Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier: cxOlrRWO27S8fenDLXRGpc8qWG4QFGP6NEk68Mrp/Ac=
Subject key identifier: 54:36:13:6A:7E:49:F8:9E:D1:CC:73:A4:55:72:0E:7C:42:49:1C:3B
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 019F92B5E75F3BAB298CDBA351DD3DDC3FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 06:00:22 +0000
Manifest this update: Fri 24 Jul 2026 06:00:22 +0000
Manifest next update: Sat 25 Jul 2026 06:00:22 +0000
Files and hashes: 1: 8iFh47rsQY1Vo7NxaCj0gAXzGQw.roa (hash: dQKNiBDwo55CqXHW6Wzk5DmXJyAe2csEyBTMcfc3KRs=)
2: HcOXGHBaCEmGLqDWw-IGRcrt9TM.roa (hash: Y2NgeeXh3CWzQ6WzeXvUZMOxEVVMsrRGPKbZGQKApUE=)
3: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: Np2EXdHLe7LZkVb/o4wgOT0HihWDqbkCJgvZSURFnbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:e7:5f:3b:ab:29:8c:db:a3:51:dd:3d:dc:3f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Jul 24 06:00:22 2026 GMT
Not After : Jul 25 06:00:22 2026 GMT
Subject: CN=5436136a7e49f89ed1cc73a455720e7c42491c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:30:a1:41:aa:dc:5d:09:0a:8d:36:9a:db:e9:
a9:5f:0d:26:15:34:9c:db:10:cd:6a:19:c5:8c:0e:
f2:37:b6:4b:98:0b:25:44:b6:c0:65:41:15:91:18:
34:f0:c4:ed:de:36:f2:45:da:69:46:c5:54:74:ed:
99:a1:75:a1:c0:4f:49:b6:f0:ec:1d:31:37:a6:8a:
30:ca:9c:ff:24:52:47:89:0f:81:9d:28:43:be:40:
07:e9:2f:4f:e8:d3:f6:d8:a6:08:57:83:11:ef:b4:
f8:3d:cc:af:9f:87:81:0f:04:04:3d:1a:06:27:a5:
e6:ef:c2:a5:04:a0:ae:c3:bf:de:8a:e8:29:88:4b:
ec:14:0f:61:ab:44:0b:0e:c6:22:7e:cb:3e:c6:4b:
f6:e0:0f:80:de:a7:04:20:a1:e1:05:b3:d3:e8:4c:
89:9e:7c:f9:2f:e4:16:0e:11:74:fb:63:e1:f4:64:
41:d3:17:74:b2:56:04:c0:c1:14:c5:1a:e7:bf:35:
d1:29:aa:27:fb:d8:f2:19:27:56:ab:2b:d5:c8:fe:
01:07:13:24:69:95:46:2b:7d:54:94:e6:fa:b0:6a:
fe:5c:bc:05:f4:09:a0:42:24:c2:95:29:52:63:bd:
d1:7b:21:2d:e0:a3:f8:a5:dc:e0:43:86:a5:68:92:
92:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:36:13:6A:7E:49:F8:9E:D1:CC:73:A4:55:72:0E:7C:42:49:1C:3B
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8a:51:e7:c1:7b:ce:27:2a:99:88:ab:6f:ab:82:6b:e9:f3:
e6:f4:60:df:9a:b2:b0:ef:30:c5:48:f4:83:45:d1:e4:c5:e0:
b4:42:40:99:84:60:e8:87:c3:fb:ee:40:43:bf:60:38:ed:5b:
7f:2d:36:29:e8:69:e6:0f:8a:e1:2f:2e:52:61:65:fc:e5:69:
67:53:b8:c7:56:95:ea:39:44:d0:85:c8:da:46:72:1a:af:c0:
4d:4d:bf:26:37:d0:6e:9a:3b:03:c3:5e:97:25:27:6d:76:2e:
9d:92:cd:5c:0d:b7:e5:cc:f9:ad:3f:d9:c9:e0:e9:91:94:42:
94:25:25:4d:ed:68:4e:fd:3b:22:d0:a8:7e:f3:8f:75:28:5f:
60:2d:b7:d0:0d:f4:32:3c:52:20:ce:ef:d3:b5:cf:9d:18:79:
bb:42:4e:ea:f0:b7:d6:f2:67:0a:c9:b0:70:b9:30:46:3b:4c:
54:b0:af:09:de:46:c8:bf:71:05:81:aa:9e:1d:05:ce:fe:ff:
c1:88:a4:43:0d:64:b0:06:46:c6:27:7a:65:43:d2:8a:2f:d6:
b7:e9:d6:22:09:ac:f4:1e:86:0b:f9:29:3c:f9:ae:0b:64:41:
d4:2d:9b:98:4a:09:5f:81:05:0c:18:ac:98:7f:c3:fd:8d:b7:
a2:cc:3d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:24 2026 by rpki-client