Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier: nFUWY8SH0ulfbtGEoY0vArv0jSpBnI/opxuVHxuYpHc=
Subject key identifier: 45:EE:22:39:E1:2B:09:2B:F7:E7:6F:3D:B1:CE:40:F5:81:3A:37:7E
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 019DA4C1B877A20625399E88EF1976FEC2DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number: 18CB
Signing time: Sun 19 Apr 2026 08:00:52 +0000
Manifest this update: Sun 19 Apr 2026 08:00:52 +0000
Manifest next update: Mon 20 Apr 2026 08:00:52 +0000
Files and hashes: 1: HcOXGHBaCEmGLqDWw-IGRcrt9TM.roa (hash: Y2NgeeXh3CWzQ6WzeXvUZMOxEVVMsrRGPKbZGQKApUE=)
2: _5yeP8Eb2jKe-Xeqhcc0hIAm4-Q.roa (hash: Yn3HgARWmI7gwy/zWx3yTkjpoO+0RdnX9tXAUL57rNM=)
3: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: l5a2wE2+spYO9/TNzaMcljFTHJH94IcAbhS3vfhBb98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:b8:77:a2:06:25:39:9e:88:ef:19:76:fe:c2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Apr 19 08:00:52 2026 GMT
Not After : Apr 20 08:00:52 2026 GMT
Subject: CN=45ee2239e12b092bf7e76f3db1ce40f5813a377e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:36:2b:b4:78:73:11:ad:a5:d6:cd:f8:be:
d6:fe:d0:04:85:82:2a:f7:37:fa:e7:66:7d:ef:71:
d8:4d:69:51:41:73:cf:06:d5:d7:1c:ee:57:ac:c3:
01:5a:f7:20:11:2f:d4:31:2f:49:b8:58:a7:cd:db:
c0:66:3b:f9:6c:4a:36:4c:9e:1a:52:3a:99:37:2c:
4e:0a:23:e4:62:f2:55:2f:96:f7:a0:fe:21:fd:a5:
c4:56:89:b2:f0:b8:9f:32:42:dc:9b:40:52:ab:a8:
71:e1:44:83:57:53:83:b6:e7:04:7f:26:4c:fb:bd:
c8:48:c6:53:1c:36:ba:15:3c:10:a5:99:34:d6:28:
3e:79:17:6f:d4:c0:4f:f9:5d:c0:a8:15:e6:60:47:
c9:ca:aa:bd:58:b0:dd:58:5d:c0:ab:d3:26:af:99:
c5:52:3a:50:a2:08:fb:27:e0:40:53:e5:d6:04:6c:
57:84:97:7e:48:ad:4a:32:d7:8f:2e:be:35:a0:34:
a4:dd:b9:a8:bf:40:08:21:6c:d1:71:16:7e:2f:de:
fb:90:d3:e5:b1:b1:b0:b0:04:4a:cc:9c:e8:b0:ea:
5e:ec:73:6c:a0:39:73:bc:f5:01:78:c8:4e:61:a1:
7e:b3:4c:8b:b2:fc:4b:ba:00:ad:7c:c6:9d:5e:5c:
a4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EE:22:39:E1:2B:09:2B:F7:E7:6F:3D:B1:CE:40:F5:81:3A:37:7E
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ae:94:ec:56:0d:b3:79:6a:3e:95:3f:31:50:01:a0:e1:10:
de:01:3b:29:3d:65:b2:30:8e:d4:00:58:02:af:f8:d2:27:e7:
c0:57:91:49:04:52:64:8b:27:f1:86:22:ea:38:c6:3d:70:96:
45:a9:59:2b:bd:e8:c8:e6:eb:69:6e:1e:dc:97:ef:0a:3b:0b:
8d:c7:aa:87:af:01:49:14:c5:cf:6c:7a:68:ea:47:c4:48:89:
3b:cf:c3:87:c0:e0:ca:28:87:ac:91:f1:e4:f0:bb:01:ef:fe:
c0:17:62:8f:67:58:72:de:2c:94:c4:36:d6:c8:ef:e9:27:71:
35:74:4b:71:00:32:2a:fe:7d:9c:3d:50:5d:5c:f5:7e:ec:01:
67:ea:93:f0:48:a6:d2:87:91:a9:c5:5e:27:ab:14:ee:2d:ea:
28:4f:aa:e4:88:21:40:56:71:56:4c:0a:23:1e:f5:e0:0f:88:
db:d6:1e:a2:9e:cb:c5:62:92:a1:07:63:37:2f:7f:36:10:61:
4f:92:4a:b9:1a:d6:ef:4d:57:09:db:cd:64:34:8b:6c:8d:4a:
53:64:8d:90:a4:36:57:1c:57:4c:22:56:e2:df:0b:1b:03:38:
de:ab:33:cd:b8:d9:44:c6:d3:11:ae:c6:e2:d2:9a:72:07:02:
63:da:3b:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kwbh3ogYlOZ6I7xl2/sLfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OGVjOWM3ZjFlY2MyN2NiMmVjNzEzYzI3NjRhMDIxNGZj
ZTc4MjgwHhcNMjYwNDE5MDgwMDUyWhcNMjYwNDIwMDgwMDUyWjAzMTEwLwYDVQQD
Eyg0NWVlMjIzOWUxMmIwOTJiZjdlNzZmM2RiMWNlNDBmNTgxM2EzNzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomg2K7R4cxGtpdbN+L7W/tAEhYIq
9zf652Z973HYTWlRQXPPBtXXHO5XrMMBWvcgES/UMS9JuFinzdvAZjv5bEo2TJ4a
UjqZNyxOCiPkYvJVL5b3oP4h/aXEVomy8LifMkLcm0BSq6hx4USDV1ODtucEfyZM
+73ISMZTHDa6FTwQpZk01ig+eRdv1MBP+V3AqBXmYEfJyqq9WLDdWF3Aq9Mmr5nF
UjpQogj7J+BAU+XWBGxXhJd+SK1KMtePLr41oDSk3bmov0AIIWzRcRZ+L977kNPl
sbGwsARKzJzosOpe7HNsoDlzvPUBeMhOYaF+s0yLsvxLugCtfMadXlykpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXuIjnhKwkr9+dvPbHOQPWBOjd+MB8GA1UdIwQY
MBaAFMaOycfx7MJ8suxxPCdkoCFPzngoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kNzRjOWUtMDRmMC00ZTYzLWFmMzAt
ODYzMmVlOTQxNDViLzEveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kNzRjOWUtMDRmMC00ZTYzLWFmMzAtODYzMmVlOTQxNDVi
LzEveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYK6U7FYN
s3lqPpU/MVABoOEQ3gE7KT1lsjCO1ABYAq/40ifnwFeRSQRSZIsn8YYi6jjGPXCW
RalZK73oyObraW4e3JfvCjsLjceqh68BSRTFz2x6aOpHxEiJO8/Dh8DgyiiHrJHx
5PC7Ae/+wBdij2dYct4slMQ21sjv6SdxNXRLcQAyKv59nD1QXVz1fuwBZ+qT8Eim
0oeRqcVeJ6sU7i3qKE+q5IghQFZxVkwKIx714A+I29Yeop7LxWKSoQdjNy9/NhBh
T5JKuRrW701XCdvNZDSLbI1KU2SNkKQ2VxxXTCJW4t8LGwM43qszzbjZRMbTEa7G
4tKacgcCY9o78w==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:17:29 2026 by rpki-client