Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
File: xOEMfL_9dIipagLVyRL5-SVku1w.mft (raw, json)
Hash identifier: wFiMjXTqXcPWDOt3IBd5K8n27F1nU7v8ineKUOKvQH0=
Subject key identifier: 3E:2B:B5:D5:6C:7E:CF:EE:D8:09:36:2C:FC:3D:09:A5:90:16:1B:1A
Authority key identifier: C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
Certificate issuer: /CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Certificate serial: 019DADFB87AA38D5CD5C88DF927E323DCF51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
Manifest number: 02C3
Signing time: Tue 21 Apr 2026 03:00:35 +0000
Manifest this update: Tue 21 Apr 2026 03:00:35 +0000
Manifest next update: Wed 22 Apr 2026 03:00:35 +0000
Files and hashes: 1: IWls0AbP5WlDYBhalibARg9icP8.roa (hash: dYr+MsyOWEf1lFygz2jaouZlTKLtP7ebV5kBwfOgAwI=)
2: xOEMfL_9dIipagLVyRL5-SVku1w.crl (hash: kEWMybrJ7a2JCJzlQku5hiR1zoPGO6FZndfKG4zW4VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ad:fb:87:aa:38:d5:cd:5c:88:df:92:7e:32:3d:cf:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Validity
Not Before: Apr 21 03:00:35 2026 GMT
Not After : Apr 22 03:00:35 2026 GMT
Subject: CN=3e2bb5d56c7ecfeed809362cfc3d09a590161b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:03:82:1d:e6:97:66:ae:0b:db:e6:38:75:
25:34:19:5a:a0:a1:bd:c7:36:1c:6e:6d:5c:6d:45:
25:c3:4b:c1:c1:53:c4:79:3b:4d:c2:c6:c0:13:bb:
9b:44:ad:32:23:99:d0:58:2c:51:fe:9d:5a:5a:4e:
48:2d:18:5e:ec:0f:44:90:1e:d5:c4:98:a6:7e:69:
6b:0b:01:a8:40:54:16:2c:b7:8f:65:d9:74:6c:2d:
0d:bb:a5:b4:15:f8:f1:67:40:26:ee:36:23:7e:13:
6e:d2:96:e0:97:4a:ae:d5:33:2a:7b:7b:bc:ff:a3:
2e:04:37:6f:98:4e:60:1e:54:9a:81:a0:b5:ac:b2:
6f:15:24:01:78:39:65:5d:ee:05:42:e8:87:8d:97:
91:e9:86:aa:43:a0:76:44:26:de:6a:14:20:97:09:
f7:60:ff:a2:33:ff:27:f3:2e:91:2b:8f:59:71:c1:
c1:62:07:f1:47:ea:ec:ba:ef:aa:72:c5:4c:dd:67:
3d:7f:84:8a:df:f5:56:8f:89:07:22:9c:d2:b0:a9:
3a:24:d2:31:57:9d:c5:7b:4a:b3:ec:6c:d8:3e:82:
77:0f:3f:a1:65:94:16:ac:19:d8:a6:a2:c7:b2:0f:
41:12:5e:d7:97:3b:01:d9:af:e6:98:ac:f2:82:66:
88:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2B:B5:D5:6C:7E:CF:EE:D8:09:36:2C:FC:3D:09:A5:90:16:1B:1A
X509v3 Authority Key Identifier:
keyid:C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fb:97:df:bc:5b:73:a4:41:8a:d1:2e:61:d4:3c:33:eb:79:
f0:a6:0e:68:2f:48:07:33:0e:a2:59:51:1a:d1:f0:71:61:4e:
db:7c:bf:bc:9d:b6:8c:c6:0c:7b:aa:0e:23:6f:28:b5:2e:88:
80:85:d5:05:a3:3d:78:57:a9:a7:31:db:79:78:f0:e7:dd:1f:
73:9b:bd:4a:e4:b6:43:17:e8:ab:a7:ad:7a:2a:8e:2f:a2:d1:
69:9f:6d:1a:dd:a2:83:c3:c3:cf:7e:09:da:bb:c5:2c:e3:a5:
51:e6:8a:3e:e7:b7:e4:e3:85:90:bc:44:83:62:f2:31:c5:df:
97:a5:3a:4d:73:78:43:2e:8a:65:ac:80:a6:02:03:a7:18:f0:
48:d2:ec:b0:d3:b8:ae:63:33:01:f4:80:8e:cb:67:a6:87:6e:
34:f7:d9:eb:17:ce:7c:d9:82:bf:24:b8:5d:27:9e:c0:cc:6e:
14:0b:7f:28:f3:fa:af:8f:ec:47:35:a1:b6:42:07:6e:fe:f1:
80:2f:ff:b2:85:70:91:13:87:f2:73:e2:46:93:8f:58:1b:e0:
64:51:9a:6f:84:7d:99:39:3b:23:0e:4a:bb:b7:59:db:df:0b:
7e:ab:e1:0d:00:59:03:f9:2a:30:d9:e4:d1:da:37:2a:80:e9:
5e:f5:7e:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2t+4eqONXNXIjfkn4yPc9RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZTEwYzdjYmZmZDc0ODhhOTZhMDJkNWM5MTJmOWY5MjU2
NGJiNWMwHhcNMjYwNDIxMDMwMDM1WhcNMjYwNDIyMDMwMDM1WjAzMTEwLwYDVQQD
EygzZTJiYjVkNTZjN2VjZmVlZDgwOTM2MmNmYzNkMDlhNTkwMTYxYjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcsDgh3ml2auC9vmOHUlNBlaoKG9
xzYcbm1cbUUlw0vBwVPEeTtNwsbAE7ubRK0yI5nQWCxR/p1aWk5ILRhe7A9EkB7V
xJimfmlrCwGoQFQWLLePZdl0bC0Nu6W0FfjxZ0Am7jYjfhNu0pbgl0qu1TMqe3u8
/6MuBDdvmE5gHlSagaC1rLJvFSQBeDllXe4FQuiHjZeR6YaqQ6B2RCbeahQglwn3
YP+iM/8n8y6RK49ZccHBYgfxR+rsuu+qcsVM3Wc9f4SK3/VWj4kHIpzSsKk6JNIx
V53Fe0qz7GzYPoJ3Dz+hZZQWrBnYpqLHsg9BEl7XlzsB2a/mmKzygmaI1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4rtdVsfs/u2Ak2LPw9CaWQFhsaMB8GA1UdIwQY
MBaAFMThDHy//XSIqWoC1ckS+fklZLtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE9FTWZMXzlkSWlwYWdMVnlSTDUtU1ZrdTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC80ZGIwYjEtNTk0NS00YTlkLWEwODUt
NDU4YmY1OTY4ZGQxLzEveE9FTWZMXzlkSWlwYWdMVnlSTDUtU1ZrdTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC80ZGIwYjEtNTk0NS00YTlkLWEwODUtNDU4YmY1OTY4ZGQx
LzEveE9FTWZMXzlkSWlwYWdMVnlSTDUtU1ZrdTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPuX37xb
c6RBitEuYdQ8M+t58KYOaC9IBzMOollRGtHwcWFO23y/vJ22jMYMe6oOI28otS6I
gIXVBaM9eFeppzHbeXjw590fc5u9SuS2Qxfoq6eteiqOL6LRaZ9tGt2ig8PDz34J
2rvFLOOlUeaKPue35OOFkLxEg2LyMcXfl6U6TXN4Qy6KZayApgIDpxjwSNLssNO4
rmMzAfSAjstnpoduNPfZ6xfOfNmCvyS4XSeewMxuFAt/KPP6r4/sRzWhtkIHbv7x
gC//soVwkROH8nPiRpOPWBvgZFGab4R9mTk7Iw5Ku7dZ298LfqvhDQBZA/kqMNnk
0do3KoDpXvV+ig==
-----END CERTIFICATE-----
Generated at Tue Apr 21 13:39:02 2026 by rpki-client