Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
File: xpjOogluk-LClNqo5corQqSUqEQ.mft (raw, json)
Hash identifier: xDdQeimPv9gaAx5AjmpjVOcKboCW71GM0KrmB+SK69A=
Subject key identifier: 8A:44:18:5D:79:E7:1F:F8:82:58:8B:42:7C:00:4D:FF:36:56:90:AF
Authority key identifier: C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
Certificate issuer: /CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Certificate serial: 019D99995981F51C84DFCF8E37AA9B60B98A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
Manifest number: 0CD3
Signing time: Fri 17 Apr 2026 04:00:57 +0000
Manifest this update: Fri 17 Apr 2026 04:00:57 +0000
Manifest next update: Sat 18 Apr 2026 04:00:57 +0000
Files and hashes: 1: xpjOogluk-LClNqo5corQqSUqEQ.crl (hash: oBL7QT9ngYSGi9BOsgw7fI84w52LSsaSf/BPy4lxPjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:59:81:f5:1c:84:df:cf:8e:37:aa:9b:60:b9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c698cea2096e93e2c294daa8e5ca2b42a494a844
Validity
Not Before: Apr 17 04:00:57 2026 GMT
Not After : Apr 18 04:00:57 2026 GMT
Subject: CN=8a44185d79e71ff882588b427c004dff365690af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:62:b0:43:ab:a5:0a:63:e6:b1:a0:5e:1a:
12:1b:4f:37:ab:b0:2e:97:74:cb:88:67:aa:56:c4:
26:77:c5:46:98:ec:76:c0:00:2b:93:ff:53:50:34:
fb:e7:60:eb:4e:d2:fb:6d:2e:4e:8b:51:bc:09:54:
b8:1f:03:af:a8:74:d5:19:fa:dc:2e:18:23:73:c9:
ce:bb:3b:c8:2e:74:f2:34:9b:7e:fc:c6:09:57:ca:
47:b0:50:05:d1:db:18:73:df:03:35:25:df:b7:5d:
63:26:bb:e3:09:57:67:c0:95:e5:06:85:3f:2c:f1:
55:0e:1d:c9:ce:97:0e:c8:99:ba:45:50:41:15:a9:
39:4e:c8:37:a5:09:ed:9c:7c:54:e1:62:68:30:77:
0f:fb:96:64:92:45:38:c1:84:4e:02:19:e4:1e:2f:
57:17:e1:bf:59:ea:ca:8a:77:3b:12:5d:d4:9f:8d:
bf:22:a5:df:af:ac:ad:09:c6:f7:0b:5d:66:22:38:
94:14:35:e6:c9:f0:17:86:77:6a:bc:9f:23:65:90:
5c:bd:0d:99:eb:8e:c9:6e:10:fb:1c:ed:75:e9:b6:
52:59:42:85:bb:a7:48:bc:7c:f6:97:58:3e:6d:a5:
6b:b1:5f:26:5c:5e:c5:8b:cf:15:98:b3:aa:cb:4b:
3e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:44:18:5D:79:E7:1F:F8:82:58:8B:42:7C:00:4D:FF:36:56:90:AF
X509v3 Authority Key Identifier:
keyid:C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:bc:79:17:0f:c7:ee:97:c8:00:92:02:09:35:ec:b4:57:3c:
f9:fd:17:48:98:2b:22:8f:c5:b1:84:af:6a:ff:de:57:02:44:
9f:f6:17:9a:70:59:9e:b6:60:8f:47:ee:ce:a0:c3:78:d4:ca:
ff:5e:c6:c3:1c:38:32:d9:88:5f:18:6e:d5:88:fd:52:a4:a1:
ba:42:91:19:b1:4c:2f:93:58:52:56:18:62:f6:ed:d0:27:86:
83:6c:31:79:d8:0f:82:c1:17:87:7a:90:40:f2:e4:60:22:dc:
dd:af:5a:73:18:7a:57:b7:2b:36:f4:1d:2f:09:7b:d5:73:40:
03:ff:d8:dc:8b:a0:7d:5f:84:29:cd:77:14:12:74:c6:24:8b:
dd:00:bc:e6:cf:3a:d4:c7:31:e8:18:e5:fc:e7:29:6d:57:6b:
66:bb:13:25:8f:ef:ae:e6:eb:93:a7:72:73:2d:e1:9b:3b:f8:
15:dd:a8:5c:4f:6e:dd:39:05:1e:38:94:43:41:66:8b:8d:6f:
44:8b:2c:1c:01:f6:06:13:2d:32:86:13:23:14:16:9a:0c:5d:
e0:f9:1e:69:28:16:0c:21:2f:e8:07:a7:85:db:7c:14:c2:73:
15:b1:0f:1a:65:3f:13:6f:3b:da:2f:95:d0:ca:28:05:9d:38:
9e:5a:a4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:41:21 2026 by rpki-client