Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
File: xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft (raw, json)
Hash identifier: jK/F5+ydcUl/4aSJJhPDyhWbnfWm0xl0Lgdhq6Oax8I=
Subject key identifier: 0C:17:34:33:2C:6F:3D:66:AE:82:E7:FC:A7:EE:0D:40:91:8C:60:FD
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial: 019CB92713C193DF76A282BA5343D4D625A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
Manifest number: 1195
Signing time: Wed 04 Mar 2026 14:01:11 +0000
Manifest this update: Wed 04 Mar 2026 14:01:11 +0000
Manifest next update: Thu 05 Mar 2026 14:01:11 +0000
Files and hashes: 1: ATFqvKQfCzg1eIhHj9ilysnZYnE.roa (hash: 9xWvqqO+irmFSgWZgkDiVyOSk6AqF02qWQdfh9GrCc8=)
2: NIt5HAEHP3eGIkRaRfmU_TQEUio.roa (hash: kNqtp8gVzKVPwqTczsFvU1xgIi6B9Z0PZaQgvs2xN6o=)
3: gtTwRDBJR-BbMiRZiF0UkREdrNI.roa (hash: EYI6Dc616oG3PdcronQ8IrDd6TturvsbVQq4J3V4p+w=)
4: tPnRw3top4XnUY_nTcwvwdpUiGQ.roa (hash: M0xYz4wzzLwebgXureqeaj7zhKGgbdLeOlyBhuFnNKo=)
5: xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl (hash: 9267N/tcu3bS0PAI496Htyftxhqe0xTGuCliP3mqHXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:27:13:c1:93:df:76:a2:82:ba:53:43:d4:d6:25:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
Validity
Not Before: Mar 4 14:01:11 2026 GMT
Not After : Mar 5 14:01:11 2026 GMT
Subject: CN=0c1734332c6f3d66ae82e7fca7ee0d40918c60fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9e:4f:02:2e:3c:b4:c6:61:7d:46:77:5c:d7:
f7:82:93:96:ed:02:25:01:ec:4d:01:db:5a:61:fe:
83:92:b2:48:29:f5:26:a5:ba:23:a5:1b:8d:f1:e0:
d8:5e:66:83:77:52:5c:e0:c7:26:c7:bf:67:2a:1b:
d5:97:46:93:f2:3a:91:21:26:a5:98:bb:f4:d4:7e:
3a:2e:fb:88:83:c1:20:20:02:ff:be:43:83:56:8b:
2a:5d:d9:12:f7:4b:5c:18:29:4f:d8:7f:4a:83:53:
06:8b:fc:28:c1:a5:99:40:51:76:ef:41:c1:9e:9e:
da:5d:aa:aa:8c:d4:d0:73:30:97:46:55:b2:f5:57:
c2:a0:66:61:75:72:c2:7d:fa:5f:1e:03:4e:d3:18:
a4:74:05:b9:31:26:5b:db:c6:33:f8:f5:e1:1e:58:
45:49:77:eb:6c:ae:4b:0b:17:d0:2c:f3:b7:93:f8:
7c:39:ff:8b:24:0e:21:2e:d5:65:6c:e9:70:43:98:
91:68:8b:a8:2f:2e:af:9d:8f:15:19:ef:16:73:f9:
cb:32:66:89:6e:dd:fd:cb:96:98:0e:94:47:e6:b3:
0b:a6:20:3b:8a:ea:25:18:c2:ee:60:7a:56:7b:09:
8b:1e:fc:25:c7:be:c0:c3:a2:11:69:4b:c5:ba:86:
4f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:17:34:33:2C:6F:3D:66:AE:82:E7:FC:A7:EE:0D:40:91:8C:60:FD
X509v3 Authority Key Identifier:
keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a9:79:db:84:69:cf:2f:fd:94:8c:c4:18:73:d9:d1:74:0e:
ec:dc:8c:66:37:8d:23:12:96:4b:6a:61:4e:d4:fd:e3:37:89:
a5:b4:2f:ea:05:84:25:11:4d:c8:d6:0c:10:b4:e8:ba:53:a7:
45:ba:57:87:10:a4:a6:9c:77:4b:17:31:85:df:3f:e6:ae:9b:
75:4d:4d:7a:b0:dd:00:9c:96:36:a5:0b:fe:3b:58:85:96:fb:
d5:74:2b:b3:70:73:f4:6f:8e:f1:41:c6:22:fb:9b:2e:bf:97:
f1:43:ca:d6:93:fe:f0:59:f7:2d:d5:98:c0:18:92:fc:ad:ef:
49:5c:76:05:0c:ce:69:31:25:3d:ea:70:83:f6:dc:5e:21:e8:
32:6c:a7:30:7d:82:a1:da:a9:4f:b0:98:79:10:69:90:09:be:
80:23:fe:b1:36:eb:b2:55:ae:1f:0f:03:a5:94:1f:68:74:26:
0d:93:b5:d2:fe:72:3b:39:3a:c2:94:30:48:43:7c:4f:28:f9:
40:e6:f4:79:40:a8:16:fe:54:48:ae:29:06:63:c5:be:4f:30:
ee:cf:98:a8:65:31:0a:63:17:27:2c:a0:ba:4f:56:26:06:ba:
11:8e:9a:95:2a:be:40:b3:27:fc:31:a1:58:7b:fa:33:7b:b5:
f9:67:f7:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZy5JxPBk992ooK6U0PU1iWoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZWIzNGRkYTJmODA5NDk2ODQ5NDg5MjA2MzM1MWVlMGYx
MGU5MWEwHhcNMjYwMzA0MTQwMTExWhcNMjYwMzA1MTQwMTExWjAzMTEwLwYDVQQD
EygwYzE3MzQzMzJjNmYzZDY2YWU4MmU3ZmNhN2VlMGQ0MDkxOGM2MGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J5PAi48tMZhfUZ3XNf3gpOW7QIl
AexNAdtaYf6DkrJIKfUmpbojpRuN8eDYXmaDd1Jc4Mcmx79nKhvVl0aT8jqRISal
mLv01H46LvuIg8EgIAL/vkODVosqXdkS90tcGClP2H9Kg1MGi/wowaWZQFF270HB
np7aXaqqjNTQczCXRlWy9VfCoGZhdXLCffpfHgNO0xikdAW5MSZb28Yz+PXhHlhF
SXfrbK5LCxfQLPO3k/h8Of+LJA4hLtVlbOlwQ5iRaIuoLy6vnY8VGe8Wc/nLMmaJ
bt39y5aYDpRH5rMLpiA7iuolGMLuYHpWewmLHvwlx77Aw6IRaUvFuoZP6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwXNDMsbz1mroLn/KfuDUCRjGD9MB8GA1UdIwQY
MBaAFMTrNN2i+AlJaElIkgYzUe4PEOkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEt
YTM0N2I1NmYzYjlhLzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9iOTY1ODQtMWY3MS00OGJiLWEwMjEtYTM0N2I1NmYzYjlh
LzEveE9zMDNhTDRDVWxvU1VpU0JqTlI3ZzhRNlJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALal524Rp
zy/9lIzEGHPZ0XQO7NyMZjeNIxKWS2phTtT94zeJpbQv6gWEJRFNyNYMELToulOn
RbpXhxCkppx3Sxcxhd8/5q6bdU1NerDdAJyWNqUL/jtYhZb71XQrs3Bz9G+O8UHG
IvubLr+X8UPK1pP+8Fn3LdWYwBiS/K3vSVx2BQzOaTElPepwg/bcXiHoMmynMH2C
odqpT7CYeRBpkAm+gCP+sTbrslWuHw8DpZQfaHQmDZO10v5yOzk6wpQwSEN8Tyj5
QOb0eUCoFv5USK4pBmPFvk8w7s+YqGUxCmMXJyyguk9WJga6EY6alSq+QLMn/DGh
WHv6M3u1+Wf3qw==
-----END CERTIFICATE-----
Generated at Wed Mar 4 22:21:18 2026 by rpki-client