
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
File: xOEMfL_9dIipagLVyRL5-SVku1w.mft (raw, json)
Hash identifier: hvYdpEQqq1fn0Qn5aCZv3Qf7T75UB9TUUj/FRC6mhik=
Subject key identifier: 26:BD:5F:06:77:48:F3:13:46:D5:CB:83:5F:EC:00:AA:82:BE:50:80
Authority key identifier: C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
Certificate issuer: /CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Certificate serial: 01A0DB040B35C9BBE36E8FC1C19A31F8D54D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
Manifest number: 0468
Signing time: Sat 26 Sep 2026 00:01:10 +0000
Manifest this update: Sat 26 Sep 2026 00:01:10 +0000
Manifest next update: Sun 27 Sep 2026 00:01:10 +0000
Files and hashes: 1: IWls0AbP5WlDYBhalibARg9icP8.roa (hash: dYr+MsyOWEf1lFygz2jaouZlTKLtP7ebV5kBwfOgAwI=)
2: xOEMfL_9dIipagLVyRL5-SVku1w.crl (hash: KTVmI8iKMZ2IOrAUfv2c1TF9/2jMyFPmUGq5u5/FaZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:0b:35:c9:bb:e3:6e:8f:c1:c1:9a:31:f8:d5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Validity
Not Before: Sep 26 00:01:10 2026 GMT
Not After : Sep 27 00:01:10 2026 GMT
Subject: CN=26bd5f067748f31346d5cb835fec00aa82be5080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:90:b1:ca:b5:97:09:4a:14:f4:ba:ca:29:e9:
dd:7c:5e:31:08:43:ed:71:e1:8c:27:c1:d3:51:79:
81:2f:1f:f6:2a:e6:e0:05:ed:82:d6:c3:17:bc:40:
48:a2:59:2a:97:25:41:31:5f:72:63:fb:d9:fd:09:
b9:7c:3e:f9:7d:5f:3d:48:a9:06:ab:15:7a:9b:27:
54:83:f9:fb:06:1c:f8:8e:06:32:bc:ab:eb:55:8f:
a2:96:56:8f:1e:86:f3:2b:f7:7a:6b:78:bb:d6:5c:
6f:b0:a2:f0:c7:72:90:50:61:25:da:c4:7a:4a:cf:
64:66:61:fc:bb:96:44:37:28:59:13:03:f7:66:9f:
55:a2:30:46:b0:ef:3f:6f:00:da:d4:d4:b7:5a:a1:
0f:2c:ff:94:38:e5:3a:97:9e:4e:b2:b1:bf:01:aa:
d7:51:ad:7d:0c:c9:fa:4a:43:42:38:6e:35:44:8d:
12:34:10:75:6b:6b:6a:e1:c5:b9:1b:a8:17:a9:ac:
51:45:0b:65:25:ad:f1:4c:c2:5f:74:9d:c7:85:34:
e0:f3:86:8c:86:8e:67:ca:0f:63:3e:ed:40:67:bd:
ff:59:ea:07:66:3d:49:da:30:ac:e4:e1:11:30:9a:
27:1b:bc:ee:01:7c:da:b8:75:17:22:06:05:2f:2e:
a2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BD:5F:06:77:48:F3:13:46:D5:CB:83:5F:EC:00:AA:82:BE:50:80
X509v3 Authority Key Identifier:
keyid:C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b3:f2:24:b7:84:4c:3b:14:f6:1d:ae:3c:39:00:ab:d0:09:
88:ba:60:58:ba:7b:06:78:9c:65:a1:35:63:7f:73:7b:61:b5:
c3:f6:2f:02:af:5b:50:a9:69:43:ca:37:cb:4d:fa:b7:be:8c:
eb:6e:d6:28:1c:d0:ae:38:2a:84:c5:a7:41:37:98:35:57:99:
74:9c:8c:f2:70:c3:07:ca:60:b8:ad:a3:41:89:78:77:25:72:
c0:47:ee:a6:b6:9a:25:08:5e:ee:bd:1f:4f:f2:e9:a7:23:8f:
70:10:4b:78:96:01:be:a5:e3:e9:88:6f:b6:c7:7c:b9:26:fb:
2e:52:c7:2e:61:00:fa:5a:56:27:e3:48:6b:82:9e:aa:1a:13:
00:2f:cd:2a:b8:12:12:40:71:76:3d:5b:8c:f6:13:4f:aa:fa:
19:d0:c2:72:f3:36:ec:c7:23:74:8b:cf:04:4f:ed:7c:24:e3:
5f:4b:be:4a:1d:a1:9a:7c:86:b9:df:e9:17:52:3b:0f:e0:cc:
29:27:6b:fd:4f:77:53:97:aa:d5:75:72:86:26:39:7b:73:b2:
08:e5:23:ef:be:e4:53:53:8a:cd:95:4e:bc:44:62:b1:c0:6d:
06:5a:61:8c:fb:8c:6c:a9:10:8d:6b:34:59:7a:22:1b:d8:32:
d9:2e:ac:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:57:24 2026 by rpki-client