Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
File: xOEMfL_9dIipagLVyRL5-SVku1w.mft (raw, json)
Hash identifier: s4SR95Y0ibj3ro12oD47481QGq/i+eory2zmkOoiYB0=
Subject key identifier: 32:83:0C:E6:ED:7E:B6:D5:58:B8:68:C9:4F:E7:D1:D2:67:74:5C:98
Authority key identifier: C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
Certificate issuer: /CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Certificate serial: 019CB0FFC86C2633A4623723FD3A9E1BE4E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
Manifest number: 0240
Signing time: Tue 03 Mar 2026 00:01:18 +0000
Manifest this update: Tue 03 Mar 2026 00:01:18 +0000
Manifest next update: Wed 04 Mar 2026 00:01:18 +0000
Files and hashes: 1: IWls0AbP5WlDYBhalibARg9icP8.roa (hash: dYr+MsyOWEf1lFygz2jaouZlTKLtP7ebV5kBwfOgAwI=)
2: xOEMfL_9dIipagLVyRL5-SVku1w.crl (hash: I7RjUW/3HW1+X6aNY9i51lXZW+zhUW7jbC2KpXn2PVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:ff:c8:6c:26:33:a4:62:37:23:fd:3a:9e:1b:e4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c
Validity
Not Before: Mar 3 00:01:18 2026 GMT
Not After : Mar 4 00:01:18 2026 GMT
Subject: CN=32830ce6ed7eb6d558b868c94fe7d1d267745c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e8:32:06:c1:1f:ba:35:39:1a:b6:6a:d8:ff:
df:b3:b9:38:7e:97:04:36:ec:aa:d6:06:e6:ae:50:
d4:64:d9:c5:38:1f:ca:4f:85:31:c4:09:06:01:71:
e5:29:49:e0:0a:de:da:06:a9:e3:28:62:76:5e:98:
9a:ea:3c:08:a2:8f:9f:4d:05:f0:bd:12:37:54:81:
0c:ec:80:cb:89:6d:bf:ea:35:19:8e:ab:0d:f9:09:
4f:3c:4c:7f:93:eb:e7:fb:17:dd:86:9d:97:02:60:
7b:78:76:37:05:fd:af:f5:87:bf:ce:5e:d9:35:aa:
32:e8:ad:00:b9:2f:06:3c:ce:e4:da:26:e3:1f:61:
79:41:4a:a9:0c:23:81:2d:63:56:85:f3:6e:ac:01:
a6:92:48:e5:4c:c8:70:16:30:aa:34:02:6e:6c:d2:
fd:1f:72:50:5f:96:ec:6b:2d:73:ac:0e:a7:18:5c:
d8:eb:55:a6:cb:ea:8c:07:0d:b6:ec:de:4e:04:6c:
ed:a8:e1:1d:31:0d:6e:c7:79:08:ac:15:86:d1:00:
f3:2c:16:1b:84:1c:98:f9:2e:38:79:c4:72:cf:78:
7a:fc:45:19:65:d9:ad:be:71:9f:bb:4b:63:7b:a3:
f3:c5:2a:4e:d0:d0:ec:f1:15:20:96:24:7e:81:02:
eb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:83:0C:E6:ED:7E:B6:D5:58:B8:68:C9:4F:E7:D1:D2:67:74:5C:98
X509v3 Authority Key Identifier:
keyid:C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d7:f6:14:0a:ce:d9:40:77:08:53:47:91:d5:0f:57:60:55:
97:0a:e7:10:cf:bc:57:a1:61:0b:2f:6e:b7:ef:f7:d9:81:dd:
91:6f:45:ea:a0:9c:05:0d:16:56:3b:0c:d8:05:2c:1f:4c:7f:
bb:06:50:ec:82:e7:ca:aa:40:f4:18:c3:e8:af:58:65:b2:db:
70:fb:08:68:03:82:09:37:87:50:b3:c5:35:7e:f1:46:30:a5:
63:e5:4e:f5:c7:5c:ce:d4:48:c5:03:22:41:c7:7c:d2:ca:32:
24:ad:1d:84:ea:fb:cc:f6:ab:10:ed:e6:74:4d:6f:2c:54:d5:
90:70:fe:55:38:24:42:98:b9:c2:e4:42:1a:4c:70:b0:33:6b:
92:ee:f0:53:08:13:fb:70:05:17:be:fc:32:d4:1b:0b:a5:bf:
6f:96:76:d3:96:5e:6f:af:ac:1e:ba:aa:5c:1f:67:43:27:f5:
97:31:4d:24:d3:12:cc:07:9b:a9:13:d4:c2:ac:39:16:d7:60:
7f:d4:8a:27:18:c9:b1:3a:f0:28:7b:9e:0f:55:60:2d:47:ee:
cc:a3:4d:36:a0:98:ad:74:8b:30:b5:fc:3a:16:30:e8:66:37:
f9:ac:bd:f3:f4:10:44:54:78:28:92:0a:ba:09:ae:0a:f4:36:
df:9f:12:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:25:35 2026 by rpki-client