Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
File: xOEMfL_9dIipagLVyRL5-SVku1w.mft (raw, json)
Hash identifier: mF9A0wkQ6hZPXWV2P8Qspeqp3OHhxIayH0UPm2tFJlo=
Subject key identifier: 25:F3:47:AD:2B:46:8B:24:A8:88:70:66:87:7D:93:F0:EB:55:45:6A
Authority key identifier: C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
Certificate issuer: /CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Certificate serial: 01A06EDE4B2619F8FA507814D6A162720E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
Manifest number: 0430
Signing time: Sat 05 Sep 2026 00:00:56 +0000
Manifest this update: Sat 05 Sep 2026 00:00:56 +0000
Manifest next update: Sun 06 Sep 2026 00:00:56 +0000
Files and hashes: 1: IWls0AbP5WlDYBhalibARg9icP8.roa (hash: dYr+MsyOWEf1lFygz2jaouZlTKLtP7ebV5kBwfOgAwI=)
2: xOEMfL_9dIipagLVyRL5-SVku1w.crl (hash: PgVxTBJPtYVmejlOoAEp2JaNBP7ExNVwize9sRHnbWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:4b:26:19:f8:fa:50:78:14:d6:a1:62:72:0e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Validity
Not Before: Sep 5 00:00:56 2026 GMT
Not After : Sep 6 00:00:56 2026 GMT
Subject: CN=25f347ad2b468b24a8887066877d93f0eb55456a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:88:18:3c:9a:27:e0:c2:c9:b1:e3:9c:ec:2a:
d7:45:df:53:21:35:ab:86:ed:4d:22:92:de:a7:bd:
b8:d6:21:d1:d5:54:28:96:50:a0:7c:9c:ab:c5:77:
8e:cf:ff:db:bd:09:4e:56:1c:4a:28:0b:f1:88:a3:
03:04:4d:e5:a5:b0:b6:0d:dc:fc:e5:d9:18:c3:3e:
3d:08:22:7f:9f:8e:43:f4:b7:49:21:f6:b4:2d:d3:
ed:a4:b0:9c:ed:ee:cf:80:a4:6e:ec:2d:d9:85:81:
7c:b7:f7:c6:4c:38:90:1e:d0:61:9a:3e:24:e8:d6:
b3:79:c0:a1:7d:6d:b0:ca:6c:b5:76:7a:2b:69:44:
95:ed:5e:a3:60:fa:ca:17:5b:03:ce:7b:3f:f9:8b:
86:3e:6a:9f:ad:5a:e3:d4:a1:67:8e:c3:00:bf:a7:
a9:e1:cc:78:76:85:8f:cf:eb:f4:8f:7b:1f:62:72:
7e:5f:83:94:53:f6:ea:60:6d:e2:38:9e:cd:d3:94:
ff:e9:8e:aa:c9:81:cc:a2:89:64:21:e2:3e:b7:99:
2b:4a:ff:4e:99:e2:1f:93:16:05:57:28:58:65:6d:
81:f6:5e:eb:92:bc:cc:02:87:d6:41:74:43:5f:68:
81:c1:2b:dc:24:c7:52:a5:c6:ca:46:7e:e0:2f:69:
80:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F3:47:AD:2B:46:8B:24:A8:88:70:66:87:7D:93:F0:EB:55:45:6A
X509v3 Authority Key Identifier:
keyid:C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:04:a1:32:ce:5d:36:b6:2e:3d:96:5f:15:d3:fd:23:de:66:
21:1c:c3:5a:9e:e7:05:e2:23:e1:78:c2:dc:a2:39:57:9e:fe:
ba:d4:77:24:13:bb:df:e7:15:4e:28:d7:bd:c5:77:ae:05:dd:
21:8e:18:14:2a:43:6a:8e:4b:63:1a:93:c6:48:d9:97:07:55:
1f:29:8c:4f:2b:9c:c5:c4:bf:d0:35:75:5e:ab:0c:26:6f:e8:
ca:c9:54:d2:d5:ca:8f:11:dc:04:42:c3:08:76:db:89:77:09:
03:5a:ce:75:6c:54:f0:2e:96:e9:a9:68:99:e9:5d:4a:2d:05:
bb:57:9d:14:c7:ca:59:7d:6c:27:23:82:99:7b:d3:93:f1:4e:
42:75:dc:e2:77:4c:84:7d:1a:7c:2c:50:c2:be:c5:b5:13:b0:
6c:77:38:a1:86:5b:01:8b:00:fb:5c:65:06:16:45:fa:32:ca:
ac:5c:49:b3:e8:92:e6:94:d9:85:0f:e3:5a:6d:e8:3a:d9:ea:
57:df:05:ac:70:de:42:72:71:77:78:a8:6b:74:88:94:a2:87:
d8:be:ad:a4:b4:b8:f5:16:90:1f:28:bf:44:5b:04:25:7f:05:
60:65:38:34:3b:db:9c:51:49:3a:a7:8b:9a:1e:a5:ca:2b:77:
7d:8f:18:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:58:05 2026 by rpki-client