Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier: +aBhbKh2JIIyk5vwjUQX5TVsPHLKiDs9yuYgMmvRoxE=
Subject key identifier: 0C:84:91:D9:8D:C8:2D:0E:F6:DC:E7:7C:2B:5C:7C:72:28:D3:39:9D
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 01A1DDCBA03900C9A3B9050DFB3E7084815C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number: 1AFC
Signing time: Sun 15 Nov 2026 06:01:11 +0000
Manifest this update: Sun 15 Nov 2026 06:01:11 +0000
Manifest next update: Mon 16 Nov 2026 06:01:11 +0000
Files and hashes: 1: 8iFh47rsQY1Vo7NxaCj0gAXzGQw.roa (hash: dQKNiBDwo55CqXHW6Wzk5DmXJyAe2csEyBTMcfc3KRs=)
2: HcOXGHBaCEmGLqDWw-IGRcrt9TM.roa (hash: Y2NgeeXh3CWzQ6WzeXvUZMOxEVVMsrRGPKbZGQKApUE=)
3: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: KWHt5AS1TkHwnysefoZ5yr7HFqDimcxTi+xWQkQqgV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:a0:39:00:c9:a3:b9:05:0d:fb:3e:70:84:81:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Nov 15 06:01:11 2026 GMT
Not After : Nov 16 06:01:11 2026 GMT
Subject: CN=0c8491d98dc82d0ef6dce77c2b5c7c7228d3399d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bc:17:e8:12:67:53:bd:13:b7:12:34:ce:f1:
55:45:34:93:a9:9e:d6:f8:27:23:6a:e5:7a:73:c6:
a9:f1:86:0c:68:fa:a4:da:8d:d9:6b:e0:1a:47:c7:
4f:20:a0:c4:32:8c:f2:8a:b1:86:15:b4:49:26:c3:
76:1e:c3:67:35:ac:be:d5:a1:4b:39:bb:fe:36:f9:
69:fd:48:4d:3c:8c:20:76:13:3a:d1:ee:44:45:0c:
fd:01:09:95:36:54:b6:6a:0d:33:8e:8d:90:2e:2f:
47:fa:11:b5:93:9d:c7:f2:c1:44:53:0f:4f:9a:24:
32:53:32:91:47:d0:d0:d5:f0:93:c6:16:d4:2e:e0:
d2:6c:d7:d8:19:c7:8c:2d:9b:ea:bd:7b:8f:4b:25:
9c:be:30:51:54:f0:2f:7c:31:18:c5:3f:42:48:58:
db:ba:5a:17:5c:b9:c0:ea:66:1f:00:65:6c:11:d5:
cd:c5:81:49:53:73:fe:a1:dc:55:69:a4:93:08:0f:
ab:a9:c1:d0:c1:2a:c8:da:ff:29:d2:fb:ac:17:a3:
b3:18:b4:23:5a:f9:b9:0d:2f:df:e3:aa:fa:71:96:
a1:07:13:59:33:c0:ed:9b:a6:d6:89:50:1b:d8:99:
3d:b6:b4:b9:0f:14:3e:b4:56:4b:da:78:3c:87:d7:
fd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:84:91:D9:8D:C8:2D:0E:F6:DC:E7:7C:2B:5C:7C:72:28:D3:39:9D
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ab:e8:27:f7:73:3b:04:95:0f:ab:5b:e2:13:aa:da:12:5f:
a0:9a:46:04:99:b4:1b:de:ad:4d:b7:f1:7d:ca:27:4c:63:95:
62:ab:ed:32:32:8b:a6:37:0a:46:4b:14:c9:24:ec:dd:b5:bd:
a8:5d:a0:56:15:11:09:da:fd:7e:09:2f:29:97:fe:2d:0c:88:
1b:45:cd:63:e4:70:ef:b4:df:09:a3:96:a9:63:24:64:ef:23:
c6:b1:6a:f9:2b:90:07:f6:d3:a2:9c:cf:9a:fd:cb:4e:82:7d:
5b:29:d4:5d:e2:25:5b:fe:3c:25:bd:95:d5:d5:29:0f:29:03:
88:95:f5:01:35:4a:26:0c:cc:b4:1e:88:41:77:09:37:bf:42:
f9:f1:63:a9:c2:ef:73:cb:ca:21:7f:68:0f:57:cb:1f:af:05:
df:56:4e:c3:0a:60:40:27:eb:ca:c7:da:b6:27:d1:dc:9d:b1:
b5:ed:71:e3:f9:dc:14:e9:a0:a5:7d:0b:b6:21:99:7d:5a:e1:
0c:44:1b:d8:33:5d:37:09:b4:90:e3:c7:89:1e:ae:88:35:b2:
6d:8e:b6:52:45:3e:9b:94:73:46:8b:7b:ad:f8:b2:8f:e3:c5:
ef:c1:26:6e:93:d7:f8:40:a1:47:fd:26:70:f0:9c:95:b6:e0:
88:d4:59:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:21:35 2026 by rpki-client