Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
File: xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft (raw, json)
Hash identifier: aBl6jrKK+HuDyQeVFKhT4VUN2LOthW9TlWoX8XqbzXc=
Subject key identifier: 5D:A3:DD:DA:0D:D4:52:C0:C9:46:AA:E1:3D:DC:47:F8:B0:9C:E6:38
Authority key identifier: C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
Certificate issuer: /CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Certificate serial: 01A03E5FDF09E6D9F740B2AB2EFE664D3832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
Manifest number: 1512
Signing time: Wed 26 Aug 2026 14:01:05 +0000
Manifest this update: Wed 26 Aug 2026 14:01:05 +0000
Manifest next update: Thu 27 Aug 2026 14:01:05 +0000
Files and hashes: 1: tEK593WJ1iubEABZdt5V-9KKKM4.asa (hash: E4hQi2zAoFJBlGZkd6DPZ2wlgeYWNDC2Pt81NJPg3fw=)
2: xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl (hash: 46K1cnOQaqqatBzTzPED+rPHFDorZxlK52AtzWi8nMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:5f:df:09:e6:d9:f7:40:b2:ab:2e:fe:66:4d:38:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Validity
Not Before: Aug 26 14:01:05 2026 GMT
Not After : Aug 27 14:01:05 2026 GMT
Subject: CN=5da3ddda0dd452c0c946aae13ddc47f8b09ce638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6c:35:2f:0b:af:9f:80:1d:00:42:2a:2d:7a:
9c:5b:85:42:be:fa:9f:03:72:e2:d5:6d:58:61:b6:
72:9a:7f:c1:7b:81:d3:4a:1a:b9:79:36:13:ba:ad:
d8:fd:5d:23:3d:08:23:c1:f3:da:1c:86:02:c2:de:
ee:0b:0b:78:89:12:f2:27:21:3a:7e:29:92:b5:30:
c0:85:2a:90:09:65:1e:0c:d2:21:f4:80:7c:e3:91:
57:f7:e3:2c:54:dd:8e:75:4a:5d:5a:99:d2:2e:4f:
63:be:81:27:b6:79:5a:d1:b3:fa:1a:35:8b:80:57:
75:a9:0f:38:74:78:05:4a:98:34:97:83:8f:3e:3f:
23:0a:25:9b:48:eb:5c:14:5f:27:8a:ca:16:c4:e5:
f8:66:d3:6a:4f:ef:73:eb:3f:e4:47:01:9e:b5:98:
19:b4:79:af:82:14:cb:b9:94:f9:fc:b0:97:33:0f:
09:c7:50:08:ce:21:1b:91:3b:0a:7c:17:37:93:69:
b9:ff:33:49:7d:42:07:78:83:da:90:16:c4:98:1f:
2d:06:4f:d8:61:23:6e:cd:2c:09:e3:2d:11:79:58:
f5:a6:e5:e8:d1:3a:4c:f5:4b:fc:8d:87:90:2e:55:
ae:0c:06:52:65:0e:a9:90:c2:62:c4:e8:58:60:4b:
92:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A3:DD:DA:0D:D4:52:C0:C9:46:AA:E1:3D:DC:47:F8:B0:9C:E6:38
X509v3 Authority Key Identifier:
keyid:C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:de:76:e3:9d:69:56:7a:f7:52:39:51:c8:31:74:d7:b9:50:
23:9e:cf:9e:c4:30:ff:8c:52:8e:67:f1:f5:1f:1b:94:a0:d8:
d5:85:cf:4b:aa:d8:d1:45:e5:40:28:ec:fb:bd:76:24:f6:ec:
c9:dc:15:39:b8:51:32:49:1c:6c:04:9d:63:4a:b1:94:72:8a:
e7:ff:d1:90:41:8b:1e:34:b9:57:ff:49:9e:a7:69:e3:45:38:
1e:d0:3e:84:e9:12:e3:e9:fb:1c:58:93:39:e1:b9:57:df:68:
9d:56:38:3e:9d:53:bc:66:2b:72:82:71:13:e0:40:07:69:40:
a1:29:d1:f9:a4:ba:ca:5d:ac:08:1b:95:c4:8e:7d:2d:d8:56:
d4:b5:ba:22:97:f7:b1:ff:01:6c:10:2a:f8:67:50:ad:24:88:
0c:a7:0e:1e:b0:3c:f2:96:40:44:40:91:34:84:9c:d3:a7:d5:
29:fb:57:0d:1c:68:51:bf:d5:75:34:0b:0f:61:94:89:be:93:
c5:8e:b9:88:d0:52:47:85:eb:26:b9:f1:de:27:9e:ea:e0:fd:
56:5e:77:89:93:c0:27:59:70:0b:a1:03:25:68:3c:d9:e1:06:
26:b3:e6:22:6d:c8:95:b6:7c:b2:c1:a7:ab:ae:df:60:19:f4:
65:14:50:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA+X98J5tn3QLKrLv5mTTgyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZTBiMzhjNTliZDQyYjJiMDdlMmFhZmIyNmQ5ZjU1YmFi
MzgxN2EwHhcNMjYwODI2MTQwMTA1WhcNMjYwODI3MTQwMTA1WjAzMTEwLwYDVQQD
Eyg1ZGEzZGRkYTBkZDQ1MmMwYzk0NmFhZTEzZGRjNDdmOGIwOWNlNjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2w1Lwuvn4AdAEIqLXqcW4VCvvqf
A3Li1W1YYbZymn/Be4HTShq5eTYTuq3Y/V0jPQgjwfPaHIYCwt7uCwt4iRLyJyE6
fimStTDAhSqQCWUeDNIh9IB845FX9+MsVN2OdUpdWpnSLk9jvoEntnla0bP6GjWL
gFd1qQ84dHgFSpg0l4OPPj8jCiWbSOtcFF8nisoWxOX4ZtNqT+9z6z/kRwGetZgZ
tHmvghTLuZT5/LCXMw8Jx1AIziEbkTsKfBc3k2m5/zNJfUIHeIPakBbEmB8tBk/Y
YSNuzSwJ4y0ReVj1puXo0TpM9Uv8jYeQLlWuDAZSZQ6pkMJixOhYYEuSqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2j3doN1FLAyUaq4T3cR/iwnOY4MB8GA1UdIwQY
MBaAFMTgs4xZvUKysH4qr7Jtn1W6s4F6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wYzc1NmMtNGNmMS00NzliLTk3NGQt
YjIzMmQ3ZGFmY2FjLzEveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wYzc1NmMtNGNmMS00NzliLTk3NGQtYjIzMmQ3ZGFmY2Fj
LzEveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE952451p
Vnr3UjlRyDF017lQI57PnsQw/4xSjmfx9R8blKDY1YXPS6rY0UXlQCjs+712JPbs
ydwVObhRMkkcbASdY0qxlHKK5//RkEGLHjS5V/9Jnqdp40U4HtA+hOkS4+n7HFiT
OeG5V99onVY4Pp1TvGYrcoJxE+BAB2lAoSnR+aS6yl2sCBuVxI59LdhW1LW6Ipf3
sf8BbBAq+GdQrSSIDKcOHrA88pZARECRNISc06fVKftXDRxoUb/VdTQLD2GUib6T
xY65iNBSR4XrJrnx3iee6uD9Vl53iZPAJ1lwC6EDJWg82eEGJrPmIm3IlbZ8ssGn
q67fYBn0ZRRQ4Q==
-----END CERTIFICATE-----
Generated at Wed Aug 26 22:37:11 2026 by rpki-client