Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
File: xOEMfL_9dIipagLVyRL5-SVku1w.mft (raw, json)
Hash identifier: y8CJQuzHdw2T3XxxVBqdXTmJff7JsviHOO7cYNb0LBU=
Subject key identifier: DC:63:A1:A2:BB:12:D5:A5:81:9A:E5:18:41:56:24:9E:54:13:24:78
Authority key identifier: C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
Certificate issuer: /CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Certificate serial: 019DA45380690C349B4BEF00D42C942F8562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
Manifest number: 02BE
Signing time: Sun 19 Apr 2026 06:00:28 +0000
Manifest this update: Sun 19 Apr 2026 06:00:28 +0000
Manifest next update: Mon 20 Apr 2026 06:00:28 +0000
Files and hashes: 1: IWls0AbP5WlDYBhalibARg9icP8.roa (hash: dYr+MsyOWEf1lFygz2jaouZlTKLtP7ebV5kBwfOgAwI=)
2: xOEMfL_9dIipagLVyRL5-SVku1w.crl (hash: zvqwNm2LnTzekp9zamtu4vBcN+mudyg2lAtkhZnEp/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:80:69:0c:34:9b:4b:ef:00:d4:2c:94:2f:85:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Validity
Not Before: Apr 19 06:00:28 2026 GMT
Not After : Apr 20 06:00:28 2026 GMT
Subject: CN=dc63a1a2bb12d5a5819ae5184156249e54132478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5e:1f:7a:7d:4d:ed:07:7f:83:dd:e2:27:fb:
a7:92:d5:ef:c8:14:b4:96:1a:e0:03:e0:e1:1e:fe:
10:58:fe:f8:0c:23:f4:75:6b:9e:ec:1a:c3:2a:dc:
bd:17:dc:f6:1a:d9:6f:5a:06:20:d7:46:8f:ef:25:
be:f9:5a:e5:24:4d:64:1e:ea:c2:cc:8b:bf:32:54:
a9:d6:18:18:4b:03:6b:01:07:0a:7e:61:9f:e5:68:
0f:f3:bb:4a:b3:f9:d2:ea:a9:a6:e2:c5:f4:dd:8e:
25:cb:14:1b:c5:1f:48:ad:6b:f0:14:3f:bb:9e:78:
a8:6d:6e:75:d2:70:fa:3b:69:aa:a8:b0:78:05:fb:
fd:d8:ad:2e:6e:81:fa:76:66:71:df:fc:62:c0:aa:
2e:af:50:4a:10:a4:60:82:f5:62:ac:8e:de:7c:5d:
a6:df:6e:42:34:7b:3f:fc:37:d3:c7:49:df:ef:2a:
42:a1:69:63:6a:7e:15:a5:e1:2d:45:95:a6:5f:36:
5a:47:2c:f6:5a:96:3d:99:9c:fe:c5:83:3d:79:58:
35:ea:33:89:b0:9b:44:7f:71:58:dd:da:9e:99:64:
a9:cc:14:87:73:71:1f:4f:38:61:41:12:9e:b2:54:
49:8c:3e:d8:84:11:8f:29:2e:21:ad:9c:04:49:47:
0f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:63:A1:A2:BB:12:D5:A5:81:9A:E5:18:41:56:24:9E:54:13:24:78
X509v3 Authority Key Identifier:
keyid:C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:04:49:a6:49:ba:ab:f3:4e:b6:31:b8:2d:ec:3b:ee:dd:ec:
59:0b:e2:c4:0e:35:2d:0e:68:5a:d3:9f:49:74:54:c6:97:e9:
7e:2d:ce:38:43:e5:80:bf:44:39:62:f8:29:7f:f6:cf:15:26:
13:a0:98:60:bb:a2:00:9a:79:9b:da:15:ba:78:8d:5b:5c:61:
b2:51:f0:62:8e:5d:8a:93:de:d3:97:7f:3f:69:b8:87:ac:87:
2f:ba:8f:e9:ce:4c:cc:e7:94:55:6f:d2:cd:56:f0:94:ed:f7:
83:9d:5a:c4:a2:5a:02:02:d0:0f:63:e3:cc:89:4a:19:23:60:
3e:89:19:44:72:6c:1e:3f:a0:98:6d:8a:51:f9:f2:90:11:38:
49:84:80:64:eb:2d:c1:2e:1b:5f:22:cf:9d:dd:30:7f:7f:d0:
99:2d:30:77:55:d6:49:17:47:43:34:c2:a0:5b:5e:6a:53:9a:
b0:3d:38:8e:e8:e9:b5:6b:fb:d2:53:9e:7d:1d:45:a1:6f:d5:
32:f0:f9:15:12:bc:da:ce:d4:d2:87:e3:9a:96:0d:8b:0b:f1:
61:29:09:36:35:35:1d:82:f4:17:2f:e3:6a:cc:10:13:55:d0:
f5:6f:af:f7:0f:fe:5a:74:4b:00:01:59:3e:1c:78:56:df:f9:
12:39:86:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:46:18 2026 by rpki-client