Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
File: xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft (raw, json)
Hash identifier: HiYu7JQkwUv+jZVyeYHtUylceCHg2R3w1LkzJY6wYTA=
Subject key identifier: 99:0A:2D:59:EC:4B:89:A4:55:7E:90:F1:06:00:E3:D1:08:29:96:F2
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial: 019DA0E483868419AC050D51B84A0A4A3EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
Manifest number: 120D
Signing time: Sat 18 Apr 2026 14:00:23 +0000
Manifest this update: Sat 18 Apr 2026 14:00:23 +0000
Manifest next update: Sun 19 Apr 2026 14:00:23 +0000
Files and hashes: 1: ATFqvKQfCzg1eIhHj9ilysnZYnE.roa (hash: 9xWvqqO+irmFSgWZgkDiVyOSk6AqF02qWQdfh9GrCc8=)
2: NIt5HAEHP3eGIkRaRfmU_TQEUio.roa (hash: kNqtp8gVzKVPwqTczsFvU1xgIi6B9Z0PZaQgvs2xN6o=)
3: gtTwRDBJR-BbMiRZiF0UkREdrNI.roa (hash: EYI6Dc616oG3PdcronQ8IrDd6TturvsbVQq4J3V4p+w=)
4: tPnRw3top4XnUY_nTcwvwdpUiGQ.roa (hash: M0xYz4wzzLwebgXureqeaj7zhKGgbdLeOlyBhuFnNKo=)
5: xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl (hash: l3n8xrPXCzZITeC/Ph/b3XaVg8riPjyNMN6WgB0/frM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a0:e4:83:86:84:19:ac:05:0d:51:b8:4a:0a:4a:3e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
Validity
Not Before: Apr 18 14:00:23 2026 GMT
Not After : Apr 19 14:00:23 2026 GMT
Subject: CN=990a2d59ec4b89a4557e90f10600e3d1082996f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3c:2c:b8:23:4f:e9:a4:60:c7:38:c6:5b:2c:
ce:7e:74:c7:53:89:23:87:61:ae:41:e8:71:90:41:
d5:03:37:e1:71:57:9c:ed:01:99:2b:33:6f:a4:24:
86:b0:dc:e3:04:48:a6:04:2c:c6:b7:ca:27:51:cb:
e5:f8:20:fb:59:46:ec:5e:bd:36:74:88:dd:97:0e:
c1:69:a4:b2:27:46:84:18:e3:4b:5f:18:c0:a0:07:
c1:c6:a9:b8:dd:c8:5e:fa:56:33:d2:77:9e:53:75:
6e:69:96:47:9e:02:c4:7c:03:72:02:5c:40:0b:48:
6d:70:0b:01:f2:57:4d:0b:3a:15:10:62:c9:04:e6:
22:3f:6c:ad:93:b0:26:4c:0e:73:f8:4f:5d:b4:f2:
b6:b8:ab:e7:27:e6:f6:2f:8a:3d:c9:ad:a3:5a:ed:
2c:b2:98:b8:24:f8:b3:7f:60:60:a3:5d:6d:ed:c1:
96:6c:7d:67:db:42:1f:d4:00:4a:8a:d0:c8:2d:91:
61:64:51:e6:f7:95:20:bb:10:b9:e8:5e:52:57:ad:
1a:ca:ce:d3:c4:14:52:e8:e5:3b:09:d1:4d:1f:9f:
24:71:12:6e:55:d7:f8:33:9a:a4:54:8e:9f:9a:1b:
05:ec:05:94:e0:c6:d9:c2:1a:45:a8:31:d6:1c:90:
a6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0A:2D:59:EC:4B:89:A4:55:7E:90:F1:06:00:E3:D1:08:29:96:F2
X509v3 Authority Key Identifier:
keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:87:7e:d7:d0:b7:69:83:15:c3:7f:9c:a9:c7:c1:3e:dd:d6:
d0:0a:96:7f:ad:c8:15:de:a1:48:b7:de:60:d7:76:db:ee:8a:
01:0c:cd:66:ed:f6:27:4b:5a:a7:5b:6e:0f:52:d3:bc:0b:25:
65:67:3a:32:a3:8d:d5:d1:2e:48:51:8c:60:83:e0:23:7e:4c:
48:f8:f9:b1:58:39:11:5a:3f:ea:bf:89:84:37:67:b0:04:ed:
31:af:9d:67:4c:2c:09:a1:4e:8d:d1:36:84:30:24:6c:cd:8a:
5d:8b:cc:bb:84:b2:dd:90:ef:27:0a:81:e0:c3:d4:37:19:a3:
e2:21:37:0a:fc:67:05:bc:fb:b8:e5:f9:3a:13:69:fd:2c:55:
3a:d1:16:bf:46:03:2a:ac:bb:4e:55:f6:5c:8e:f7:01:ab:2f:
b6:47:86:42:73:96:be:29:ff:68:f3:8f:36:b9:9c:68:de:9d:
c2:06:b8:8f:9a:f6:d1:e6:dc:1a:7b:7d:fd:eb:b3:a4:fb:b0:
1a:48:f7:8f:28:51:8e:7d:df:98:96:f0:7b:54:67:91:ba:b6:
b7:35:16:bd:c9:79:b1:ad:5f:b4:48:b7:e8:e0:5a:50:84:7a:
04:6b:12:cf:27:73:22:3b:c0:4d:4d:e4:f2:18:f1:24:3d:ac:
6a:de:da:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 23:40:44 2026 by rpki-client