Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
File: xpjOogluk-LClNqo5corQqSUqEQ.mft (raw, json)
Hash identifier: Rj3gzuhHPBm8cq8Dp9wkwI3h2VSlJ0RieWmyGJtdKTo=
Subject key identifier: C8:7E:5F:CB:8F:46:7F:65:AC:A6:9E:77:D5:E8:16:E2:D2:18:BF:8E
Authority key identifier: C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
Certificate issuer: /CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Certificate serial: 019CAA212EFEB0CB997DCFA5168001EEA8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
Manifest number: 0C57
Signing time: Sun 01 Mar 2026 16:00:27 +0000
Manifest this update: Sun 01 Mar 2026 16:00:27 +0000
Manifest next update: Mon 02 Mar 2026 16:00:27 +0000
Files and hashes: 1: xpjOogluk-LClNqo5corQqSUqEQ.crl (hash: sKMzpuxdVHOr2A6JozbpSQ9fi4Cdt2xUFwcG2mZvrnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:2e:fe:b0:cb:99:7d:cf:a5:16:80:01:ee:a8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Validity
Not Before: Mar 1 16:00:27 2026 GMT
Not After : Mar 2 16:00:27 2026 GMT
Subject: CN=c87e5fcb8f467f65aca69e77d5e816e2d218bf8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:69:76:30:53:cd:d6:fe:b9:1d:a5:73:a9:
b6:66:b2:f7:63:a6:0f:99:5f:8e:48:b9:4e:b7:3b:
dc:8b:0b:05:56:7b:26:fa:11:8a:7d:a6:4f:41:e4:
ba:79:e2:c3:f5:48:b0:df:cf:ad:db:d5:10:41:75:
e8:22:a1:ce:95:8c:4f:83:e9:85:cd:73:e4:b3:01:
77:6e:66:40:6b:13:17:14:02:bb:c6:94:72:e3:b4:
10:d9:52:35:60:7a:6a:b8:09:fd:fc:e5:3e:7c:fd:
8f:b5:81:07:94:01:e3:c5:98:ee:e2:82:c0:23:bf:
30:b7:91:d1:b7:74:d3:24:2e:e9:8d:9d:82:7a:bc:
cb:c4:6d:f6:a2:2f:9f:16:36:60:bd:6e:85:94:40:
2c:cc:17:b0:70:66:4b:00:18:06:fa:a5:b7:a1:d2:
9e:6b:41:e4:a7:66:34:0a:e1:5f:27:08:d3:80:d9:
62:3f:f4:2f:b5:ac:c7:97:4e:fd:2c:2e:5e:de:c0:
a4:ee:b3:31:db:83:10:53:f1:68:5e:a2:36:f9:fd:
c8:a8:9a:12:be:88:d6:23:18:ba:0d:21:f9:ef:cd:
28:74:30:06:0a:d0:cc:e6:58:42:e0:06:6f:9a:6f:
91:e1:48:ea:31:0e:54:f3:a2:2c:35:e0:94:2a:84:
03:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7E:5F:CB:8F:46:7F:65:AC:A6:9E:77:D5:E8:16:E2:D2:18:BF:8E
X509v3 Authority Key Identifier:
keyid:C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:78:94:0d:d6:bc:83:2a:41:55:8c:f0:36:c8:91:c5:05:c5:
d9:14:6c:60:66:59:4b:c1:8c:aa:3c:2f:92:ba:2a:f7:9a:15:
91:6f:68:cf:81:22:f8:31:de:09:b9:2f:9f:1d:16:d0:0d:bd:
99:3b:08:d0:3f:ce:96:ba:c9:fa:33:09:c5:6f:e9:81:24:38:
53:d7:8c:32:6a:bb:0f:46:2b:16:aa:88:44:5c:f3:3e:24:d0:
52:6b:2e:64:a8:30:b0:f3:4f:5c:22:9f:85:41:ab:81:bb:21:
49:be:40:c6:48:b3:16:8f:28:f3:e6:77:a9:f4:1a:1a:24:23:
a5:bb:dc:e5:34:db:f3:83:b3:11:0f:98:b3:d9:df:ab:d3:f2:
3d:4d:ff:38:f0:b9:a8:bf:81:da:2d:dc:e5:f9:8c:76:44:a3:
a7:8f:68:e3:55:4a:18:a6:6e:7b:88:31:47:36:30:26:b8:41:
38:d5:43:42:1a:b9:ea:04:b8:93:86:3c:38:ae:e6:38:ff:86:
e1:fd:ba:16:1e:bb:d7:1b:92:2a:e1:85:82:22:37:0c:38:3e:
8d:6a:0a:01:52:68:ed:d9:53:9a:75:82:e9:1c:4b:1d:23:88:
21:df:26:5f:46:67:e1:a2:0c:a4:8f:fd:06:6b:b6:67:cd:80:
00:3f:27:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:00 2026 by rpki-client