Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
File: xpjOogluk-LClNqo5corQqSUqEQ.mft (raw, json)
Hash identifier: PAaMPWzr8PMc3ZflG5/qkx+GiMIUr87Dc3CecqH59a4=
Subject key identifier: 67:B0:78:7B:63:91:6D:C3:F3:F9:04:A6:4D:E8:2A:46:96:61:EC:40
Authority key identifier: C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
Certificate issuer: /CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Certificate serial: 019D27A8C8D46EEAE8DB0859656EA0A97474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
Manifest number: 0C98
Signing time: Thu 26 Mar 2026 01:01:05 +0000
Manifest this update: Thu 26 Mar 2026 01:01:05 +0000
Manifest next update: Fri 27 Mar 2026 01:01:05 +0000
Files and hashes: 1: xpjOogluk-LClNqo5corQqSUqEQ.crl (hash: k95q4A8T8n/3MhwkQk57iA8l/S2SwNQXpLRkuYMvCnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c8:d4:6e:ea:e8:db:08:59:65:6e:a0:a9:74:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Validity
Not Before: Mar 26 01:01:05 2026 GMT
Not After : Mar 27 01:01:05 2026 GMT
Subject: CN=67b0787b63916dc3f3f904a64de82a469661ec40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:c6:ab:e9:66:69:3f:98:50:c1:b5:14:36:
e1:46:e4:ab:c1:43:43:67:d6:8c:9d:51:14:cb:50:
90:0d:c4:3b:b8:3e:04:b7:df:69:96:de:48:62:9d:
58:75:a9:87:40:cf:92:d6:2a:05:91:72:48:3d:72:
65:a4:fd:b4:28:5a:85:c6:ab:6e:9f:3b:73:06:5d:
72:f0:65:30:f6:d9:8e:e1:64:0a:d2:85:51:9b:0f:
dd:5d:31:9c:52:de:e5:ee:0b:a5:56:9d:61:66:85:
3e:70:38:d6:c6:70:13:31:14:74:d5:23:ca:d1:8e:
29:c7:6e:ae:16:f7:56:9c:09:3f:2f:32:50:c2:42:
fb:da:e8:df:2d:4e:03:24:73:d3:ec:d6:e4:0c:4d:
4a:41:64:2d:fe:2f:fe:be:1f:f6:6d:72:44:f9:57:
e8:60:27:f7:c2:f0:d9:a2:2c:c9:6e:89:d2:20:be:
a5:2a:94:1e:11:a2:30:64:7a:70:ce:b5:91:fa:04:
bf:84:bd:21:40:b2:a0:dd:d5:81:94:0b:05:11:13:
5e:73:2c:98:c1:60:de:47:b6:fc:8d:cd:f3:42:c9:
df:81:43:1c:b2:70:16:4b:ba:22:3f:b1:e6:54:eb:
58:3c:3c:4e:f0:de:e9:d8:26:66:8a:b9:57:71:8c:
cd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B0:78:7B:63:91:6D:C3:F3:F9:04:A6:4D:E8:2A:46:96:61:EC:40
X509v3 Authority Key Identifier:
keyid:C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a0:43:cf:e2:2a:ed:1e:7a:8f:f7:67:1c:90:14:c5:3a:54:
79:bc:2e:b9:3a:c1:05:77:81:1e:68:2d:bd:32:5e:8d:0c:59:
f6:bb:cc:bd:b1:6d:91:ca:e2:7c:8c:f0:96:6f:64:29:30:f4:
58:cb:1a:5d:af:3c:c1:f8:42:06:5f:b5:e5:ba:27:c6:0c:79:
a1:a4:cd:c0:e8:ba:ea:21:0b:c3:be:86:e6:ad:3a:3d:67:4c:
46:e8:64:70:7c:23:82:5f:0d:ff:1e:22:9d:3b:a0:ca:3b:ad:
81:d2:ea:28:69:26:7c:b9:63:aa:33:86:e7:6a:b3:46:73:e7:
87:5c:70:4c:aa:e3:69:10:e3:51:4d:bc:74:73:f9:b4:b8:ee:
6e:f4:6e:08:af:60:5c:0a:bd:b4:37:48:89:76:9a:e7:45:80:
56:16:fb:34:13:ef:35:c1:35:f4:e4:ab:90:1f:ea:fe:4f:4a:
e5:81:c3:50:ea:c3:5e:fa:5d:36:39:19:2e:86:73:0c:0f:7a:
eb:dd:a1:25:c2:11:e4:7a:cc:fa:8b:02:ea:e3:fa:cd:fd:cd:
f1:bf:05:46:0d:74:b9:c4:52:1b:28:e4:5a:73:8d:d7:55:6b:
f0:5b:6f:4d:9b:71:89:a7:47:57:f9:77:db:f7:1e:0d:ac:98:
6e:af:2c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:05 2026 by rpki-client