Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
File: xOEMfL_9dIipagLVyRL5-SVku1w.mft (raw, json)
Hash identifier: zKGKO0GzaTC15+OWXiGfZGvmTtwdikJnlekLDs9pGVA=
Subject key identifier: 01:B7:F3:4F:5E:D9:BA:DF:35:F9:DD:21:3C:E8:50:9D:86:06:DA:57
Authority key identifier: C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
Certificate issuer: /CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Certificate serial: 019EC0366C882D316AA6CF0126D1749FDA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
Manifest number: 0351
Signing time: Sat 13 Jun 2026 09:00:52 +0000
Manifest this update: Sat 13 Jun 2026 09:00:52 +0000
Manifest next update: Sun 14 Jun 2026 09:00:52 +0000
Files and hashes: 1: IWls0AbP5WlDYBhalibARg9icP8.roa (hash: dYr+MsyOWEf1lFygz2jaouZlTKLtP7ebV5kBwfOgAwI=)
2: xOEMfL_9dIipagLVyRL5-SVku1w.crl (hash: itIt0sU0J1YUXVY9nKXN2kfhhEkyWnScksFZ6RUO2cQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:6c:88:2d:31:6a:a6:cf:01:26:d1:74:9f:da:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Validity
Not Before: Jun 13 09:00:52 2026 GMT
Not After : Jun 14 09:00:52 2026 GMT
Subject: CN=01b7f34f5ed9badf35f9dd213ce8509d8606da57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:b7:48:4b:05:5e:85:2a:5d:50:9d:cb:80:
a0:89:fb:98:cd:37:d1:a1:ab:3e:16:f9:e2:08:96:
be:46:6e:f7:cb:c9:cf:31:83:22:a3:17:49:be:0b:
ee:84:0d:72:8f:e3:3d:81:5a:54:df:92:18:a6:b8:
84:5b:c9:79:66:a2:2e:f1:a8:8d:d0:c7:79:3e:22:
7c:2a:8b:04:42:bf:2d:e7:3b:34:b5:6e:35:72:9d:
1f:f6:8f:f1:44:2b:eb:a0:f1:2c:1c:6e:c0:d9:1b:
2d:b0:e9:2d:09:a1:98:9c:7a:02:62:cd:bd:ca:ec:
2f:1a:54:94:30:d0:32:18:5a:69:c9:b5:a6:38:3c:
be:c9:9b:03:ad:b9:1e:8a:d6:a5:b6:ba:ce:ef:ba:
c7:0c:fa:55:66:03:08:92:91:50:65:d1:81:33:1d:
69:e9:21:75:68:6b:64:56:08:49:59:17:ac:0f:e9:
77:d5:58:1a:83:f3:ee:66:70:26:ac:9b:e7:d3:2f:
50:61:f9:3f:22:a2:f4:ed:6d:2d:cd:bc:8f:b0:03:
42:d0:a8:04:a7:42:5b:19:b8:0d:ad:5a:1c:21:3a:
3c:ac:8c:23:b9:ae:56:02:2c:4d:88:46:5e:ba:63:
6d:fa:f2:ba:9e:fb:85:31:a4:84:1b:7f:6e:e8:ac:
07:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B7:F3:4F:5E:D9:BA:DF:35:F9:DD:21:3C:E8:50:9D:86:06:DA:57
X509v3 Authority Key Identifier:
keyid:C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6a:97:44:66:fc:95:5c:85:a4:1e:69:81:cf:04:19:50:40:
ab:6e:e5:02:96:8a:81:2e:85:a8:89:85:6e:d4:94:d5:75:7f:
88:78:a8:d7:6f:3d:b4:81:5b:84:c9:fc:55:a9:27:ef:48:ff:
39:b2:39:84:cc:a8:64:3a:27:5c:ed:03:b9:4e:06:12:3e:ef:
cf:fb:78:84:36:06:20:de:da:b4:e8:38:b9:8b:26:6d:00:9f:
da:0f:8f:de:7b:f6:45:c3:21:90:99:3b:15:7c:eb:38:b7:52:
3e:b8:0d:bc:ef:06:bf:38:43:bc:c4:63:50:1c:94:f5:d3:b7:
38:35:57:6c:a7:53:c7:86:4b:25:db:90:b2:0e:34:90:9b:87:
f5:89:8f:ba:d5:33:36:21:3a:5d:69:04:8d:3c:bc:dd:f4:ee:
d9:5f:ec:bf:87:c1:49:60:5e:0a:cc:88:20:d5:c1:26:da:a1:
bc:b3:12:f1:d2:4a:d5:d7:85:1e:ae:9c:cd:a9:19:dd:ad:ee:
41:27:34:f4:31:1e:84:64:e5:9f:8e:8f:99:23:23:9e:d2:af:
c6:1b:11:32:95:cb:93:fc:3d:a2:d8:ed:c7:00:45:08:a7:16:
b6:ef:18:7c:f9:fb:dd:ad:4f:87:5d:51:fd:98:b7:5f:2b:38:
4c:b9:42:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:36:19 2026 by rpki-client