Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
File: xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft (raw, json)
Hash identifier: H6tJz2pFhdEvME0V0F1TtF/ZFjGs78MNQJBxjnEGsMY=
Subject key identifier: 03:2B:0E:B2:68:63:13:FA:39:43:26:D8:92:55:FD:17:01:17:1E:3E
Authority key identifier: C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
Certificate issuer: /CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Certificate serial: 019D37F7738FD92350C65C3C7117E33C847B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
Manifest number: 1381
Signing time: Sun 29 Mar 2026 05:00:57 +0000
Manifest this update: Sun 29 Mar 2026 05:00:57 +0000
Manifest next update: Mon 30 Mar 2026 05:00:57 +0000
Files and hashes: 1: tEK593WJ1iubEABZdt5V-9KKKM4.asa (hash: E4hQi2zAoFJBlGZkd6DPZ2wlgeYWNDC2Pt81NJPg3fw=)
2: xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl (hash: NcFc6QYeNsGP0JBYjE8QWMDfCj7WU0tS2vPugoY17vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:73:8f:d9:23:50:c6:5c:3c:71:17:e3:3c:84:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Validity
Not Before: Mar 29 05:00:57 2026 GMT
Not After : Mar 30 05:00:57 2026 GMT
Subject: CN=032b0eb2686313fa394326d89255fd1701171e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a0:5e:4f:c4:3f:1a:04:48:04:44:b8:9c:b9:
c5:40:09:a1:e9:ba:4b:13:78:58:d9:54:b1:f6:62:
2a:cf:3e:5f:41:60:ac:75:e6:0b:a0:62:b4:5a:84:
b8:ad:6f:b6:7a:39:7d:70:3b:3d:90:a0:10:9e:d0:
e9:a4:a0:8f:6f:fe:60:71:9a:57:ef:e8:dd:3b:ed:
e2:4d:ba:92:5f:71:77:dd:bb:a1:06:6b:71:2c:cc:
59:83:1b:30:9c:0a:a7:fb:45:7e:07:7e:65:9b:55:
49:d1:dd:f8:2f:46:2a:57:1f:65:a9:7e:e7:7d:de:
35:c1:3a:39:3d:19:28:35:f6:49:55:a2:51:b7:cd:
de:0d:ac:ec:ae:71:10:e3:40:e9:ce:92:3b:94:b3:
e9:ae:f5:a5:9e:72:7e:0a:b9:6b:de:f9:13:c5:f7:
34:87:f9:71:5f:ad:db:63:c8:89:1d:c3:8f:a1:90:
cd:a1:3b:18:e4:8d:25:30:c5:79:0c:2a:ec:ff:17:
f2:2a:f4:98:42:63:43:6d:56:a4:cb:b8:39:4e:06:
5b:df:a7:bc:8b:b1:7d:c2:bc:0d:5a:be:98:22:f4:
fa:fd:36:6a:a1:d5:9e:68:b0:1b:b9:c6:1b:21:e8:
d0:d6:d8:c9:ed:49:ea:04:02:e7:69:0e:42:28:0d:
45:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2B:0E:B2:68:63:13:FA:39:43:26:D8:92:55:FD:17:01:17:1E:3E
X509v3 Authority Key Identifier:
keyid:C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:60:29:0b:88:80:62:21:ef:6f:8c:fa:56:27:17:92:6d:d7:
0f:32:42:bb:b0:13:fa:df:fe:a2:fd:b9:b3:99:19:66:5e:76:
26:e6:d3:11:e1:bc:4c:ed:4a:2b:c7:e0:a0:cb:d7:52:d4:33:
b9:5d:76:76:74:4b:9f:bf:9c:27:85:5a:e0:55:43:f1:3c:be:
de:59:19:53:93:0b:13:e9:95:f0:97:3c:95:56:01:7a:02:7b:
2c:1f:1f:0a:4d:a9:dd:58:09:3d:77:61:75:ba:fe:55:b6:50:
c5:cf:e5:10:43:a1:02:6e:c7:9f:29:33:e2:30:db:da:f2:a9:
2a:cb:32:9a:0e:15:bf:2d:d6:15:e5:e8:11:2a:db:ba:99:7d:
47:65:25:9d:e0:1a:49:d1:1a:bb:f2:d9:80:4d:5a:f7:4e:00:
20:63:a3:7c:d3:c9:b9:ef:1a:9a:c0:03:5d:3c:1e:a3:c1:f6:
6c:29:1e:14:27:d9:ab:0e:34:81:26:d0:65:07:60:58:79:dd:
e6:c7:52:52:1d:59:ab:20:ee:e9:4e:fc:d3:87:5e:a2:9d:fd:
87:78:4d:d3:74:b4:32:38:e2:9d:33:61:d3:e3:27:74:91:76:
ac:d4:a4:c5:65:29:f6:dc:42:60:12:a9:7f:c0:6d:94:0b:83:
e2:b6:b7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:14 2026 by rpki-client