Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier: 1mahl6dFq2NRPzKnC3ZxB1W2EdqAuPUMLt6LjSyyS/I=
Subject key identifier: 07:CF:A0:99:AD:36:0A:86:41:43:28:09:73:2E:A0:15:E1:E9:B3:DA
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 01A0D34AF6966E974CB2A9D000D10AC3EBD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number: 1A72
Signing time: Thu 24 Sep 2026 12:01:40 +0000
Manifest this update: Thu 24 Sep 2026 12:01:40 +0000
Manifest next update: Fri 25 Sep 2026 12:01:40 +0000
Files and hashes: 1: 8iFh47rsQY1Vo7NxaCj0gAXzGQw.roa (hash: dQKNiBDwo55CqXHW6Wzk5DmXJyAe2csEyBTMcfc3KRs=)
2: HcOXGHBaCEmGLqDWw-IGRcrt9TM.roa (hash: Y2NgeeXh3CWzQ6WzeXvUZMOxEVVMsrRGPKbZGQKApUE=)
3: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: rGk2Abmn77cm68ZymwcoXGgi9Dd2bLcyi1nSpPSCZG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:f6:96:6e:97:4c:b2:a9:d0:00:d1:0a:c3:eb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Sep 24 12:01:40 2026 GMT
Not After : Sep 25 12:01:40 2026 GMT
Subject: CN=07cfa099ad360a8641432809732ea015e1e9b3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:9e:25:39:74:bb:fe:dc:bb:d8:76:d8:21:
1f:ad:32:20:f6:65:64:8c:a3:fe:64:3b:47:49:09:
b7:c1:0f:95:22:50:8d:a9:d7:af:fa:9d:fe:b7:b8:
78:75:97:84:38:00:3a:ae:f1:55:0c:2c:3f:7e:5c:
b5:12:df:73:8b:11:86:6d:a7:5f:69:f2:5e:d8:6a:
3c:d2:22:31:4f:db:d0:dd:69:57:7f:61:88:9f:a9:
3d:06:01:2f:4d:14:08:71:f0:b2:f7:11:0e:ac:bb:
fa:a5:c9:c0:09:00:30:78:32:23:cb:f4:fe:e7:be:
c0:6d:ae:38:40:f7:fa:bd:f6:e0:1a:73:87:04:12:
46:57:af:62:93:32:c1:00:1d:2f:0f:c5:78:3a:d8:
9d:da:4c:b0:1f:6f:64:61:42:8a:3b:35:f7:ed:8c:
41:64:6e:68:da:57:a9:5b:19:01:0c:0c:0a:1c:49:
c7:b7:3e:aa:9c:16:60:79:b9:ad:49:bf:82:f9:2d:
38:59:d2:b5:91:72:11:1f:ed:26:39:41:f5:89:99:
36:4e:c4:bc:ca:99:95:53:7a:0d:00:ea:67:19:8c:
69:7d:89:95:e1:f4:8f:f3:3d:e4:b7:fc:22:40:24:
2f:db:5e:b2:45:de:f0:b1:6f:c4:6f:de:2d:44:e2:
c4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CF:A0:99:AD:36:0A:86:41:43:28:09:73:2E:A0:15:E1:E9:B3:DA
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e2:0d:58:1c:cd:85:37:ce:af:2c:6e:76:2c:80:bd:71:90:
57:49:65:5c:d4:de:24:a3:0a:df:ad:f8:a4:0f:37:13:eb:eb:
44:d7:87:3d:09:4c:bb:6a:cc:1f:18:40:ab:86:a7:86:10:ff:
97:99:7b:78:3b:2c:b3:63:8b:6f:0e:8b:1b:fc:0b:1e:ba:25:
9d:2d:e5:15:52:08:fb:78:ef:4c:f4:64:15:86:4e:84:c6:56:
ab:51:97:1c:27:21:34:c5:5c:9f:8a:de:cd:6f:b4:7a:14:85:
c1:f5:00:e7:41:36:e2:77:3a:e2:1e:80:cf:a9:9c:01:ae:41:
88:ae:47:b8:c5:93:90:5d:02:45:1b:52:d3:b5:d1:7c:3e:c8:
a0:04:70:4d:89:cc:97:f1:e0:3f:5b:5c:9a:67:95:06:1e:83:
57:4a:6c:34:e2:50:ac:54:67:6f:34:00:c1:c7:23:3a:39:16:
6f:d4:e5:33:e6:72:da:b1:28:0d:4f:d3:81:c4:ae:b1:25:53:
06:48:a8:56:bd:b4:ca:a3:12:96:6c:e2:d9:bd:ff:4d:5d:1e:
70:eb:62:9d:30:8a:6d:6a:4b:86:8a:00:6f:45:38:da:79:f3:
d6:a6:15:ed:06:bf:36:9c:78:82:10:46:19:29:b8:8f:40:cb:
ba:f0:1c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:22:54 2026 by rpki-client