Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
File: xOEMfL_9dIipagLVyRL5-SVku1w.mft (raw, json)
Hash identifier: UzNmAECYIne5KVM2sMbWeuxOW9SiOy0JLq3ygjLekxg=
Subject key identifier: BD:43:25:73:E4:A2:03:74:6E:99:06:4C:C5:5D:E8:78:08:0B:55:10
Authority key identifier: C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
Certificate issuer: /CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Certificate serial: 019F92B625048DFD14DA8564F6AA9D6175B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
Manifest number: 03BE
Signing time: Fri 24 Jul 2026 06:00:38 +0000
Manifest this update: Fri 24 Jul 2026 06:00:38 +0000
Manifest next update: Sat 25 Jul 2026 06:00:38 +0000
Files and hashes: 1: IWls0AbP5WlDYBhalibARg9icP8.roa (hash: dYr+MsyOWEf1lFygz2jaouZlTKLtP7ebV5kBwfOgAwI=)
2: xOEMfL_9dIipagLVyRL5-SVku1w.crl (hash: 9mqQGswPgKB02Kb3UEjho9EumTourIbLEx4XfhjpRbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:25:04:8d:fd:14:da:85:64:f6:aa:9d:61:75:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Validity
Not Before: Jul 24 06:00:38 2026 GMT
Not After : Jul 25 06:00:38 2026 GMT
Subject: CN=bd432573e4a203746e99064cc55de878080b5510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:31:18:b7:55:07:5b:68:51:28:c2:66:c4:92:
d5:5a:09:ef:f2:2a:47:92:91:98:82:e3:4e:db:bc:
b4:7c:bd:48:b4:d5:79:f2:34:2f:17:2f:93:de:60:
67:3b:e0:23:9a:d5:31:6f:6a:98:e4:ef:a3:f2:06:
21:54:e4:eb:d2:60:f0:a2:48:22:d1:d5:48:16:e1:
d2:bf:2d:5a:14:16:e7:da:ae:8d:18:da:bf:ed:08:
a0:4c:d8:73:ef:5e:f9:5f:41:59:0f:48:f2:4c:8e:
4b:85:c1:3e:b6:98:91:d6:82:b7:91:20:c2:d8:a7:
8e:92:f5:8e:67:bd:8a:6c:83:77:e5:0d:e8:b4:6b:
dd:a7:12:f4:84:9b:7d:5b:ee:c1:98:da:58:61:61:
1b:00:69:fd:03:0c:ee:44:c4:be:ce:62:8c:7f:35:
e7:27:fd:a6:24:b4:3e:dd:26:e7:92:86:c0:cc:14:
64:cf:50:49:dd:bc:69:7d:70:10:72:a7:89:3c:e5:
e5:06:4e:1a:2f:d7:38:f9:27:13:4b:45:ab:e2:b7:
40:57:69:d0:c6:9c:4c:13:8e:e7:77:20:00:b3:ba:
b0:35:2a:8e:cc:09:a7:92:7b:2d:cf:2a:8a:e1:bb:
b6:d3:d4:a9:48:a8:ea:8a:54:b0:06:d2:ce:36:08:
f7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:43:25:73:E4:A2:03:74:6E:99:06:4C:C5:5D:E8:78:08:0B:55:10
X509v3 Authority Key Identifier:
keyid:C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:78:da:a1:53:e0:45:de:9a:11:4c:a0:e4:ce:e8:14:2a:a6:
7f:bd:4f:37:f8:0d:df:22:0d:8a:15:69:06:34:8f:d4:b0:11:
52:be:1c:1d:05:6a:27:99:dd:9b:07:18:ff:22:30:4d:b6:81:
55:ca:c8:f7:a4:ab:5b:1d:17:f8:ef:38:9c:9a:f2:1d:8a:b1:
9c:25:60:8d:fd:40:19:81:79:ee:c6:cd:23:67:ca:96:0a:66:
21:e2:03:4b:fb:f8:9b:97:ba:2c:7e:0e:f1:94:4c:6a:5c:cb:
f6:83:cb:25:d6:76:74:7e:86:11:db:56:45:9a:5c:0d:fa:f4:
3f:aa:02:28:4b:2a:89:b9:0e:6c:4c:f4:b8:fc:2d:e1:59:47:
63:1f:63:5f:e3:3f:da:58:8c:20:c9:20:07:d8:ff:e1:3d:83:
48:01:f7:45:d3:cb:42:e5:0a:e8:5b:4b:03:96:2a:88:d8:b8:
34:b7:73:b2:77:46:7e:59:42:a6:0f:82:0e:a7:a6:ca:00:33:
02:0a:05:d7:b9:ff:90:d5:e5:b5:a1:f1:fd:f6:40:26:01:cc:
df:de:2d:fe:8f:1e:cc:0d:f9:80:93:c9:e5:d4:90:32:1f:cc:
b3:5f:e0:33:bb:17:28:a9:91:bf:d5:16:fc:10:b9:c4:0a:9f:
ec:f1:9b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:35 2026 by rpki-client