Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
File: xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft (raw, json)
Hash identifier: Jb6kfJ9BDGs8D8MTETyWj03I3J8qFYM6On7XNdQS6I0=
Subject key identifier: 7B:1A:0A:B8:74:EC:9E:B8:63:45:C0:81:3D:80:65:7D:27:90:44:96
Authority key identifier: C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
Certificate issuer: /CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Certificate serial: 019D269656F2839411FBB624C24C9E31EB41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
Manifest number: 1378
Signing time: Wed 25 Mar 2026 20:01:19 +0000
Manifest this update: Wed 25 Mar 2026 20:01:19 +0000
Manifest next update: Thu 26 Mar 2026 20:01:19 +0000
Files and hashes: 1: tEK593WJ1iubEABZdt5V-9KKKM4.asa (hash: E4hQi2zAoFJBlGZkd6DPZ2wlgeYWNDC2Pt81NJPg3fw=)
2: xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl (hash: C7ih+mCI2ki8N4dcswl7M/E0aEytgwfHVnBqlBSRdgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:56:f2:83:94:11:fb:b6:24:c2:4c:9e:31:eb:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Validity
Not Before: Mar 25 20:01:19 2026 GMT
Not After : Mar 26 20:01:19 2026 GMT
Subject: CN=7b1a0ab874ec9eb86345c0813d80657d27904496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:7d:23:da:81:0d:f4:8a:a8:c7:af:3f:90:
e5:98:44:2e:8a:4e:0f:41:37:98:0d:f6:33:0c:0b:
3b:66:88:be:73:b7:7f:d0:26:e6:52:46:06:8b:84:
dc:98:88:e3:05:a1:e2:02:a5:a1:62:13:2a:90:35:
ca:4b:52:53:05:ea:99:69:52:bd:0d:72:11:5c:36:
1c:3b:4a:e7:9b:dc:7b:6b:db:fa:04:57:62:09:92:
87:31:a3:aa:bd:33:8a:9f:4c:2f:b6:19:91:a9:52:
fb:96:50:c4:ee:aa:ea:74:71:dd:a0:90:b4:34:84:
fe:0b:0d:44:7a:ca:8c:e6:01:4c:87:06:61:ad:45:
74:d2:3b:4d:5b:ba:5d:17:7b:38:74:39:e4:d7:31:
cb:b8:fc:a0:d0:f8:fa:7d:2b:cb:6d:a6:89:d7:4b:
da:18:45:73:5b:6d:64:77:b3:c2:48:79:7c:5d:67:
01:3f:2c:b2:57:74:f7:a2:f9:b2:99:43:c0:43:ca:
7c:1d:11:1f:05:a2:6a:8d:0c:53:48:4a:e6:3f:b5:
b7:85:17:cc:2a:26:d7:ce:9f:aa:fb:f5:33:ad:05:
e3:28:cc:45:bf:6b:0f:52:f8:a1:af:9e:08:79:77:
a9:18:3a:c6:2a:3c:7f:a6:61:95:c2:e7:5f:61:e1:
87:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1A:0A:B8:74:EC:9E:B8:63:45:C0:81:3D:80:65:7D:27:90:44:96
X509v3 Authority Key Identifier:
keyid:C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f0:50:76:f1:ea:70:e2:88:a7:37:31:8e:92:b6:30:39:7e:
6a:ed:92:eb:2d:b6:5a:33:40:fe:f2:7b:4e:e7:dd:cc:51:29:
fd:33:88:63:38:2b:d8:0e:c0:86:90:49:a8:18:01:de:11:28:
5c:d1:fd:c9:73:e8:99:b0:16:03:bf:8b:88:9f:da:4f:77:d7:
81:97:40:de:0d:1d:54:49:be:99:fd:38:62:07:da:b0:61:6b:
fc:e3:25:e6:7e:2a:66:ef:81:af:02:70:73:cd:62:e7:dd:64:
a0:36:f2:63:d7:8d:ed:b2:6f:20:54:77:19:9c:62:44:cb:f0:
a8:9c:35:97:f7:b8:66:c4:b8:f8:2c:17:8c:8c:fa:af:23:51:
44:de:21:b5:26:cd:fd:96:c3:09:73:72:2a:b2:56:95:dc:bc:
b9:47:1a:c7:d9:c2:23:d9:14:4d:b0:e3:71:da:59:bb:3b:4d:
0a:03:cf:5b:dc:7f:35:5e:2d:7b:c4:e0:67:5a:c4:82:60:0f:
26:a2:df:f9:65:12:fc:b8:4a:8b:e9:fd:e9:53:b0:bd:fc:80:
db:c9:93:ef:0e:f3:c5:7c:3f:12:dc:44:fb:7c:77:29:36:7b:
8b:c2:eb:3e:dd:2b:6e:b4:1d:6a:79:bb:8c:8d:14:f2:4e:a2:
9e:71:a2:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mllbyg5QR+7YkwkyeMetBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZTBiMzhjNTliZDQyYjJiMDdlMmFhZmIyNmQ5ZjU1YmFi
MzgxN2EwHhcNMjYwMzI1MjAwMTE5WhcNMjYwMzI2MjAwMTE5WjAzMTEwLwYDVQQD
Eyg3YjFhMGFiODc0ZWM5ZWI4NjM0NWMwODEzZDgwNjU3ZDI3OTA0NDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO99I9qBDfSKqMevP5DlmEQuik4P
QTeYDfYzDAs7Zoi+c7d/0CbmUkYGi4TcmIjjBaHiAqWhYhMqkDXKS1JTBeqZaVK9
DXIRXDYcO0rnm9x7a9v6BFdiCZKHMaOqvTOKn0wvthmRqVL7llDE7qrqdHHdoJC0
NIT+Cw1EesqM5gFMhwZhrUV00jtNW7pdF3s4dDnk1zHLuPyg0Pj6fSvLbaaJ10va
GEVzW21kd7PCSHl8XWcBPyyyV3T3ovmymUPAQ8p8HREfBaJqjQxTSErmP7W3hRfM
KibXzp+q+/UzrQXjKMxFv2sPUvihr54IeXepGDrGKjx/pmGVwudfYeGHcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsaCrh07J64Y0XAgT2AZX0nkESWMB8GA1UdIwQY
MBaAFMTgs4xZvUKysH4qr7Jtn1W6s4F6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wYzc1NmMtNGNmMS00NzliLTk3NGQt
YjIzMmQ3ZGFmY2FjLzEveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wYzc1NmMtNGNmMS00NzliLTk3NGQtYjIzMmQ3ZGFmY2Fj
LzEveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPBQdvHq
cOKIpzcxjpK2MDl+au2S6y22WjNA/vJ7TufdzFEp/TOIYzgr2A7AhpBJqBgB3hEo
XNH9yXPombAWA7+LiJ/aT3fXgZdA3g0dVEm+mf04YgfasGFr/OMl5n4qZu+BrwJw
c81i591koDbyY9eN7bJvIFR3GZxiRMvwqJw1l/e4ZsS4+CwXjIz6ryNRRN4htSbN
/ZbDCXNyKrJWldy8uUcax9nCI9kUTbDjcdpZuztNCgPPW9x/NV4te8TgZ1rEgmAP
JqLf+WUS/LhKi+n96VOwvfyA28mT7w7zxXw/EtxE+3x3KTZ7i8LrPt0rbrQdanm7
jI0U8k6innGifw==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:34:12 2026 by rpki-client