Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
File: xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft (raw, json)
Hash identifier: Z6yUqSI4bAUwZa++ERvz8td2pm8DARsXQrjEJOHKQM8=
Subject key identifier: C1:EB:D2:AA:C6:E0:89:B6:75:3B:8A:13:D6:EE:47:A4:E7:22:BA:69
Authority key identifier: C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
Certificate issuer: /CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Certificate serial: 019F8EA2DCD4713F20B05CD54C8B7FE53E34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
Manifest number: 14B7
Signing time: Thu 23 Jul 2026 11:01:05 +0000
Manifest this update: Thu 23 Jul 2026 11:01:05 +0000
Manifest next update: Fri 24 Jul 2026 11:01:05 +0000
Files and hashes: 1: tEK593WJ1iubEABZdt5V-9KKKM4.asa (hash: E4hQi2zAoFJBlGZkd6DPZ2wlgeYWNDC2Pt81NJPg3fw=)
2: xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl (hash: 7swEqMoISpdmipEF6/H0Uq7CUQHFHxTlL06PlEMiy2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:dc:d4:71:3f:20:b0:5c:d5:4c:8b:7f:e5:3e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Validity
Not Before: Jul 23 11:01:05 2026 GMT
Not After : Jul 24 11:01:05 2026 GMT
Subject: CN=c1ebd2aac6e089b6753b8a13d6ee47a4e722ba69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f2:12:68:f5:99:22:9f:f1:32:2a:42:30:f7:
05:6c:13:8c:5b:bf:8e:f6:1f:57:76:bf:2a:b6:f7:
1c:db:27:b6:60:5a:62:56:bb:8d:6f:e0:b7:d3:0e:
b8:ed:52:0d:97:78:75:12:85:1c:35:79:68:6e:d4:
a0:ef:75:b4:ee:05:a5:d7:be:b6:cc:7f:99:db:27:
e1:ec:9c:2d:4e:4c:1d:43:59:4b:ce:bf:d0:79:e9:
ba:3a:8e:ee:36:48:95:1d:28:d3:8b:e4:97:9b:b1:
93:3d:2a:35:03:e8:1d:cd:4a:b7:41:95:86:23:d6:
e2:4a:5a:4c:50:66:26:75:30:ab:22:d7:b0:8a:e0:
61:a7:3d:de:94:aa:b9:12:23:78:46:60:7f:40:21:
a1:e1:07:9d:4c:e0:3c:96:43:53:10:82:47:40:fe:
7b:f6:50:b2:e5:c3:e5:d3:a9:ec:81:ab:65:b4:c2:
96:b7:9b:a5:ce:f0:a3:b2:b9:25:84:59:2a:bc:b4:
c8:05:aa:72:7c:32:03:f2:77:9b:a9:ff:28:d9:76:
be:01:61:a9:42:64:04:63:09:4e:6e:a9:45:18:c2:
1a:0d:b6:55:d4:a9:85:fa:49:b2:e7:01:06:36:1c:
a3:d4:4c:8a:9d:90:92:37:b1:70:c7:f0:d8:32:2e:
c2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EB:D2:AA:C6:E0:89:B6:75:3B:8A:13:D6:EE:47:A4:E7:22:BA:69
X509v3 Authority Key Identifier:
keyid:C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3d:9f:ed:af:cb:80:84:d5:98:24:36:f8:61:23:67:4a:bf:
14:56:13:f3:b0:63:2e:cd:af:a1:25:bd:42:45:5b:ee:8e:8c:
56:44:69:68:d1:8b:3d:57:7a:74:89:e2:3c:87:b9:13:03:cb:
76:c4:4e:81:12:da:5d:f1:59:d1:3a:9c:11:f6:50:24:6d:31:
0c:19:97:03:97:a2:00:f6:a8:ae:95:2c:53:ba:24:e7:f2:30:
ba:34:a8:fd:09:71:0a:45:76:3f:78:78:3f:8c:96:c6:49:f6:
55:1d:f2:14:d5:da:62:34:3e:6f:01:02:fe:6d:0f:48:83:ec:
64:04:34:db:15:fe:83:f4:a3:0b:b9:3a:00:c6:b1:b2:bc:cd:
51:b3:fd:51:69:ac:95:1e:7d:d7:00:61:9b:9a:c8:94:25:d1:
f2:8f:4e:02:56:60:0c:13:b3:80:e1:c8:a5:29:a7:c0:d3:ed:
c1:55:3b:0b:a2:b3:61:43:db:0c:45:80:98:a3:98:d0:70:16:
b7:e1:4e:30:eb:5a:c8:19:1c:5a:d6:d9:ac:f7:04:f6:03:a3:
a5:13:c9:96:db:e2:1c:4b:7b:cc:79:89:46:8a:15:3a:4d:44:
be:cf:5f:72:8c:14:f2:2a:89:24:1a:7b:37:fd:a0:d0:44:9c:
28:01:ef:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:11:53 2026 by rpki-client