Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
File: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft (raw, json)
Hash identifier: oi+Idqbs/aR395zPYICEUmoHYhMRIVwHJ7TWk4o7exc=
Subject key identifier: 0D:77:7C:27:C8:49:4C:C8:D3:76:8D:0E:12:23:B2:BE:B7:5B:68:6D
Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
Certificate issuer: /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Certificate serial: 019D99993263FCF8704FBE52416E38F68743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
Manifest number: 06DB
Signing time: Fri 17 Apr 2026 04:00:47 +0000
Manifest this update: Fri 17 Apr 2026 04:00:47 +0000
Manifest next update: Sat 18 Apr 2026 04:00:47 +0000
Files and hashes: 1: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl (hash: Ef6ZniTmiuh6duFU8xySwi8oPwnKdh+69AxZRjIjDg4=)
2: zIooxkz42P8_5ReZHQIQQDyh_E0.roa (hash: vHG8nX4oJh4/M/Rbe7SvWBLoOWc7PYioObPqt6DtUuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:32:63:fc:f8:70:4f:be:52:41:6e:38:f6:87:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Validity
Not Before: Apr 17 04:00:47 2026 GMT
Not After : Apr 18 04:00:47 2026 GMT
Subject: CN=0d777c27c8494cc8d3768d0e1223b2beb75b686d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:08:5d:8c:cd:66:5b:05:ee:46:b0:fb:b5:fb:
15:1d:9d:93:f5:7b:7d:2a:74:c1:69:b3:97:06:65:
84:a5:d8:52:2e:2f:fc:8b:ae:dd:07:70:51:23:d1:
e6:8a:62:36:5f:75:d9:66:d8:44:b8:42:aa:2c:7c:
7b:bc:e1:5d:92:67:06:3c:29:5f:e2:1c:d6:76:35:
e7:5b:42:bd:13:ec:be:9d:04:ac:20:8d:b3:49:d8:
46:13:1c:21:72:63:7e:e4:7a:f8:b2:6c:08:a0:b7:
1a:30:ff:1a:44:dc:82:43:95:7e:ca:22:2a:cb:95:
0e:3b:61:ac:a3:b7:82:1a:b4:bd:cd:25:69:c6:3e:
88:b7:42:48:55:88:00:f3:2a:b7:07:56:dd:98:33:
e7:10:db:17:65:32:77:44:60:25:d7:73:0b:e6:8e:
33:ec:34:3b:75:8d:cb:45:c3:67:e6:e4:7d:77:01:
19:d9:f6:f7:21:a9:4d:4e:28:6d:dd:29:de:a1:83:
3c:80:8d:d9:5d:cc:82:e8:c4:b2:59:2d:ac:21:21:
eb:d8:18:7a:45:b3:98:67:e5:de:5d:1b:64:7c:2f:
59:29:bc:87:fd:0d:41:09:02:35:0e:01:a7:19:31:
e9:d2:0c:58:e5:2c:d2:6c:06:69:95:7c:e2:9e:e6:
e3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:77:7C:27:C8:49:4C:C8:D3:76:8D:0E:12:23:B2:BE:B7:5B:68:6D
X509v3 Authority Key Identifier:
keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:7b:03:5f:0b:eb:47:6e:8c:4e:82:d5:c2:e9:ce:37:f4:f2:
ba:67:bd:65:23:5b:3d:9b:e2:5c:0c:7e:89:5a:d4:21:83:9b:
6c:98:22:6e:b3:d1:5f:44:10:ae:82:e8:ba:54:52:d4:8f:25:
bd:8b:ff:39:6e:9d:77:14:59:7a:53:df:bd:5d:be:86:e0:95:
b2:a6:f4:66:dc:e3:85:13:db:b1:49:e2:30:89:38:c6:20:8c:
21:2d:60:a6:10:a6:88:69:0d:34:b6:9b:de:46:1d:53:5c:e6:
3f:8f:40:db:19:27:58:e8:9f:23:a5:56:5d:08:18:c7:43:25:
fd:44:a9:aa:bf:8b:53:f6:c2:b0:6f:fa:55:a2:0e:b3:ff:1f:
c5:0f:0c:39:4e:65:42:62:34:25:03:90:29:eb:8b:ed:9b:2f:
cb:12:b6:9c:0b:ad:99:b6:27:a1:8f:e7:21:98:1d:86:b7:d7:
f9:22:87:6b:07:89:bf:4f:bb:f3:14:10:26:c0:65:75:06:81:
27:61:56:bf:37:84:f6:41:86:b9:cb:fc:03:50:99:d5:35:79:
8e:b3:1c:32:47:b2:0b:1f:aa:9e:f7:e9:dd:23:66:da:dd:9d:
ad:b9:8a:66:41:75:23:8a:c6:23:e9:4e:0e:45:6c:30:ca:8b:
bf:43:81:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:34 2026 by rpki-client