Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
File: xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft (raw, json)
Hash identifier: vTqwllkjA4H/DdiHtS0+guC8iXDdk6b+YPaZ1iYV3wk=
Subject key identifier: 09:DA:89:9E:A6:9D:C4:F4:6E:5F:74:9E:7A:21:B0:8A:45:B3:F1:35
Authority key identifier: C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
Certificate issuer: /CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Certificate serial: 019E1BD8C8C92D3AE61EFF72503106431DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
Manifest number: 13F7
Signing time: Tue 12 May 2026 11:00:52 +0000
Manifest this update: Tue 12 May 2026 11:00:52 +0000
Manifest next update: Wed 13 May 2026 11:00:52 +0000
Files and hashes: 1: tEK593WJ1iubEABZdt5V-9KKKM4.asa (hash: E4hQi2zAoFJBlGZkd6DPZ2wlgeYWNDC2Pt81NJPg3fw=)
2: xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl (hash: +3JZw4JWgRJ6sPRP6Una9QoVkeIR4xSKWfkD6Q5EpJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:c8:c9:2d:3a:e6:1e:ff:72:50:31:06:43:1d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Validity
Not Before: May 12 11:00:52 2026 GMT
Not After : May 13 11:00:52 2026 GMT
Subject: CN=09da899ea69dc4f46e5f749e7a21b08a45b3f135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:71:d3:4d:50:4e:07:3c:87:ba:26:76:f3:24:
23:7a:6d:cd:2c:9b:51:6d:25:5d:85:ef:c1:93:46:
a4:ad:f3:47:11:46:1f:65:2e:61:09:31:18:4f:30:
54:83:29:0d:77:eb:f1:92:ba:a2:50:77:8e:50:b4:
0a:f2:90:ef:fa:32:17:92:51:ec:64:f1:03:4a:ed:
7a:e4:d0:9a:4d:4f:8c:c0:76:4d:41:7d:86:64:38:
d8:eb:f7:b3:90:31:37:40:30:df:25:82:89:e7:62:
45:0d:ff:ab:29:1c:cd:98:f4:fe:51:2f:64:b5:30:
35:c4:80:4f:b7:6b:fa:75:3f:c1:ed:36:28:4f:f7:
33:fa:a0:bc:f5:77:e1:ce:cb:75:d7:7a:63:ef:63:
db:bc:19:07:db:1f:71:b5:5d:50:f8:c0:aa:54:2e:
74:ab:94:2f:de:71:13:67:9b:e3:32:20:37:fb:24:
66:1f:bd:cb:8f:be:06:e8:8c:b6:0f:a2:29:ad:0e:
4d:95:c2:00:92:0e:85:e3:7f:4b:1e:bc:99:f9:0a:
12:75:5d:68:be:8e:04:56:9c:8e:79:32:b4:bd:18:
64:90:c8:a8:dc:dc:8c:57:88:72:1f:86:ae:c6:ef:
cf:b9:64:d4:ae:43:3e:dd:7e:37:e1:ab:cc:a2:d4:
f8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DA:89:9E:A6:9D:C4:F4:6E:5F:74:9E:7A:21:B0:8A:45:B3:F1:35
X509v3 Authority Key Identifier:
keyid:C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:05:45:0c:f0:c0:c1:9b:c8:1d:f7:96:fc:51:36:aa:88:62:
46:9f:d5:a6:bb:e8:3a:31:dc:8c:47:7c:46:99:08:a1:d0:27:
4f:af:c5:c4:9c:a4:1d:c8:7c:8f:c8:74:d9:75:16:88:b1:cb:
1a:20:f8:6d:22:a0:59:91:81:b2:41:e8:b1:cc:6f:3a:b9:50:
62:62:91:08:76:ed:a6:4f:e9:a0:ee:5b:5c:4b:72:de:e3:0d:
2d:0a:46:c0:b0:b2:3b:09:01:a5:8c:3c:15:94:14:69:92:ab:
13:c7:f8:67:b7:b2:2b:1d:0a:7b:62:4b:5e:2a:20:54:a5:1d:
0d:a4:60:60:34:d5:43:8a:b3:70:8b:d7:8f:cd:de:15:fc:79:
23:74:75:d8:87:a6:56:14:e9:56:b7:4c:ca:d3:aa:0c:e8:4c:
4d:5f:6f:64:54:59:eb:5b:fd:f1:b6:e2:62:4a:1a:b3:cc:bb:
3a:5d:99:ae:2f:e0:5f:f8:eb:8c:43:84:02:a4:0a:da:d8:94:
f7:8c:77:a1:8c:15:39:c4:d5:d4:8c:8a:02:47:31:7e:19:98:
f4:bd:0e:34:0a:75:f5:07:d3:0b:cb:09:29:37:64:36:f4:16:
48:93:a2:1d:80:fa:50:72:73:65:d1:58:70:28:71:53:50:7d:
5d:97:b6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:23:13 2026 by rpki-client