Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
File: xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft (raw, json)
Hash identifier: G15CYqeZ66rb5cJ9ZvD43gtnTrxezaZgisCeRRvzaTs=
Subject key identifier: BD:55:7C:35:F5:CA:3B:14:6B:8D:7D:C9:B6:F7:C8:79:F0:89:B9:18
Authority key identifier: C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
Certificate issuer: /CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Certificate serial: 019D9C636D634079A4ACD9DEBC9DF9C504E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
Manifest number: 13B5
Signing time: Fri 17 Apr 2026 17:00:54 +0000
Manifest this update: Fri 17 Apr 2026 17:00:54 +0000
Manifest next update: Sat 18 Apr 2026 17:00:54 +0000
Files and hashes: 1: tEK593WJ1iubEABZdt5V-9KKKM4.asa (hash: E4hQi2zAoFJBlGZkd6DPZ2wlgeYWNDC2Pt81NJPg3fw=)
2: xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl (hash: LY1iElOgr0f/pC3BWimNXIbsGKzIC6E8FX4BYP2OQoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:6d:63:40:79:a4:ac:d9:de:bc:9d:f9:c5:04:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Validity
Not Before: Apr 17 17:00:54 2026 GMT
Not After : Apr 18 17:00:54 2026 GMT
Subject: CN=bd557c35f5ca3b146b8d7dc9b6f7c879f089b918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:33:f6:7b:37:4f:cb:85:41:fc:64:da:d6:
06:20:2d:bf:3f:01:72:54:b9:7a:80:c1:5d:21:ee:
f8:be:ff:ba:f1:53:5f:13:08:f6:0d:a0:b4:4e:bc:
ee:09:9b:58:18:bc:35:4a:df:a4:20:2f:a0:b4:b4:
7c:a2:4c:e4:df:19:e3:ae:97:c4:18:5a:04:88:ee:
99:22:4d:71:b4:dd:63:fb:3c:d5:b4:c4:8b:2e:3a:
26:70:8c:50:29:a6:d7:47:06:9e:21:df:5a:8e:97:
eb:26:6e:68:2d:c8:53:a9:4f:3d:b7:d9:22:98:ae:
fc:59:c2:1d:bf:9e:3d:a8:ad:2f:bb:1d:c3:1c:91:
ea:21:fa:2a:2a:a9:91:ad:8e:19:4f:7c:5d:7b:35:
14:16:f2:2d:4c:f1:a1:4b:5e:66:4d:ec:5c:4a:9c:
97:ae:59:16:3f:e4:5b:68:d0:c7:fc:9f:6c:f0:d0:
3f:47:b1:fb:0b:7c:9c:bd:85:ff:f2:24:bb:87:0b:
f0:b0:94:5d:f2:d6:9c:d8:b4:fa:1f:e9:a3:94:72:
75:f6:9f:02:54:f0:26:cd:f6:fb:62:16:3d:43:5e:
53:81:5f:79:3f:f1:c7:00:c5:17:99:dd:7b:15:a0:
90:ba:59:66:b9:b7:9a:dc:cc:9e:77:f4:ff:d0:e9:
e2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:55:7C:35:F5:CA:3B:14:6B:8D:7D:C9:B6:F7:C8:79:F0:89:B9:18
X509v3 Authority Key Identifier:
keyid:C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7d:80:4f:76:23:98:a4:e5:93:7a:ef:e3:9e:52:13:e3:06:
11:99:47:f8:30:c8:99:9f:3f:fe:4e:b6:ff:b0:aa:ac:04:b2:
22:9b:22:94:e8:fa:ce:4d:c3:63:4b:db:2e:21:8a:ca:90:08:
17:31:75:68:93:83:5d:57:91:f1:f5:78:2e:91:ee:e5:6d:2e:
75:c4:d1:47:7c:44:86:bd:56:94:f1:dd:f0:f2:39:60:5a:2d:
9b:25:59:d8:a3:38:8c:e2:50:3b:2d:da:c6:e9:7e:23:c4:51:
26:f6:f9:72:97:94:d0:dd:a3:43:46:0d:9e:10:51:c8:86:2b:
36:3d:c2:49:fe:cf:b8:62:1d:aa:61:d5:b4:c7:33:32:fa:e5:
a4:97:7a:27:8a:b5:d4:af:83:47:d7:95:38:5a:3a:ab:6b:0c:
bd:20:4d:bc:c4:f7:7a:2b:eb:0e:44:c2:3b:f3:5c:e3:b7:01:
aa:6e:82:ae:81:7e:0a:3d:36:38:9f:8d:80:e2:22:af:77:69:
fc:65:0a:de:e6:52:e8:33:75:54:58:45:7b:7d:24:59:c7:cf:
f5:54:b9:b4:c5:db:76:07:02:8e:d4:7d:84:e2:10:00:74:52:
dc:dd:db:4b:ac:14:8d:21:0f:6f:eb:06:b4:5c:61:71:64:a6:
ae:47:6e:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cY21jQHmkrNnevJ35xQTmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZTBiMzhjNTliZDQyYjJiMDdlMmFhZmIyNmQ5ZjU1YmFi
MzgxN2EwHhcNMjYwNDE3MTcwMDU0WhcNMjYwNDE4MTcwMDU0WjAzMTEwLwYDVQQD
EyhiZDU1N2MzNWY1Y2EzYjE0NmI4ZDdkYzliNmY3Yzg3OWYwODliOTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSMz9ns3T8uFQfxk2tYGIC2/PwFy
VLl6gMFdIe74vv+68VNfEwj2DaC0TrzuCZtYGLw1St+kIC+gtLR8okzk3xnjrpfE
GFoEiO6ZIk1xtN1j+zzVtMSLLjomcIxQKabXRwaeId9ajpfrJm5oLchTqU89t9ki
mK78WcIdv549qK0vux3DHJHqIfoqKqmRrY4ZT3xdezUUFvItTPGhS15mTexcSpyX
rlkWP+RbaNDH/J9s8NA/R7H7C3ycvYX/8iS7hwvwsJRd8tac2LT6H+mjlHJ19p8C
VPAmzfb7YhY9Q15TgV95P/HHAMUXmd17FaCQullmubea3Myed/T/0OniDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1VfDX1yjsUa419ybb3yHnwibkYMB8GA1UdIwQY
MBaAFMTgs4xZvUKysH4qr7Jtn1W6s4F6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wYzc1NmMtNGNmMS00NzliLTk3NGQt
YjIzMmQ3ZGFmY2FjLzEveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wYzc1NmMtNGNmMS00NzliLTk3NGQtYjIzMmQ3ZGFmY2Fj
LzEveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE32AT3Yj
mKTlk3rv455SE+MGEZlH+DDImZ8//k62/7CqrASyIpsilOj6zk3DY0vbLiGKypAI
FzF1aJODXVeR8fV4LpHu5W0udcTRR3xEhr1WlPHd8PI5YFotmyVZ2KM4jOJQOy3a
xul+I8RRJvb5cpeU0N2jQ0YNnhBRyIYrNj3CSf7PuGIdqmHVtMczMvrlpJd6J4q1
1K+DR9eVOFo6q2sMvSBNvMT3eivrDkTCO/Nc47cBqm6CroF+Cj02OJ+NgOIir3dp
/GUK3uZS6DN1VFhFe30kWcfP9VS5tMXbdgcCjtR9hOIQAHRS3N3bS6wUjSEPb+sG
tFxhcWSmrkduqw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:38:18 2026 by rpki-client