
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
File: xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft (raw, json)
Hash identifier: yf9SzfLyzlYRfsitmlf+VPigUE6NZwrDkGR0VmyYQC4=
Subject key identifier: C6:04:6C:63:0C:53:B8:18:B0:CB:67:1B:EC:42:FC:FB:3F:CF:82:58
Authority key identifier: C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
Certificate issuer: /CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Certificate serial: 019FA7BE1FAE1F85FCBA6097B8055AB4B66B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
Manifest number: 14C4
Signing time: Tue 28 Jul 2026 08:01:22 +0000
Manifest this update: Tue 28 Jul 2026 08:01:22 +0000
Manifest next update: Wed 29 Jul 2026 08:01:22 +0000
Files and hashes: 1: tEK593WJ1iubEABZdt5V-9KKKM4.asa (hash: E4hQi2zAoFJBlGZkd6DPZ2wlgeYWNDC2Pt81NJPg3fw=)
2: xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl (hash: lGegZ+wJYjpMvaCJO+PYaEpvaFmvUsdRxIJZ/z4Q83o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:be:1f:ae:1f:85:fc:ba:60:97:b8:05:5a:b4:b6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Validity
Not Before: Jul 28 08:01:22 2026 GMT
Not After : Jul 29 08:01:22 2026 GMT
Subject: CN=c6046c630c53b818b0cb671bec42fcfb3fcf8258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:3b:ed:4e:b6:21:df:80:31:11:c5:16:a4:
49:a7:35:1b:44:08:37:05:1d:48:ad:4d:eb:5c:b6:
8d:7e:58:c4:ad:3e:e2:31:bf:82:03:c3:42:82:26:
f7:97:6c:22:a8:2e:81:1b:68:31:2e:a9:eb:fd:a0:
de:9a:06:03:27:d2:f5:32:84:73:a8:c3:b4:39:d8:
07:e6:f2:97:3e:ec:67:9c:0a:d6:65:90:b7:47:72:
e9:63:83:eb:52:a2:bc:4c:00:d8:84:1c:69:a5:0a:
62:1c:5a:f6:d1:91:a7:75:2f:48:5c:98:46:ba:8d:
79:88:db:97:c7:3e:4f:49:57:f7:3d:80:79:a9:4a:
58:b1:7b:04:3a:25:88:fb:b1:1d:3a:e5:74:da:b3:
6d:dd:1c:5e:c5:7d:71:5c:ca:a8:79:60:a9:32:e0:
d3:5d:04:a8:f4:6e:db:3e:ef:60:de:21:f9:df:a0:
4b:44:e8:8f:f7:0e:e0:8d:04:3d:70:cc:49:b1:ae:
67:14:1a:ad:14:bb:f6:61:fd:b4:c9:5a:14:d0:05:
ff:81:79:ba:d0:9e:82:05:af:dc:16:61:07:60:df:
9c:98:28:e1:18:55:ce:c6:47:1b:5c:0f:fc:55:a1:
f9:d0:09:91:6a:ae:9e:74:a4:f8:00:50:9a:ac:35:
d6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:04:6C:63:0C:53:B8:18:B0:CB:67:1B:EC:42:FC:FB:3F:CF:82:58
X509v3 Authority Key Identifier:
keyid:C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:53:e2:be:15:07:03:3f:ca:0c:ba:a7:46:47:df:47:5f:f6:
54:33:94:e6:f6:4f:d8:ed:c4:89:e4:1f:f8:50:48:87:75:56:
f4:a4:e7:8f:6f:28:2d:23:c2:09:c3:98:22:5e:17:31:da:6a:
83:a0:9a:d9:28:ca:38:1f:3f:87:d0:9e:d1:41:b0:ed:26:42:
1e:18:37:68:50:fa:8b:18:2f:68:d1:df:d3:c6:df:ab:b7:8d:
c0:f2:77:40:3a:c7:79:67:0e:42:ec:07:5b:2e:5a:b2:f0:ec:
4d:0f:54:1c:14:03:be:55:9a:01:ac:3b:a1:d0:1d:3e:6a:99:
3a:b6:fa:5b:af:2e:8a:b5:e4:0f:c1:7f:6d:41:c4:20:8e:6e:
eb:75:51:19:00:fa:2f:7e:3e:ed:70:69:0c:9e:72:58:25:eb:
8d:cf:46:ef:00:20:d7:86:dd:71:18:35:12:1c:10:aa:f2:44:
ba:b9:4b:50:e8:a9:bc:22:84:f1:e5:86:09:d8:e3:82:1d:62:
a8:ff:ed:5e:b9:36:d5:76:9f:94:27:8e:ca:3f:a1:ae:a7:8f:
b8:9c:70:4c:6d:18:a4:4b:32:8b:1f:93:d0:e2:a0:bb:95:59:
d4:01:d4:04:6f:ed:bf:09:84:4d:d2:25:4f:9e:6e:de:e4:29:
a4:3e:47:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:48:36 2026 by rpki-client