Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier: aziwSSvOXn36F8Y8KPl4TpCUmi6dR0/IeE3M0pnDMPo=
Subject key identifier: EC:71:A5:2E:5D:98:C0:39:30:DD:72:A2:47:C9:30:8C:E5:12:0B:2B
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 019F90C7F8C29246EFEDFDA8F133BA95E4DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number: 19CB
Signing time: Thu 23 Jul 2026 21:00:52 +0000
Manifest this update: Thu 23 Jul 2026 21:00:52 +0000
Manifest next update: Fri 24 Jul 2026 21:00:52 +0000
Files and hashes: 1: 8iFh47rsQY1Vo7NxaCj0gAXzGQw.roa (hash: dQKNiBDwo55CqXHW6Wzk5DmXJyAe2csEyBTMcfc3KRs=)
2: HcOXGHBaCEmGLqDWw-IGRcrt9TM.roa (hash: Y2NgeeXh3CWzQ6WzeXvUZMOxEVVMsrRGPKbZGQKApUE=)
3: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: qDu5W+t2343ZICEr0MsRxZN7weUxyMfqHBsrR5Ge9Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:f8:c2:92:46:ef:ed:fd:a8:f1:33:ba:95:e4:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Jul 23 21:00:52 2026 GMT
Not After : Jul 24 21:00:52 2026 GMT
Subject: CN=ec71a52e5d98c03930dd72a247c9308ce5120b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:90:a0:6b:a1:24:5e:6c:4d:89:7a:83:6c:
e3:54:c3:e2:e0:37:fc:b1:17:c9:dc:b4:12:e0:10:
0c:47:ca:e5:38:67:08:fe:0a:13:1f:8f:94:42:27:
d1:fb:c5:6d:30:23:74:e2:39:20:df:f3:24:e1:85:
c4:4e:bb:0e:1e:49:f2:ba:e0:9f:5f:a3:75:da:00:
53:13:fe:7a:34:ed:e1:56:98:16:f6:e1:1a:3b:14:
78:27:1f:d1:b7:19:aa:df:83:98:70:91:1b:8f:f5:
25:1f:45:6a:91:bf:36:8e:62:2a:3a:7c:74:87:51:
45:49:17:a3:72:39:fe:d5:ba:a6:75:5b:4d:9a:75:
63:ea:d7:8a:15:5f:7b:44:f2:06:22:7b:3b:d2:7a:
ae:7e:b6:08:05:f2:ce:2b:71:96:3e:56:71:ab:ac:
12:6b:68:56:86:e8:84:29:9e:6a:42:a1:77:d1:b9:
b0:d5:cf:e3:0e:1e:7a:f0:65:10:c9:d9:ab:65:e0:
28:66:76:ee:a8:e6:9e:25:17:78:39:3b:2e:7f:0f:
82:59:b4:1e:a3:c9:67:27:36:9a:3a:bc:19:f4:63:
23:83:37:64:24:57:6b:9c:7c:b5:aa:e5:41:e9:5e:
1a:cb:b8:81:5e:bb:eb:c9:ac:a3:7f:9e:4f:26:77:
46:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:71:A5:2E:5D:98:C0:39:30:DD:72:A2:47:C9:30:8C:E5:12:0B:2B
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:9f:30:99:75:57:5d:f9:47:88:2b:e2:a0:18:54:eb:54:33:
c3:30:5d:df:81:35:a9:f9:89:f8:ef:4e:10:61:97:44:0d:58:
b1:c4:be:9f:e8:85:a9:1f:69:78:a3:7a:8c:01:36:c6:4a:6b:
e4:6f:37:40:2d:d6:f2:56:86:ef:d9:4b:6d:5a:1f:69:a5:ec:
d6:c9:aa:06:81:87:5c:af:c1:29:33:0b:af:fe:8e:24:ca:01:
7e:76:69:4e:3d:37:38:dc:52:e4:d8:91:aa:86:97:d5:86:38:
0f:97:90:fc:1d:cc:9d:be:ff:0d:41:de:7d:38:4b:ac:17:41:
94:05:6a:06:8f:dd:cc:f5:52:81:39:e6:e8:23:37:61:ae:09:
f4:75:d4:71:0a:8e:32:bc:e8:48:0c:a7:58:6d:92:82:a0:ca:
c8:fa:54:db:f4:29:09:a9:8c:23:ab:f3:e7:03:55:38:e1:f0:
2e:46:b1:73:0d:f6:bb:b4:76:0d:5f:d8:f0:9e:54:e6:9e:0f:
9a:12:0e:9c:d7:25:8b:20:f0:0e:32:2d:5e:e1:9b:bc:17:e1:
9a:12:8d:5e:f2:0b:b8:ca:41:09:cc:6b:68:cd:8e:2a:b9:14:
c0:74:11:d3:74:e0:71:80:5e:d5:2b:6d:8b:5d:62:06:f7:ec:
08:6e:a8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:00:51 2026 by rpki-client