Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
File: xOEMfL_9dIipagLVyRL5-SVku1w.mft (raw, json)
Hash identifier: F++CdmBNv1DXcNmbbBWbGWaRlngNm0XeaqSmhFyizOA=
Subject key identifier: 85:EA:53:C9:65:D5:69:DF:ED:2E:CA:7B:44:02:D0:6E:0A:A5:52:6A
Authority key identifier: C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
Certificate issuer: /CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Certificate serial: 019CC63DE7302E1F71595739F404D4279EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
Manifest number: 024B
Signing time: Sat 07 Mar 2026 03:01:11 +0000
Manifest this update: Sat 07 Mar 2026 03:01:11 +0000
Manifest next update: Sun 08 Mar 2026 03:01:11 +0000
Files and hashes: 1: IWls0AbP5WlDYBhalibARg9icP8.roa (hash: dYr+MsyOWEf1lFygz2jaouZlTKLtP7ebV5kBwfOgAwI=)
2: xOEMfL_9dIipagLVyRL5-SVku1w.crl (hash: 0rKPOaygAzyn01BNcs2qtb/acTBkthdW6pFag+K8M/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 00:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c6:3d:e7:30:2e:1f:71:59:57:39:f4:04:d4:27:9e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Validity
Not Before: Mar 7 03:01:11 2026 GMT
Not After : Mar 8 03:01:11 2026 GMT
Subject: CN=85ea53c965d569dfed2eca7b4402d06e0aa5526a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:78:2c:fe:93:50:b0:95:51:34:98:cb:71:a4:
39:6c:c3:19:a0:df:40:7d:42:de:ae:0d:12:09:ca:
61:8e:49:ab:ef:9d:a1:45:12:32:42:c5:00:49:63:
e8:34:a0:1b:62:cb:98:dd:03:e8:48:d0:7c:0c:6f:
b4:41:16:10:6f:1f:25:4c:58:4c:0d:4f:1c:39:a9:
52:8f:79:62:d5:76:08:92:68:75:f3:fd:3e:e7:d3:
ed:9e:16:28:56:03:c6:e2:89:ee:15:a6:ba:dc:7f:
77:37:03:1f:b1:e0:fb:db:66:0b:cd:46:43:83:1d:
11:89:54:b5:9c:07:ab:0d:91:08:7a:89:fc:85:fa:
ed:42:37:54:15:3a:7c:fa:67:d2:06:50:41:8f:20:
d3:df:1a:8b:52:cb:89:c3:58:97:00:0c:1d:d9:7d:
1a:e7:b3:38:aa:c9:7e:77:c9:aa:89:35:fa:ee:28:
df:3f:fa:7b:91:d2:68:f2:d4:20:b6:95:ae:35:9c:
b3:e8:e3:fe:ce:f2:2f:48:54:89:28:48:da:11:60:
b0:1d:15:2f:5f:88:90:d3:7f:33:f8:08:dc:50:cd:
bc:64:1f:09:64:6f:62:1f:86:be:4a:09:f5:5a:b7:
d8:70:0c:c0:2a:35:13:30:97:a9:b1:d6:3a:fb:b3:
82:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EA:53:C9:65:D5:69:DF:ED:2E:CA:7B:44:02:D0:6E:0A:A5:52:6A
X509v3 Authority Key Identifier:
keyid:C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:91:c1:6d:e2:d2:6d:8f:93:a0:89:e0:fa:d6:45:72:36:22:
34:d9:4b:43:54:12:8f:91:fe:36:4e:6f:d9:83:a9:cc:5c:9c:
c6:1f:b0:69:44:ea:e2:2c:03:f1:14:36:50:06:28:8b:3c:fa:
9c:23:18:ef:a5:3d:a0:be:40:58:6f:51:f4:a2:4d:6c:d2:30:
fb:45:cd:e0:31:4c:09:a4:f6:8f:08:8d:fe:13:65:ed:1d:10:
67:bb:c7:c0:b2:7d:85:6c:15:97:de:a4:d2:bc:f5:84:d7:d2:
46:7c:65:0f:78:23:eb:1a:4e:e2:e5:e0:dd:9d:d1:f4:5a:52:
88:a5:33:d5:9e:90:11:a0:77:9d:6f:75:bf:ec:13:49:a9:7f:
c8:99:bb:66:a0:c9:91:e3:f3:d7:9e:ab:18:a1:a3:f6:5b:a4:
e0:f8:80:68:a7:e0:5b:f6:b0:ee:5b:dc:4e:20:21:23:8e:e4:
55:f8:46:62:ba:2b:14:9c:0c:b6:89:9e:00:1b:38:7e:8b:58:
8d:9c:a2:a4:d7:f1:f9:e1:98:50:38:01:a8:2a:f8:e4:da:23:
aa:1e:00:c8:c9:33:a6:f7:81:df:f4:a4:a2:5c:47:97:73:00:
6f:9a:b1:3d:c1:e0:a7:04:bf:71:62:6f:c7:cb:0e:ae:3c:1e:
fe:aa:02:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 05:52:05 2026 by rpki-client