Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft
File: XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft (raw, json)
Hash identifier: KoYBAEJziYeX5NilgRSEjyWucaG8jNmEZjQVhPt3gl0=
Subject key identifier: 7C:A6:0F:05:1B:4F:D8:F1:51:A2:75:81:83:16:4B:63:2E:32:C6:8D
Authority key identifier: 5D:9F:8E:85:5B:F1:B0:43:09:C4:9C:41:F7:F4:30:DC:C8:F9:45:8D
Certificate issuer: /CN=5d9f8e855bf1b04309c49c41f7f430dcc8f9458d
Certificate serial: 019D262823B8F61C9D5CCFCB4202B572EDF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft
Manifest number: 0384
Signing time: Wed 25 Mar 2026 18:00:57 +0000
Manifest this update: Wed 25 Mar 2026 18:00:57 +0000
Manifest next update: Thu 26 Mar 2026 18:00:57 +0000
Files and hashes: 1: XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.crl (hash: MbSjwnTgdb2wBrPbKwxpaQ/adQpt+6bV1xYBT9B1sfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:23:b8:f6:1c:9d:5c:cf:cb:42:02:b5:72:ed:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9f8e855bf1b04309c49c41f7f430dcc8f9458d
Validity
Not Before: Mar 25 18:00:57 2026 GMT
Not After : Mar 26 18:00:57 2026 GMT
Subject: CN=7ca60f051b4fd8f151a2758183164b632e32c68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:69:17:38:c0:c1:4b:f8:77:a3:b1:d6:16:
3f:54:30:6f:e3:10:51:9f:42:91:96:50:b1:9e:f9:
92:58:55:71:32:e3:f6:4a:01:e1:b3:49:61:90:32:
af:ca:25:26:9e:6e:b4:db:5c:48:fc:22:91:6d:e1:
19:72:34:f5:45:4a:20:dc:d0:ca:eb:6a:e1:a8:ca:
39:3c:ac:33:4a:72:20:1b:b2:d6:8d:a1:2f:f1:31:
b4:aa:13:0e:59:49:ba:0e:8c:8b:9d:b6:3e:3d:9b:
c2:34:8a:ab:b5:80:16:9a:99:a4:ac:41:ae:44:4c:
7b:c3:4f:03:0d:b7:09:4b:62:92:ad:94:b5:32:da:
60:8a:14:81:d6:24:1a:f5:e1:20:15:69:71:86:29:
4e:ab:90:a0:63:6e:67:2c:4d:b8:88:0e:42:33:1c:
10:9e:30:67:cf:55:6b:6b:da:d1:ba:07:30:6d:fe:
a3:6f:12:62:b5:07:d7:f1:12:97:61:8c:fe:6d:7a:
b6:7b:d9:87:00:2c:5e:d0:c6:a4:2d:f9:bc:2e:40:
57:95:0f:f6:a0:9d:dd:21:fb:55:2e:00:2c:4c:6c:
29:a2:ea:f6:bd:32:60:fa:c8:cc:73:6c:0a:3e:6a:
50:e3:8b:13:9d:c3:e9:56:40:b0:39:df:4f:95:cc:
0b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A6:0F:05:1B:4F:D8:F1:51:A2:75:81:83:16:4B:63:2E:32:C6:8D
X509v3 Authority Key Identifier:
keyid:5D:9F:8E:85:5B:F1:B0:43:09:C4:9C:41:F7:F4:30:DC:C8:F9:45:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3e:d2:4e:98:25:ea:86:fb:e3:7a:10:d9:f2:aa:46:a9:30:
08:28:09:48:62:52:2b:b7:ca:3b:41:4b:1c:c1:3f:01:f2:a3:
8a:ce:1b:29:bc:c3:59:bf:7f:db:be:08:98:6e:c6:91:0e:76:
48:0e:28:87:8c:30:36:2a:3a:5f:0c:c3:38:27:cb:ef:c1:6e:
a9:77:09:c5:db:77:c9:0b:62:48:c1:4e:5c:b3:5c:48:f7:7d:
28:80:ce:db:b4:ed:75:0a:48:7f:96:6e:9e:cd:4e:9c:6e:4e:
4f:04:64:e3:0d:51:ea:c6:27:54:e1:cd:c1:25:91:9d:5c:e7:
67:2d:ac:51:df:8e:fe:fd:65:87:ff:38:3f:fe:fb:d8:87:d0:
fa:35:6b:a8:47:c4:ac:dc:ef:f3:7b:f4:41:3f:45:dc:c3:db:
ef:2e:59:72:a0:5f:20:63:b9:ad:05:49:7d:31:f1:51:a4:96:
59:ec:2e:b5:90:ee:fc:55:20:11:c2:59:41:38:32:91:94:18:
ae:fa:fa:ef:72:c3:15:99:42:8e:dc:50:ca:c4:19:74:ee:64:
f4:1b:d2:e5:75:69:01:64:ff:ab:6d:d9:6b:6d:00:58:60:00:
dd:03:09:1f:1f:14:15:73:53:56:16:09:4c:e6:05:5c:45:19:
d0:44:e1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:58 2026 by rpki-client