Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier: ayhlnSXotgoilJ+5CBI/gbP2gGv4W3Wen6vuVBP7zEM=
Subject key identifier: BB:67:74:33:C3:E9:FC:28:94:41:9E:16:79:BD:B7:90:07:3C:89:09
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 019D2B171B9F3F36C816A2746285CFEEE43C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 17:00:27 +0000
Manifest this update: Thu 26 Mar 2026 17:00:27 +0000
Manifest next update: Fri 27 Mar 2026 17:00:27 +0000
Files and hashes: 1: HcOXGHBaCEmGLqDWw-IGRcrt9TM.roa (hash: Y2NgeeXh3CWzQ6WzeXvUZMOxEVVMsrRGPKbZGQKApUE=)
2: _5yeP8Eb2jKe-Xeqhcc0hIAm4-Q.roa (hash: Yn3HgARWmI7gwy/zWx3yTkjpoO+0RdnX9tXAUL57rNM=)
3: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: eCw3Mv3KlcxhPefELj89gKSiiE6/gJAzDOUk+4VkBcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:1b:9f:3f:36:c8:16:a2:74:62:85:cf:ee:e4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Mar 26 17:00:27 2026 GMT
Not After : Mar 27 17:00:27 2026 GMT
Subject: CN=bb677433c3e9fc2894419e1679bdb790073c8909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a6:22:90:6a:81:a8:88:36:aa:65:3a:4f:9d:
4c:7e:a9:11:59:d5:c2:2e:f4:97:2d:10:31:d0:30:
b2:fe:db:d8:12:bd:af:c4:bf:d6:5b:c2:f5:7b:5e:
3e:a5:88:fc:db:4b:b6:2d:a4:35:36:21:66:5d:fb:
7d:1e:6c:ab:de:6e:eb:07:31:a1:4f:4b:bf:84:1e:
db:9d:b2:81:df:bc:34:4f:07:62:05:c5:62:17:94:
85:52:54:59:49:d5:4f:70:af:ff:f0:50:37:4b:9b:
6f:98:fe:2c:11:67:b0:8d:de:ea:00:89:39:a9:70:
f7:03:42:d6:0a:9f:f1:de:8c:fe:7f:3f:ca:68:91:
1b:ce:bd:29:a4:5c:f7:35:46:5a:5e:30:8d:6c:dd:
28:9b:11:bd:46:6d:eb:7f:e1:d9:ee:c0:8e:52:2a:
af:aa:6b:7c:8b:89:95:e4:10:d1:bc:61:a8:36:a0:
8d:d7:6d:27:9e:44:67:62:bc:62:20:6c:70:0a:4e:
ea:a2:7e:2c:52:c3:c8:f7:4b:10:0c:15:ff:c1:a5:
f4:36:a7:f9:a6:8d:92:0b:01:cc:7b:ee:1c:f8:bd:
1a:19:a8:63:00:d1:9f:f7:a2:b1:1a:23:67:71:2d:
a2:e1:83:74:3b:c1:88:26:68:2e:5f:0e:ea:3d:d6:
14:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:67:74:33:C3:E9:FC:28:94:41:9E:16:79:BD:B7:90:07:3C:89:09
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:cc:32:74:4d:22:b9:60:50:4b:01:3e:7a:53:34:44:f9:e9:
67:ef:8a:61:ee:37:d3:bd:c5:b0:9f:a1:17:25:44:9a:dd:91:
8c:b5:34:71:4d:b1:bb:34:a0:3c:b2:1d:13:5e:c1:f5:d7:25:
d8:7b:f1:68:0d:31:58:fb:14:a0:be:af:f2:c4:43:29:e3:29:
c4:5d:65:6d:a6:f4:0a:f0:7f:7d:cd:cd:da:bc:dd:13:7b:cf:
c8:5f:42:76:29:de:fd:f3:52:0c:c7:70:59:e8:f3:4c:e7:7f:
ca:a1:5c:28:82:a3:92:1a:b4:18:09:88:a9:c6:73:2b:b7:4f:
54:2b:8f:66:af:60:18:60:08:bd:ee:76:b4:02:35:98:05:51:
70:94:43:49:52:b8:ef:26:67:97:c3:57:ae:3c:41:de:5c:40:
bb:e5:06:c4:96:d0:92:d1:a3:29:f3:7c:7f:98:f0:46:02:09:
ba:f8:8f:1d:67:24:38:1a:ef:00:c3:d3:a1:a5:d6:ca:24:2c:
47:2f:da:d7:2b:9c:2b:4b:df:1f:d2:5e:5c:7c:7b:6b:98:27:
67:02:e1:ec:b1:c0:d7:5c:67:21:a2:02:50:1e:ea:3a:9a:d8:
9c:7a:91:c6:90:b7:e5:1e:39:6c:a2:98:36:0c:40:09:ae:ee:
77:d6:90:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rFxufPzbIFqJ0YoXP7uQ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OGVjOWM3ZjFlY2MyN2NiMmVjNzEzYzI3NjRhMDIxNGZj
ZTc4MjgwHhcNMjYwMzI2MTcwMDI3WhcNMjYwMzI3MTcwMDI3WjAzMTEwLwYDVQQD
EyhiYjY3NzQzM2MzZTlmYzI4OTQ0MTllMTY3OWJkYjc5MDA3M2M4OTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KYikGqBqIg2qmU6T51MfqkRWdXC
LvSXLRAx0DCy/tvYEr2vxL/WW8L1e14+pYj820u2LaQ1NiFmXft9Hmyr3m7rBzGh
T0u/hB7bnbKB37w0TwdiBcViF5SFUlRZSdVPcK//8FA3S5tvmP4sEWewjd7qAIk5
qXD3A0LWCp/x3oz+fz/KaJEbzr0ppFz3NUZaXjCNbN0omxG9Rm3rf+HZ7sCOUiqv
qmt8i4mV5BDRvGGoNqCN120nnkRnYrxiIGxwCk7qon4sUsPI90sQDBX/waX0Nqf5
po2SCwHMe+4c+L0aGahjANGf96KxGiNncS2i4YN0O8GIJmguXw7qPdYUswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtndDPD6fwolEGeFnm9t5AHPIkJMB8GA1UdIwQY
MBaAFMaOycfx7MJ8suxxPCdkoCFPzngoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kNzRjOWUtMDRmMC00ZTYzLWFmMzAt
ODYzMmVlOTQxNDViLzEveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kNzRjOWUtMDRmMC00ZTYzLWFmMzAtODYzMmVlOTQxNDVi
LzEveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMwydE0i
uWBQSwE+elM0RPnpZ++KYe43073FsJ+hFyVEmt2RjLU0cU2xuzSgPLIdE17B9dcl
2HvxaA0xWPsUoL6v8sRDKeMpxF1lbab0CvB/fc3N2rzdE3vPyF9Cdine/fNSDMdw
WejzTOd/yqFcKIKjkhq0GAmIqcZzK7dPVCuPZq9gGGAIve52tAI1mAVRcJRDSVK4
7yZnl8NXrjxB3lxAu+UGxJbQktGjKfN8f5jwRgIJuviPHWckOBrvAMPToaXWyiQs
Ry/a1yucK0vfH9JeXHx7a5gnZwLh7LHA11xnIaICUB7qOprYnHqRxpC35R45bKKY
NgxACa7ud9aQQg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:19 2026 by rpki-client