
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
File: xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft (raw, json)
Hash identifier: 0uPvfRhINgotnIH9t0oUGnBtJiLSlfvpp2Nkwu+Rca4=
Subject key identifier: 30:19:D2:C0:AF:5F:59:CD:50:9B:FA:4A:E2:0C:96:4A:DD:DB:9C:2B
Authority key identifier: C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
Certificate issuer: /CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Certificate serial: 01A0DCBB531F6B6E1AF0DAD3A844A29B0BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
Manifest number: 1564
Signing time: Sat 26 Sep 2026 08:00:59 +0000
Manifest this update: Sat 26 Sep 2026 08:00:59 +0000
Manifest next update: Sun 27 Sep 2026 08:00:59 +0000
Files and hashes: 1: tEK593WJ1iubEABZdt5V-9KKKM4.asa (hash: E4hQi2zAoFJBlGZkd6DPZ2wlgeYWNDC2Pt81NJPg3fw=)
2: xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl (hash: ouoWE7A2eMDjRpc1Lww5UPGOGtMkjBUbDedyIwGcb7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:53:1f:6b:6e:1a:f0:da:d3:a8:44:a2:9b:0b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Validity
Not Before: Sep 26 08:00:59 2026 GMT
Not After : Sep 27 08:00:59 2026 GMT
Subject: CN=3019d2c0af5f59cd509bfa4ae20c964adddb9c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:6f:51:cf:37:6e:4f:8f:d8:43:e7:79:6d:
14:6c:2f:c6:69:d9:d9:14:6c:e3:d2:6f:21:8b:cc:
c6:20:e2:77:55:8a:72:82:7c:41:09:42:fb:ac:64:
5e:6e:0f:0e:69:c1:30:0f:a6:13:6e:a4:56:bc:9d:
ec:d2:9b:d6:fa:b7:93:3e:c2:00:5c:ce:0c:2b:4f:
26:eb:ab:0a:04:b5:fd:bd:12:67:5e:2c:bb:52:3d:
8d:1a:81:1e:e4:17:02:60:07:af:a4:8c:07:b3:04:
fc:3d:ce:6d:6b:05:e3:66:40:7b:a0:f9:6f:8d:ed:
96:12:60:6a:00:2d:d1:11:de:4d:21:23:1b:08:e1:
5c:5a:12:f8:19:be:8a:1e:1f:35:32:31:ed:f1:17:
bb:82:2b:bb:81:48:72:1e:d9:ea:17:e3:2d:8f:e2:
00:d5:7c:55:f7:dd:28:bd:16:90:6e:82:57:7a:12:
d3:fc:13:cf:ee:4d:31:a2:84:ec:ec:89:0d:2a:b1:
c4:da:1f:a2:5f:52:c9:17:95:36:97:fa:1c:74:ba:
84:a6:a0:2c:63:dc:45:4d:4a:86:37:65:db:87:66:
0a:50:5f:76:6c:0a:96:8a:04:ec:14:bf:63:9a:73:
2d:0f:88:75:8d:2e:35:5c:00:07:f0:4a:a0:3e:2b:
5f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:19:D2:C0:AF:5F:59:CD:50:9B:FA:4A:E2:0C:96:4A:DD:DB:9C:2B
X509v3 Authority Key Identifier:
keyid:C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:75:6c:cb:76:01:90:e9:1c:a8:4d:fb:e8:4e:c6:58:40:ed:
5a:ad:6c:7a:d7:de:4a:44:12:c4:89:43:24:de:10:ea:f2:6e:
de:d2:52:00:47:90:a7:ee:58:41:2c:03:82:87:dc:d9:6d:b4:
ae:88:01:42:5c:97:4d:23:67:9a:df:9e:e3:cd:86:32:c4:32:
21:20:bc:26:46:4a:8f:fe:a9:d7:44:e8:32:7e:f0:d1:e7:be:
41:69:fd:cd:e0:4e:35:b8:45:ca:ad:f6:fe:30:e9:c9:44:79:
e4:b0:d9:f4:89:0a:71:4d:31:9e:e2:b6:9f:ad:50:d9:02:fb:
9a:18:38:31:c5:af:9a:b1:77:8f:92:eb:33:ec:a2:00:3e:de:
f8:dd:0f:e4:e2:75:03:54:f8:25:62:43:8c:35:ec:09:a3:d9:
1f:9f:db:cb:bb:77:37:5c:c3:fd:8e:1b:f7:85:aa:a9:08:64:
60:52:f8:65:9e:bc:e5:9e:6c:24:91:2e:de:30:ed:91:72:50:
0c:96:9c:15:98:0d:51:59:8a:12:2f:e1:44:fa:63:fd:9d:6c:
b8:36:5b:91:02:48:b1:28:0a:66:04:f6:da:cf:0a:4a:b3:4a:
c7:d4:f7:80:3a:c9:ec:4e:06:ad:65:b5:06:5f:4a:28:7c:57:
3e:ba:68:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:49:01 2026 by rpki-client