Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
File: xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft (raw, json)
Hash identifier: Ub4RP5W31T0EtmqW7QGcqb3pRj2vrlH1+GCk63AnJbA=
Subject key identifier: 07:C2:A9:CC:CC:34:92:81:77:5C:D4:9C:DE:61:30:2B:35:A4:71:F4
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial: 019D992B0BF676AA1A4B2A442DEF956989E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
Manifest number: 1209
Signing time: Fri 17 Apr 2026 02:00:28 +0000
Manifest this update: Fri 17 Apr 2026 02:00:28 +0000
Manifest next update: Sat 18 Apr 2026 02:00:28 +0000
Files and hashes: 1: ATFqvKQfCzg1eIhHj9ilysnZYnE.roa (hash: 9xWvqqO+irmFSgWZgkDiVyOSk6AqF02qWQdfh9GrCc8=)
2: NIt5HAEHP3eGIkRaRfmU_TQEUio.roa (hash: kNqtp8gVzKVPwqTczsFvU1xgIi6B9Z0PZaQgvs2xN6o=)
3: gtTwRDBJR-BbMiRZiF0UkREdrNI.roa (hash: EYI6Dc616oG3PdcronQ8IrDd6TturvsbVQq4J3V4p+w=)
4: tPnRw3top4XnUY_nTcwvwdpUiGQ.roa (hash: M0xYz4wzzLwebgXureqeaj7zhKGgbdLeOlyBhuFnNKo=)
5: xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl (hash: C+HXZMmnjnYkqVfQkkJ/O1WEAiY7u0hg8aKMSYIGO8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:0b:f6:76:aa:1a:4b:2a:44:2d:ef:95:69:89:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
Validity
Not Before: Apr 17 02:00:28 2026 GMT
Not After : Apr 18 02:00:28 2026 GMT
Subject: CN=07c2a9cccc349281775cd49cde61302b35a471f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:85:f8:47:df:e2:95:96:af:87:b5:9e:54:90:
13:28:be:bd:9f:9d:cf:10:e3:f7:bd:80:45:de:21:
85:98:fe:38:0b:7a:b8:cf:96:c8:32:56:d9:e6:34:
48:11:7c:e0:4d:fd:2c:25:61:f5:dd:49:8e:49:68:
2a:9a:ce:3f:8a:db:38:91:f4:c3:af:3e:c6:dc:56:
93:1e:ae:91:52:79:e6:a2:50:b4:84:f2:1d:a9:97:
cf:d7:f9:14:0b:a9:9a:4a:11:8b:7b:3d:e0:1b:6c:
b3:ec:07:c5:59:0b:20:78:43:30:de:62:29:a8:00:
3e:c6:55:33:3f:b9:21:76:a4:94:8b:aa:28:c3:f8:
22:b0:02:08:31:3d:77:04:99:5b:2b:5a:74:98:61:
10:8e:37:5b:b7:f5:ab:9e:3c:cf:f7:79:73:5d:45:
08:a9:e8:1f:ec:2c:c3:b8:75:1a:76:78:2c:44:d3:
bd:1a:c0:87:80:27:ea:10:05:99:d1:13:e7:48:e0:
b1:27:73:36:8e:55:7b:5b:fa:b2:80:96:9c:51:82:
fb:c5:b2:82:e9:93:9a:cb:66:72:03:0a:21:a7:1a:
8a:69:c8:fa:03:44:48:a2:c5:f1:06:47:55:9b:b7:
39:23:7a:c8:fc:4b:d6:d5:7a:56:35:b7:7f:d4:81:
a4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C2:A9:CC:CC:34:92:81:77:5C:D4:9C:DE:61:30:2B:35:A4:71:F4
X509v3 Authority Key Identifier:
keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e3:01:eb:6c:25:83:38:f1:64:40:d8:59:b8:c9:f4:10:b7:
fd:5a:8f:21:4f:e8:44:05:53:8a:61:de:21:a1:5f:8e:54:bc:
96:99:a6:d4:af:cc:5d:84:bd:95:bd:0b:b7:34:ee:b4:7d:c6:
fa:a2:9e:05:4d:e8:2e:75:a7:af:6b:4d:0e:22:20:77:03:de:
56:ab:c1:5c:3f:d6:76:7f:26:b7:07:43:c9:ba:7c:bb:78:19:
d7:1e:a5:10:84:61:2f:19:02:c8:72:be:26:e3:25:70:0a:be:
dd:57:97:97:dd:5a:3d:70:8e:2e:26:0a:37:d7:80:d2:f8:1a:
b0:f8:cc:9d:c5:c4:c6:2b:4c:d0:44:b5:7b:af:8b:09:d6:e6:
fc:2b:67:89:d5:91:b5:8b:e0:e5:42:31:c9:bd:df:37:fb:6b:
81:c0:fb:90:a8:d5:59:c3:be:35:1a:5c:53:38:83:2f:4d:18:
98:e7:09:d6:e5:f2:72:18:54:c3:26:ab:d2:2f:6f:a4:f6:34:
c6:65:16:25:da:00:b8:51:f1:42:af:3d:9c:f4:ab:27:65:26:
4b:6b:c1:67:bc:6b:72:63:31:4b:c7:46:a1:64:2a:9c:fc:1f:
df:e9:b8:29:a4:91:fa:c8:36:c7:62:67:50:cc:39:9e:ad:13:
ec:b8:b5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:47 2026 by rpki-client