Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
File: xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft (raw, json)
Hash identifier: IZ/04exRgH+VVlFdAr6BQxwOyHQSm1RBkHt2jL69T8E=
Subject key identifier: 12:4C:97:6E:8F:15:F6:C2:CF:DD:E9:7A:B5:1C:16:8C:44:5B:9E:45
Authority key identifier: C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
Certificate issuer: /CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Certificate serial: 019F909108DC25449501CBD6D28CCBF7873F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
Manifest number: 14B8
Signing time: Thu 23 Jul 2026 20:00:51 +0000
Manifest this update: Thu 23 Jul 2026 20:00:51 +0000
Manifest next update: Fri 24 Jul 2026 20:00:51 +0000
Files and hashes: 1: tEK593WJ1iubEABZdt5V-9KKKM4.asa (hash: E4hQi2zAoFJBlGZkd6DPZ2wlgeYWNDC2Pt81NJPg3fw=)
2: xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl (hash: Aay206HALfWLcBtxMb5DG6VkW6cF0MHECmyDrJZV3tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:08:dc:25:44:95:01:cb:d6:d2:8c:cb:f7:87:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Validity
Not Before: Jul 23 20:00:51 2026 GMT
Not After : Jul 24 20:00:51 2026 GMT
Subject: CN=124c976e8f15f6c2cfdde97ab51c168c445b9e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:fd:7f:b9:5a:cb:1b:b6:d8:47:08:58:c8:
08:b1:94:e1:2c:2c:d3:ce:37:b4:00:1c:f9:ae:58:
3e:4c:ea:46:99:ae:e4:fe:11:8e:e2:ba:ce:10:28:
55:d2:46:42:92:55:e4:b4:37:2a:d5:f5:b1:30:fc:
2c:7e:3b:6d:ee:a3:58:39:90:6f:8c:69:36:eb:0f:
1d:33:c4:a9:5c:1c:a7:6f:ad:b9:78:8f:49:77:68:
b0:8a:e1:6e:43:8d:ec:c9:fe:d7:e0:a2:a1:6f:e6:
12:cb:2d:17:ec:56:9e:83:25:1c:a7:b7:ca:1d:17:
77:8e:0d:cc:eb:0a:56:7b:9c:af:55:c9:97:a4:55:
fe:9c:db:55:57:26:f0:f3:74:3f:3d:d4:43:52:de:
ed:a2:3f:d6:35:e0:73:55:d1:7d:09:71:0f:03:d6:
09:87:a1:7f:74:57:51:0d:94:2e:ee:c6:65:a7:fb:
ea:fb:0f:9c:cb:cf:90:7e:a7:ff:93:31:ac:66:b0:
0b:3e:c0:f2:6c:ef:ce:92:3f:30:f3:a3:8c:4c:d0:
7b:fd:59:a6:ec:33:97:14:54:99:3d:00:5a:06:e3:
bb:87:56:43:89:b5:55:2f:ee:f5:46:77:9e:eb:39:
9a:02:37:02:3b:90:9a:da:fc:a2:f0:7e:b2:83:9c:
a2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4C:97:6E:8F:15:F6:C2:CF:DD:E9:7A:B5:1C:16:8C:44:5B:9E:45
X509v3 Authority Key Identifier:
keyid:C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e6:ab:cb:07:33:00:28:ae:99:f5:51:9b:2a:d7:67:29:76:
b7:40:e6:30:13:e3:24:7e:39:38:19:4d:ef:1d:ea:60:1d:2e:
0b:54:9f:7d:05:3e:01:87:f6:d0:23:b2:93:fd:34:b5:79:18:
a8:df:7d:f7:91:79:06:6d:f6:80:17:80:44:ff:e9:c7:86:9d:
17:f7:59:c3:d7:f5:b4:af:79:b4:46:97:bf:5e:30:ad:ee:d9:
96:44:4e:0b:8a:24:30:38:56:ea:7b:83:7c:dd:4b:b5:b4:75:
07:10:bc:5f:37:3a:55:aa:be:ab:70:fa:84:93:82:98:bf:88:
e9:33:6c:d8:5c:ac:ae:1a:0c:b7:ac:6e:4b:c9:67:0a:0f:72:
02:94:d2:43:bc:96:0f:92:a8:b7:71:d6:02:6d:74:62:ad:39:
e5:65:ac:fe:d7:a8:8d:39:61:51:ad:c7:a2:eb:f5:ec:aa:31:
ca:3a:53:72:00:99:0e:3e:42:72:1f:03:ff:b2:3f:57:6b:8c:
55:bd:44:5f:28:a7:d7:d4:9a:95:7a:33:f0:a0:b3:9b:bd:a5:
6b:b2:34:c6:78:ee:5a:3f:05:7a:14:92:b6:d0:2c:11:0c:9d:
a3:a3:12:22:5f:a7:5b:ab:02:fb:71:8a:41:b1:ac:74:89:73:
33:ff:02:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:50:16 2026 by rpki-client