHhcNMjYwNTEzMDMwMTE2WhcNMjYwNTE0MDMwMTE2WjAzMTEwLwYDVQQD
EyhiZTFjZDllMWIxMjI1NmNlZjhhZGZjZDg4ZGM5Y2Y1MWMzOTg5YjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8HkhtjQQc3kasfU2WlWXnxNfIsO
movtINGprqKD5eVJNA2admbxOsmGHuyhd8tlACya+fWB3q7U4U4KpV8TkhC3bfek
KUxXDt1SeGfTOshD0xT+FuG1r2IwyC8OX7cf4IlidRjBwCbPdJmmMLHuDjdxI8hU
RmTbhL/13J4me2KrH9EqL5r2NYDaUmi6PDW6ZcruoeWvSygshk4p9yXRmQp8+pT3
Q2AQeL+JgWeJU/pDWX4vTmPvg1vojLJOv0sjtnz98lXTUAtU/AIHD4OPQQ+hw1sk
EOzO6vdqOw9a/mnS1OyTCBO0DriT80wynt7/wnSJMra5ACvT+MzZkOWwmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4c2eGxIlbO+K382I3Jz1HDmJtYMB8GA1UdIwQY
MBaAFMQG6o1dcFTviZfmKS47BEsJOifGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMWIyNmMtMmI3Yy00MTE3LWIyMzUt
OGIzMDFiYWMzMGM5LzEveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iMWIyNmMtMmI3Yy00MTE3LWIyMzUtOGIzMDFiYWMzMGM5
LzEveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtPORwjkw
GsEUnl0L30bGPr68WZbW8Y5eeQVhhw5NFaDxbuNRDc2LkPZ68Y+bYXILcnGcEEoe
j29aNnQzZvCQ1StU+KQX0ZREtEuSteGZSAAhr5sZCBAQ9EsHdKvdTEI9JBu4G1sk
qJaLb0OgldaWbh0t+1/Qhbj4QvJPhfO5GWd+8VpnRGuEzJQjxXO7ndgzUzYMeXg3
YbN+ZQdZGJFf9zyMCbAW8i0YY7GfS6L7oAC7/ubnLu0aURqmY0kuU9AsIr4jwusz
gYIJLU0xu3iFq/SI3gd/pwwYhbjSB4w2nWlDMKqnv9JxRntO2nKeglKw8X12HNLC
cr8heGhZsDX75Q==
-----END CERTIFICATE-----
Generated at Wed May 13 13:16:37 2026 by rpki-client