Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
File: xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft (raw, json)
Hash identifier: p9T0gzp72CMllzLPlBeBKs7y3XqunNbU6+Lwd6I1VnI=
Subject key identifier: 66:BB:69:CE:67:D5:2F:B7:24:15:96:F7:B0:5A:E0:07:A7:41:5D:78
Authority key identifier: C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
Certificate issuer: /CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Certificate serial: 019CA90F1E4A9906DA54CB006AA07DCCD161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
Manifest number: 1337
Signing time: Sun 01 Mar 2026 11:01:06 +0000
Manifest this update: Sun 01 Mar 2026 11:01:06 +0000
Manifest next update: Mon 02 Mar 2026 11:01:06 +0000
Files and hashes: 1: tEK593WJ1iubEABZdt5V-9KKKM4.asa (hash: E4hQi2zAoFJBlGZkd6DPZ2wlgeYWNDC2Pt81NJPg3fw=)
2: xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl (hash: 0xU40FhuZIoG7UV1ZOVdTeKU3Ia4YviypHdddqcbQsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0f:1e:4a:99:06:da:54:cb:00:6a:a0:7d:cc:d1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Validity
Not Before: Mar 1 11:01:06 2026 GMT
Not After : Mar 2 11:01:06 2026 GMT
Subject: CN=66bb69ce67d52fb7241596f7b05ae007a7415d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:62:fb:ce:97:36:41:5b:ff:98:fd:41:25:
e1:be:20:2c:d9:e9:8a:97:24:03:86:f3:60:4a:51:
ec:d6:2b:39:d3:9c:d9:57:ba:05:24:62:8e:ab:f3:
a9:ba:72:ff:ed:cd:6f:66:25:49:e1:f4:6e:60:12:
8b:48:2e:96:0e:78:56:0b:01:77:12:de:81:66:9d:
d5:b3:02:ad:04:b7:03:ae:a9:14:26:32:f6:c0:2a:
a2:08:23:e7:b1:9c:d9:11:c3:72:13:30:ea:50:16:
b0:d5:f8:a4:63:04:e3:75:6c:17:89:b2:06:f6:6b:
a2:d4:2d:f3:dd:b5:5a:6a:66:bc:e8:8e:04:cc:b7:
1d:04:23:2a:1f:4e:e4:1e:69:95:52:00:10:64:e9:
00:cb:c3:b4:ca:b1:15:a3:05:43:5d:b4:c2:12:de:
18:19:7d:db:52:d6:a6:fd:cb:ba:18:4d:bc:c8:e6:
0a:6e:93:bc:35:06:b3:05:22:f5:3b:ea:ba:86:7b:
ca:c5:8b:42:c6:9b:f0:57:93:f1:a0:bb:0a:99:15:
6a:8b:27:44:ec:ac:cf:02:bb:0b:49:8f:c0:b0:2b:
3b:da:f9:c3:c8:ec:b9:01:08:34:30:90:ae:6b:d3:
61:16:8f:f0:92:5d:8d:f6:2c:45:46:80:a7:42:13:
28:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BB:69:CE:67:D5:2F:B7:24:15:96:F7:B0:5A:E0:07:A7:41:5D:78
X509v3 Authority Key Identifier:
keyid:C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:45:7d:cf:36:8c:db:5f:6b:9d:37:48:26:1f:93:24:d1:83:
64:f9:bb:42:eb:b1:a4:d5:a8:bc:bd:ec:2b:3a:6e:a9:b3:67:
ed:da:c2:b0:77:d6:e4:cc:0d:d6:4e:2f:09:70:22:91:15:fc:
e9:31:fe:0b:b6:29:e3:3c:bb:d8:e3:ef:50:77:05:68:a7:54:
94:6f:3e:9b:b2:df:a1:b7:d1:c8:68:59:b4:22:87:28:24:b2:
c2:30:f1:a4:7a:78:c1:20:ad:da:f3:ca:af:11:ed:a1:05:d3:
b0:bb:e7:8b:4d:a0:52:ea:98:52:b2:ff:58:d2:4b:aa:c8:0c:
fb:ec:9e:9e:43:8f:b2:45:b8:2d:5a:29:58:99:06:26:36:17:
05:92:5c:15:93:ee:28:79:9e:d6:96:07:ab:a2:7e:9c:8c:6a:
7a:72:06:4b:49:5d:b9:68:b0:49:44:5b:b7:7e:0a:6f:80:ec:
be:42:de:c2:7b:c2:a4:3f:3a:0a:fb:9e:20:21:aa:97:3d:d6:
6e:2e:8c:e9:b2:27:e1:c3:e2:11:b4:70:43:25:b0:7e:cc:e1:
4b:79:2e:53:9c:9c:bb:8e:d8:bc:01:f9:2c:1b:51:3d:60:08:
bf:3e:1a:45:da:7d:18:4d:ee:ca:52:bf:ac:2d:90:20:95:3c:
9d:7c:9c:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypDx5KmQbaVMsAaqB9zNFhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZTBiMzhjNTliZDQyYjJiMDdlMmFhZmIyNmQ5ZjU1YmFi
MzgxN2EwHhcNMjYwMzAxMTEwMTA2WhcNMjYwMzAyMTEwMTA2WjAzMTEwLwYDVQQD
Eyg2NmJiNjljZTY3ZDUyZmI3MjQxNTk2ZjdiMDVhZTAwN2E3NDE1ZDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMNi+86XNkFb/5j9QSXhviAs2emK
lyQDhvNgSlHs1is505zZV7oFJGKOq/OpunL/7c1vZiVJ4fRuYBKLSC6WDnhWCwF3
Et6BZp3VswKtBLcDrqkUJjL2wCqiCCPnsZzZEcNyEzDqUBaw1fikYwTjdWwXibIG
9mui1C3z3bVaama86I4EzLcdBCMqH07kHmmVUgAQZOkAy8O0yrEVowVDXbTCEt4Y
GX3bUtam/cu6GE28yOYKbpO8NQazBSL1O+q6hnvKxYtCxpvwV5PxoLsKmRVqiydE
7KzPArsLSY/AsCs72vnDyOy5AQg0MJCua9NhFo/wkl2N9ixFRoCnQhMoywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGa7ac5n1S+3JBWW97Ba4AenQV14MB8GA1UdIwQY
MBaAFMTgs4xZvUKysH4qr7Jtn1W6s4F6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wYzc1NmMtNGNmMS00NzliLTk3NGQt
YjIzMmQ3ZGFmY2FjLzEveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wYzc1NmMtNGNmMS00NzliLTk3NGQtYjIzMmQ3ZGFmY2Fj
LzEveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0V9zzaM
219rnTdIJh+TJNGDZPm7QuuxpNWovL3sKzpuqbNn7drCsHfW5MwN1k4vCXAikRX8
6TH+C7Yp4zy72OPvUHcFaKdUlG8+m7LfobfRyGhZtCKHKCSywjDxpHp4wSCt2vPK
rxHtoQXTsLvni02gUuqYUrL/WNJLqsgM++yenkOPskW4LVopWJkGJjYXBZJcFZPu
KHme1pYHq6J+nIxqenIGS0lduWiwSURbt34Kb4DsvkLewnvCpD86CvueICGqlz3W
bi6M6bIn4cPiEbRwQyWwfszhS3kuU5ycu47YvAH5LBtRPWAIvz4aRdp9GE3uylK/
rC2QIJU8nXyctg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:47:52 2026 by rpki-client