Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
File: xOEMfL_9dIipagLVyRL5-SVku1w.mft (raw, json)
Hash identifier: lutFjK5Adu/uuIg+gmUA8fHkyYG/QnEOQE411RgHzsg=
Subject key identifier: 91:DB:4C:94:F8:EB:46:E4:E7:66:2F:6A:A3:98:4A:70:B5:05:10:3B
Authority key identifier: C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
Certificate issuer: /CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Certificate serial: 019FABD19DB44F3EE0DD807D3577304BF6DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
Manifest number: 03CB
Signing time: Wed 29 Jul 2026 03:01:08 +0000
Manifest this update: Wed 29 Jul 2026 03:01:08 +0000
Manifest next update: Thu 30 Jul 2026 03:01:08 +0000
Files and hashes: 1: IWls0AbP5WlDYBhalibARg9icP8.roa (hash: dYr+MsyOWEf1lFygz2jaouZlTKLtP7ebV5kBwfOgAwI=)
2: xOEMfL_9dIipagLVyRL5-SVku1w.crl (hash: XYJiTGObSCYvyTVV7pRcMLLRt0cyrj+1fOvbSCE0Agg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:9d:b4:4f:3e:e0:dd:80:7d:35:77:30:4b:f6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Validity
Not Before: Jul 29 03:01:08 2026 GMT
Not After : Jul 30 03:01:08 2026 GMT
Subject: CN=91db4c94f8eb46e4e7662f6aa3984a70b505103b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d3:36:20:23:ca:1b:c9:02:17:fe:e5:a3:6f:
5d:35:5f:68:7b:69:e6:3a:0e:18:24:a7:c5:ae:20:
2d:db:e1:46:f8:ae:6d:36:4e:b0:a2:23:27:41:b9:
53:4e:f1:77:ac:e1:21:20:c0:63:be:b8:7d:1a:e4:
aa:6c:02:78:dc:3e:c6:8a:ac:46:fb:25:3d:d9:d4:
29:06:de:43:03:ee:e9:45:cd:18:ee:ea:f8:3b:c4:
c0:62:c5:9f:af:41:5f:4f:ea:56:f0:66:cb:a5:4e:
a1:00:e4:d6:fe:9d:e8:9e:f0:92:97:e4:6f:4f:c5:
c4:82:41:ec:a9:e7:c3:1c:d5:d8:e1:4e:23:08:36:
cc:06:67:7c:d7:57:4a:1c:93:83:2f:a3:be:53:4c:
6e:4d:5b:ae:c5:2c:16:07:18:ad:8c:a4:bd:0d:c3:
0e:09:23:64:00:f7:4d:70:81:68:31:85:41:8a:9a:
4a:ae:d2:62:85:da:cb:1c:2c:d7:07:23:58:1f:ce:
ba:a0:98:f3:d3:68:62:1d:a2:3b:f4:96:36:2e:ff:
d8:76:20:99:d0:c5:3a:59:a1:62:69:89:c9:fb:0f:
bf:75:eb:e8:a0:cb:47:a9:6d:60:5f:29:8d:62:4b:
42:60:bb:a5:f2:1f:30:3d:99:04:e4:c5:f0:bd:45:
cb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DB:4C:94:F8:EB:46:E4:E7:66:2F:6A:A3:98:4A:70:B5:05:10:3B
X509v3 Authority Key Identifier:
keyid:C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3c:b1:45:98:50:ae:7f:6b:9d:81:7f:e0:bd:82:8f:f5:d2:
af:3d:4c:13:c1:f3:4f:3c:27:58:41:08:1d:50:17:b3:f7:62:
0f:a3:b4:0b:1c:fd:9b:e4:e9:2a:95:f1:f7:01:46:4a:7b:ca:
95:98:0c:07:7c:e7:81:d4:78:7c:c9:54:29:8a:26:0f:d0:11:
4a:b7:5d:1e:3d:db:f7:c0:e1:d8:7a:23:c9:ed:58:c0:5a:09:
60:29:b6:35:2c:77:3d:71:99:cf:92:8d:d8:6e:dc:75:de:2d:
d2:2b:24:43:62:bc:bd:be:bd:82:b6:47:ec:22:59:d5:9f:9e:
0c:71:1c:47:39:0c:9f:15:7a:8b:d7:a7:fd:47:06:0f:e4:b7:
64:3e:45:fd:5f:b3:59:9a:2f:0b:0e:cd:ba:57:27:91:f5:78:
e4:ab:8a:34:f1:ba:a4:0f:ec:6c:7c:55:c3:b7:1c:9e:52:a5:
3e:da:80:fa:18:bc:88:f6:e8:4d:2a:53:7a:2e:d2:d3:80:85:
b0:d0:4b:07:dc:46:06:04:d5:78:45:fb:f5:33:c0:56:95:37:
90:75:6d:81:1a:b9:c9:43:2a:d6:45:72:18:12:1f:9a:bc:7e:
9b:91:26:00:ae:f3:5c:32:80:ec:03:2d:7e:a4:79:2c:9f:73:
2f:b2:59:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:54:24 2026 by rpki-client