Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
File: xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft (raw, json)
Hash identifier: 2sUQ0rFNoLN1XREZesKFIoBAjEmZ9lh0dle3KvzIhYc=
Subject key identifier: 32:F0:25:35:88:B6:02:74:CE:3D:30:83:72:5A:3F:2E:87:3E:4B:6C
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial: 019D273A86F3B69848EC5F3D4892AD64CA24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
Manifest number: 11CE
Signing time: Wed 25 Mar 2026 23:00:40 +0000
Manifest this update: Wed 25 Mar 2026 23:00:40 +0000
Manifest next update: Thu 26 Mar 2026 23:00:40 +0000
Files and hashes: 1: ATFqvKQfCzg1eIhHj9ilysnZYnE.roa (hash: 9xWvqqO+irmFSgWZgkDiVyOSk6AqF02qWQdfh9GrCc8=)
2: NIt5HAEHP3eGIkRaRfmU_TQEUio.roa (hash: kNqtp8gVzKVPwqTczsFvU1xgIi6B9Z0PZaQgvs2xN6o=)
3: gtTwRDBJR-BbMiRZiF0UkREdrNI.roa (hash: EYI6Dc616oG3PdcronQ8IrDd6TturvsbVQq4J3V4p+w=)
4: tPnRw3top4XnUY_nTcwvwdpUiGQ.roa (hash: M0xYz4wzzLwebgXureqeaj7zhKGgbdLeOlyBhuFnNKo=)
5: xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl (hash: nRvbCU++P1cYGcPmDrSWOprkbFrm/L+xVYd6oPd9Aac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:86:f3:b6:98:48:ec:5f:3d:48:92:ad:64:ca:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
Validity
Not Before: Mar 25 23:00:40 2026 GMT
Not After : Mar 26 23:00:40 2026 GMT
Subject: CN=32f0253588b60274ce3d3083725a3f2e873e4b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:11:c5:73:3c:fa:98:d6:0c:29:d1:61:66:3d:
49:93:3b:a0:82:53:80:0d:fd:2c:4f:7c:da:b7:5a:
25:9a:b1:37:35:f5:e8:e7:38:26:eb:41:95:69:38:
dc:78:e7:20:29:16:e5:76:2a:1e:a7:8f:fd:be:54:
3c:87:ad:a5:ba:38:3f:ff:00:23:c5:27:a0:cb:88:
6f:40:4f:e5:13:a8:be:b8:d1:3e:a0:00:2a:a1:a6:
15:37:b8:25:1b:3b:b0:2c:39:98:19:af:b2:87:77:
55:1f:53:8d:7c:1a:ad:f3:10:8c:22:3a:4f:44:0b:
a5:83:0a:42:bc:47:54:45:a7:31:f2:92:a8:c1:c3:
54:38:88:ce:81:dc:09:ad:88:b5:e6:38:74:6e:0c:
c3:88:65:4e:0e:1f:37:c5:9f:25:21:f0:1c:e7:13:
ba:2b:14:fc:98:d1:32:5f:52:ce:91:d4:9a:f0:59:
35:79:88:1e:25:73:69:22:f4:1e:09:0f:21:d9:d6:
53:f9:0d:be:d8:3f:c2:f0:10:60:31:90:03:5f:6c:
d9:7c:29:6a:f7:5f:7b:71:8b:86:1c:d6:64:22:1a:
c1:15:45:c4:9c:58:bd:4a:ac:b3:a6:d2:b5:17:f3:
e6:ab:1e:a2:02:fe:c8:58:d0:2c:f7:2b:3f:6c:bd:
0f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F0:25:35:88:B6:02:74:CE:3D:30:83:72:5A:3F:2E:87:3E:4B:6C
X509v3 Authority Key Identifier:
keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8c:a7:d7:71:76:8e:9b:34:0b:d3:55:f2:4c:7a:c8:34:ce:
b3:f4:7a:3f:d4:1a:da:f7:d0:92:22:a4:1c:a6:83:a3:70:c3:
1a:0d:01:9a:95:13:91:48:c7:1b:3c:f6:c9:7f:41:65:50:7b:
0b:fd:dd:bc:66:42:9e:af:34:91:95:8c:8a:62:aa:47:a0:9a:
09:d8:c5:d8:07:11:90:ac:e7:39:fc:94:cf:45:7c:c8:cb:60:
c7:38:a5:d1:2e:2b:aa:9f:6a:b2:3f:36:e4:af:bb:28:53:18:
3a:33:94:9b:57:2b:f9:dd:3d:bb:db:87:80:69:42:61:69:dd:
40:15:22:f2:44:52:c4:ff:3d:af:c2:e6:91:0e:9f:ab:9f:8a:
6e:0f:7b:34:94:ee:50:c4:30:fd:d7:8e:b2:74:a4:a7:b7:c1:
2d:a8:83:d6:76:4e:ea:d3:c1:71:c1:47:dd:05:02:8f:6d:7d:
f2:da:d2:8a:ff:5a:1c:c8:16:67:fd:62:29:44:3a:da:c6:65:
22:10:31:78:e6:71:fd:c8:fc:47:0b:ca:d0:64:73:88:b8:d6:
8c:c9:0a:e0:b1:91:ae:44:fc:83:22:3e:a6:fb:fb:34:80:ad:
14:66:d2:e5:f0:e3:59:94:d6:67:0b:fc:8d:6a:d0:d2:51:b5:
2e:0f:75:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:40:47 2026 by rpki-client