Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier: vPJQhSJQr9E4b51/6dXiAwD2eU6YpLq3ftZruyvIb+U=
Subject key identifier: B7:6F:B7:FD:AD:9F:28:59:D1:87:AE:62:2F:FA:27:95:22:AA:28:DE
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 01A0DB045F24B31A74A4CA256F3BA5BA52CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number: 1A76
Signing time: Sat 26 Sep 2026 00:01:31 +0000
Manifest this update: Sat 26 Sep 2026 00:01:31 +0000
Manifest next update: Sun 27 Sep 2026 00:01:31 +0000
Files and hashes: 1: 8iFh47rsQY1Vo7NxaCj0gAXzGQw.roa (hash: dQKNiBDwo55CqXHW6Wzk5DmXJyAe2csEyBTMcfc3KRs=)
2: HcOXGHBaCEmGLqDWw-IGRcrt9TM.roa (hash: Y2NgeeXh3CWzQ6WzeXvUZMOxEVVMsrRGPKbZGQKApUE=)
3: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: VF5dxqVp1ypeeJhFlC5cSlgVY5leAoJV97IaqkRZnos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:5f:24:b3:1a:74:a4:ca:25:6f:3b:a5:ba:52:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Sep 26 00:01:31 2026 GMT
Not After : Sep 27 00:01:31 2026 GMT
Subject: CN=b76fb7fdad9f2859d187ae622ffa279522aa28de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:9e:08:e2:cd:7e:d8:6e:7b:00:78:36:31:
c7:74:2a:f6:3a:06:3b:1d:b9:ae:ba:ef:d2:8a:90:
18:79:a3:67:30:af:d0:91:d9:0c:23:4f:9a:dd:55:
10:bd:92:64:cc:46:52:57:f7:e3:a4:4f:a8:bd:67:
2f:49:6c:40:8e:cf:aa:24:b6:71:81:f0:f6:0c:e3:
34:be:01:2f:32:51:4e:ce:6b:c1:9d:29:a0:e1:e0:
b2:b5:5f:42:e0:67:b5:66:39:28:96:23:e3:ba:6b:
1a:2e:51:04:b7:cd:2b:08:82:64:dd:52:6e:70:21:
31:c4:34:a9:f8:3f:6f:47:1e:7c:ed:d9:ce:b5:fe:
fc:46:27:8f:ff:6d:5b:27:c0:8a:92:cb:82:88:d5:
ba:a4:5d:a8:27:35:ce:5c:ba:89:f0:47:ed:fe:06:
f0:8d:25:06:9c:e3:ce:d7:8c:d8:55:29:1b:73:9e:
7c:e9:07:a4:71:e0:b5:7d:cb:d4:f3:63:d6:91:2c:
77:cc:ed:80:0a:a5:9e:34:d5:7d:24:96:34:5b:db:
52:f8:2c:dc:75:8f:a4:b4:fc:18:69:96:74:23:30:
f3:24:69:3c:de:f1:d7:77:9f:48:b5:0b:68:9f:89:
e4:0d:10:03:5a:1d:40:8c:7c:16:01:41:22:82:62:
3d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6F:B7:FD:AD:9F:28:59:D1:87:AE:62:2F:FA:27:95:22:AA:28:DE
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2a:e8:40:31:da:60:0a:70:5e:cc:b2:43:ba:45:c2:5e:0e:
50:12:fc:39:a2:17:02:0f:63:d0:29:b0:8c:2e:8f:ef:d1:1d:
75:e6:fe:a5:4c:ab:c6:42:00:d9:d3:ec:6e:26:50:9b:11:4a:
9d:5d:19:37:fd:5d:0c:94:91:64:f5:d9:0d:64:c2:b9:23:97:
49:2b:16:bb:bb:03:f3:0c:2b:0c:9c:a8:4c:d5:2e:52:42:c8:
37:25:8a:2f:5c:1d:87:6d:9b:12:04:c0:c9:b8:46:26:fe:18:
14:e8:10:a0:d5:8e:f1:98:f9:34:54:be:c0:b9:19:23:39:ba:
30:af:bc:78:15:e3:45:6e:92:80:22:eb:59:41:de:ff:0a:2e:
43:00:ec:ce:b7:d1:12:7e:ab:00:ad:bf:73:2c:24:3b:1d:87:
70:e8:e9:8e:54:53:40:68:45:dc:ef:1e:0f:c9:77:f1:bb:85:
c7:a4:a3:16:44:8e:e4:60:20:23:c7:e9:0a:ae:18:14:b5:fc:
99:d6:0d:d6:da:36:3c:86:78:8c:b2:8f:25:c3:96:28:96:6d:
f9:f1:c5:d1:57:dc:a1:aa:d8:3e:bf:f7:0d:9f:fb:ba:5b:26:
1f:de:59:29:f1:e1:2c:4c:35:7b:ad:7b:ba:c9:84:4d:56:de:
d8:db:a7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:00:44 2026 by rpki-client