Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
File: xOEMfL_9dIipagLVyRL5-SVku1w.mft (raw, json)
Hash identifier: JdemlPFqwHf3qQOUWylSq9GfrSDJXaHxpGnEYp5twgo=
Subject key identifier: C5:91:73:9C:80:6F:77:D6:E4:C0:62:54:0E:22:05:5F:16:56:B2:F3
Authority key identifier: C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
Certificate issuer: /CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Certificate serial: 019D2C985711A28565FC5BFA8C5F76A54871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
Manifest number: 0280
Signing time: Fri 27 Mar 2026 00:01:14 +0000
Manifest this update: Fri 27 Mar 2026 00:01:14 +0000
Manifest next update: Sat 28 Mar 2026 00:01:14 +0000
Files and hashes: 1: IWls0AbP5WlDYBhalibARg9icP8.roa (hash: dYr+MsyOWEf1lFygz2jaouZlTKLtP7ebV5kBwfOgAwI=)
2: xOEMfL_9dIipagLVyRL5-SVku1w.crl (hash: AWS6owird0nnr4VV3qiZu8NRMasPvdOExXefyoyd1kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:98:57:11:a2:85:65:fc:5b:fa:8c:5f:76:a5:48:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Validity
Not Before: Mar 27 00:01:14 2026 GMT
Not After : Mar 28 00:01:14 2026 GMT
Subject: CN=c591739c806f77d6e4c062540e22055f1656b2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5b:41:4c:d4:c1:50:9a:76:63:83:eb:76:bf:
b3:40:e9:0d:57:8a:42:37:fe:c5:2f:cd:96:0a:49:
b1:4e:1c:ba:37:5c:66:c3:70:c3:fe:99:33:0a:af:
2f:8d:1c:f2:e1:eb:66:75:eb:3c:ca:a5:09:63:58:
aa:8f:f3:6b:d7:f0:3f:78:ca:a7:03:81:df:1d:88:
77:8c:75:81:85:cc:2f:e8:00:77:8f:38:97:7c:ef:
91:97:76:a5:08:62:b9:5d:92:43:b5:64:79:14:f3:
ce:e6:b0:06:63:0a:b7:bd:84:f9:b1:aa:d4:da:7a:
ac:ad:05:0c:a3:67:18:8d:42:d5:64:77:71:11:3c:
af:fb:77:40:70:18:bb:4a:6a:4e:3a:56:6e:63:5e:
2c:65:e1:19:d0:e1:a6:24:4f:89:b8:c0:52:b9:e9:
38:ae:d6:ce:fb:84:19:1a:eb:c1:2b:55:5f:bb:6e:
7a:28:7f:e1:8e:1d:62:89:8b:7d:0a:e1:ac:8b:ca:
5d:a7:db:45:78:23:26:5d:e7:79:11:5b:56:11:9b:
75:32:84:8e:e5:58:8c:5c:26:14:19:97:a3:64:d9:
f0:af:f8:09:f4:27:b6:22:e8:6b:cb:65:fe:2a:f6:
7c:cb:75:ac:90:85:c1:52:6e:1f:34:fc:43:74:b1:
39:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:91:73:9C:80:6F:77:D6:E4:C0:62:54:0E:22:05:5F:16:56:B2:F3
X509v3 Authority Key Identifier:
keyid:C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a4:56:a5:0b:34:20:0f:27:00:05:20:c6:1e:56:b5:3a:bd:
fd:fa:a5:72:3e:17:75:ad:aa:70:91:9e:6c:c4:33:dd:b3:0b:
19:2d:37:91:30:45:cb:f3:a4:ce:44:78:2a:c2:79:21:d6:85:
cc:3c:ac:4f:71:c6:d3:14:6f:bb:d2:1c:07:37:bf:7a:91:37:
af:80:88:f4:f6:6a:f5:fc:ce:0d:50:56:79:00:88:23:38:fd:
f6:c3:01:39:aa:aa:bf:51:d6:ff:6f:2d:a2:84:60:35:2b:b5:
c8:38:45:c1:2b:73:4b:39:c2:90:e5:ee:ac:33:5a:9c:be:11:
86:e2:03:c0:c7:9a:ee:44:a0:2e:d2:eb:46:6c:95:5c:4e:c6:
70:e3:13:b3:8d:34:a7:8f:75:33:b2:ff:15:0d:c9:84:a4:cd:
a3:a3:07:67:9c:bb:12:a4:76:16:4f:b5:de:dc:3b:b1:c7:b3:
cd:95:fd:cc:7d:45:ba:c9:99:dc:e7:18:e6:e9:b2:8a:42:17:
51:63:5a:4c:c6:c1:4f:79:7b:aa:83:3e:d9:ad:bb:e2:bc:7d:
88:dc:13:5e:a4:95:bd:28:5f:64:a0:c9:b8:cc:36:95:1c:4c:
cd:91:a0:67:e6:d4:7d:0e:21:85:25:cd:b2:8e:e0:9b:96:97:
0b:f0:03:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:44:38 2026 by rpki-client