Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier: p9dTZ1fA68/Kla2o1yGloWx0KxCcsQTcKRjgW7rbwXE=
Subject key identifier: 4A:94:25:D0:6C:2A:F6:BF:CE:FA:0F:E5:0A:C3:B2:7C:D8:A7:FB:9C
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 019E1DFE734112D01F8AF924AE76CDE57CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number: 190B
Signing time: Tue 12 May 2026 21:01:15 +0000
Manifest this update: Tue 12 May 2026 21:01:15 +0000
Manifest next update: Wed 13 May 2026 21:01:15 +0000
Files and hashes: 1: 8iFh47rsQY1Vo7NxaCj0gAXzGQw.roa (hash: dQKNiBDwo55CqXHW6Wzk5DmXJyAe2csEyBTMcfc3KRs=)
2: HcOXGHBaCEmGLqDWw-IGRcrt9TM.roa (hash: Y2NgeeXh3CWzQ6WzeXvUZMOxEVVMsrRGPKbZGQKApUE=)
3: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: +AwMzX0sOGPsG73hXzcv8V3Q3qpwTNmmbU8LVJ2a1Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:73:41:12:d0:1f:8a:f9:24:ae:76:cd:e5:7c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: May 12 21:01:15 2026 GMT
Not After : May 13 21:01:15 2026 GMT
Subject: CN=4a9425d06c2af6bfcefa0fe50ac3b27cd8a7fb9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:07:9f:5a:fb:16:3e:73:87:28:b6:6e:5d:5a:
01:1c:6a:a4:ba:21:76:51:c7:44:ff:0d:1e:30:55:
b8:37:f6:a0:83:51:33:ba:25:27:bb:02:26:61:28:
f4:86:01:04:50:6b:c0:99:21:c8:0f:bf:8c:5b:b1:
da:7b:27:9f:45:03:59:4c:4c:56:f0:09:c8:7e:95:
1c:27:0b:bf:56:71:02:08:cc:9a:7e:f0:69:0d:a6:
87:45:f1:eb:9a:06:2a:04:cf:6c:ed:54:e8:87:c4:
06:cb:37:e2:19:8d:7d:e6:41:2e:f9:32:c6:09:b9:
9d:05:b9:26:96:20:34:7b:9b:77:2a:af:77:7f:24:
3e:ca:f4:2f:5a:37:cd:b6:d2:e4:94:09:db:a8:87:
ca:b4:be:af:72:2e:da:33:e4:06:a1:18:49:82:d4:
67:44:38:ed:38:1b:60:61:c0:54:77:f5:e0:fd:5d:
d4:7e:76:05:f9:df:d2:c2:21:8c:6f:db:77:c4:88:
73:8c:4e:49:c2:fc:47:30:a4:cb:e2:32:41:1d:63:
8f:4d:43:79:95:8e:2c:1b:22:4b:89:14:ab:54:98:
73:ac:de:d9:49:e9:61:f1:3e:36:d1:72:8e:82:5d:
0f:32:95:82:0a:5a:c3:be:1b:45:a1:cb:1c:19:47:
e6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:94:25:D0:6C:2A:F6:BF:CE:FA:0F:E5:0A:C3:B2:7C:D8:A7:FB:9C
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e1:ca:bc:93:23:a0:98:7a:4e:ef:86:db:cd:13:27:ed:9f:
b8:e0:5b:65:36:43:db:1d:b4:f3:5f:d0:71:72:db:2b:73:fb:
70:46:3c:29:3d:b6:b1:81:eb:5c:3b:f4:71:18:b9:23:33:f4:
a6:79:c5:4a:f8:f3:8f:b5:f4:5a:f3:22:3c:54:b7:dc:77:24:
9e:e3:2a:e5:91:62:4f:fa:71:05:4f:fa:d5:1a:fc:77:ac:03:
ba:c5:2e:a1:b1:77:13:27:37:7d:b5:ac:a2:2f:81:07:d7:23:
49:2b:71:ca:76:09:dd:7a:7d:fd:9d:b2:6d:0d:b1:e6:31:72:
4a:59:58:34:8b:25:16:33:ba:7e:aa:24:ba:3d:4a:48:ec:c1:
25:d1:00:26:bf:0a:d2:da:0a:4f:d5:c1:e3:b0:91:ad:06:fe:
bc:1b:f0:fa:e4:84:cf:8c:0e:e8:65:6a:f6:b6:6d:47:c8:90:
e1:1d:ed:c6:1b:58:70:37:62:39:e2:45:4d:59:c0:6a:c4:b9:
28:91:20:c1:fe:cb:ca:74:fe:b1:c3:cb:3d:26:3f:70:17:62:
88:5e:02:72:7b:29:f7:01:eb:2b:96:c9:b2:4e:21:91:4e:dc:
44:1a:01:5b:04:cf:22:0c:d6:1a:ff:91:65:06:0a:fb:70:43:
e6:f7:bc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:24 2026 by rpki-client