Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
File: xpjOogluk-LClNqo5corQqSUqEQ.mft (raw, json)
Hash identifier: FdAdnfAWXLENdVJ83xHR5nva8qqmTaKDHEh10sAFk4U=
Subject key identifier: 61:A3:BE:DE:8F:56:F7:2D:5E:21:44:C3:2F:7E:71:82:B4:BE:E9:67
Authority key identifier: C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
Certificate issuer: /CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Certificate serial: 019D3909B06406714EF5608A0ACC8F27775F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
Manifest number: 0CA1
Signing time: Sun 29 Mar 2026 10:00:29 +0000
Manifest this update: Sun 29 Mar 2026 10:00:29 +0000
Manifest next update: Mon 30 Mar 2026 10:00:29 +0000
Files and hashes: 1: xpjOogluk-LClNqo5corQqSUqEQ.crl (hash: 9fwzh02+U4X/D1ivPnshnqhufMtp4uEGHkSt29IbIr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b0:64:06:71:4e:f5:60:8a:0a:cc:8f:27:77:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Validity
Not Before: Mar 29 10:00:29 2026 GMT
Not After : Mar 30 10:00:29 2026 GMT
Subject: CN=61a3bede8f56f72d5e2144c32f7e7182b4bee967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:41:1a:68:14:76:0a:52:72:ed:2a:da:ae:
0d:d8:38:d2:ed:f4:3f:05:35:c0:8f:52:63:ca:16:
6b:8a:35:1e:91:ac:ba:12:75:77:92:86:ac:b9:cf:
86:4e:04:05:f2:19:00:73:3a:c8:ca:8d:4b:65:86:
73:85:a3:3d:0a:8a:c9:4f:f5:4a:2a:d3:a0:a1:12:
bb:bf:f5:86:cb:26:10:69:16:9f:3c:a7:df:a5:fc:
f4:19:6d:3e:2c:9e:9d:f0:80:e0:c1:b0:aa:50:cc:
a8:18:ee:d0:14:e3:58:6d:74:82:99:a2:79:f0:54:
38:3e:ca:23:b3:a8:2c:a5:29:23:ea:2a:65:e0:03:
24:6f:13:9d:bb:fc:dd:0d:9a:f5:e6:fb:d6:f0:a6:
35:cd:bc:c6:bc:78:cb:90:ac:10:fa:e5:f9:ce:a7:
9e:61:21:54:57:84:e0:19:29:4c:79:40:a8:db:d4:
93:b8:1f:ee:af:42:43:9c:7f:31:f7:ef:6e:19:2b:
73:33:e0:61:b5:d9:4b:0e:0c:c5:bb:e7:e8:f8:45:
42:3b:9f:de:4f:40:05:b7:56:bc:3c:cc:67:3d:91:
2b:f2:c8:c7:ae:b5:97:e8:54:cc:24:b5:81:90:da:
9f:64:38:29:08:01:a9:06:e0:53:82:eb:a7:e9:7f:
b8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A3:BE:DE:8F:56:F7:2D:5E:21:44:C3:2F:7E:71:82:B4:BE:E9:67
X509v3 Authority Key Identifier:
keyid:C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:69:40:22:cf:14:34:fd:f2:59:bb:bc:60:da:12:a1:5d:13:
07:55:4a:cd:f9:d5:5a:9f:aa:11:36:bf:bf:58:b9:3d:03:96:
6b:35:df:33:e3:98:50:3d:0e:9c:17:f6:69:f8:2c:e9:4f:4a:
c3:75:8b:8a:da:1d:44:c5:e4:3c:3f:65:c5:a1:02:72:86:04:
59:36:fc:e8:58:12:91:77:a9:9a:12:fc:7a:2b:10:b9:73:45:
e8:2b:e1:b9:b7:80:f6:91:d3:1d:24:c8:db:45:d4:e5:7c:b5:
d8:32:5d:57:e1:0a:2d:49:c1:9f:20:a3:c4:00:e6:ca:3f:e1:
8b:04:8c:3a:33:3c:81:89:71:67:1e:55:e0:4c:b4:09:c5:7a:
9a:a9:d2:16:6c:e6:6e:bc:d9:e5:2e:4f:55:f9:32:10:16:03:
23:6e:3b:5a:32:17:5d:70:9d:01:17:66:c0:c4:9a:d6:6f:43:
19:b2:a0:b5:68:2e:fd:82:4f:76:14:28:15:40:8c:7c:10:c0:
de:ab:b1:ab:8d:c5:34:be:1b:8c:dc:1f:f8:f4:4c:07:b7:ca:
2f:eb:95:fa:a4:f4:2a:7e:c8:ac:76:d0:ee:dd:32:3c:5f:b9:
24:d7:30:0b:17:bc:4f:24:68:88:17:69:35:c7:95:a2:f9:6c:
7b:3f:a4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:49 2026 by rpki-client