Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier: USVjQLOykX+TGpqZoItCnqviJIZ3brrO8/Cxg5B75yo=
Subject key identifier: A2:33:5D:51:75:45:FD:24:6F:06:8F:DF:FC:56:31:86:DB:DB:E7:76
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 019DA2D35D7E53E9025FC0DF9E8C09663EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number: 18CA
Signing time: Sat 18 Apr 2026 23:00:54 +0000
Manifest this update: Sat 18 Apr 2026 23:00:54 +0000
Manifest next update: Sun 19 Apr 2026 23:00:54 +0000
Files and hashes: 1: HcOXGHBaCEmGLqDWw-IGRcrt9TM.roa (hash: Y2NgeeXh3CWzQ6WzeXvUZMOxEVVMsrRGPKbZGQKApUE=)
2: _5yeP8Eb2jKe-Xeqhcc0hIAm4-Q.roa (hash: Yn3HgARWmI7gwy/zWx3yTkjpoO+0RdnX9tXAUL57rNM=)
3: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: eEvnO34a5G9UMLj72ez4oDN1RY0f50p0pt3UO9TYxyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:5d:7e:53:e9:02:5f:c0:df:9e:8c:09:66:3e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Apr 18 23:00:54 2026 GMT
Not After : Apr 19 23:00:54 2026 GMT
Subject: CN=a2335d517545fd246f068fdffc563186dbdbe776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:f2:8b:88:e4:67:3f:f3:58:31:3d:c9:46:
7c:1d:97:2a:23:fe:e1:08:f9:58:91:cf:e1:f6:47:
1a:b5:10:c3:3a:9f:fe:36:4c:80:46:63:1a:8b:cb:
f6:52:22:81:f0:87:f7:3e:8a:f7:47:73:ae:36:90:
0a:74:f9:82:e8:13:77:e2:72:48:1e:bf:f8:25:a8:
f2:ad:d9:e8:36:9b:7d:00:74:35:72:10:1e:b2:b4:
8c:58:69:28:bc:50:36:b2:6b:f3:f7:c2:1d:40:00:
f4:43:46:ab:33:ea:ac:95:8f:e8:be:e7:e6:83:c9:
1f:14:8c:3e:70:89:8e:f6:4a:78:de:6b:c5:52:f9:
a3:33:63:cb:37:8e:d8:b1:1a:e8:ba:8d:f5:d4:3f:
67:b7:36:20:69:0c:34:69:b1:e7:c6:9d:d4:83:d6:
f3:9b:83:8f:be:cc:9f:de:b5:46:73:0c:2b:b0:29:
7c:d2:a5:45:00:a5:99:33:0f:dc:29:e9:77:57:34:
ec:75:f7:5c:32:82:5d:61:53:cf:fa:2c:b5:9e:c5:
70:25:a3:f3:51:0e:76:81:42:3c:b0:35:80:97:66:
71:6d:89:da:de:1c:b1:b5:fb:1a:3f:41:e7:4b:17:
6e:c8:2b:3d:fb:21:c5:80:81:24:3f:b5:07:43:42:
00:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:33:5D:51:75:45:FD:24:6F:06:8F:DF:FC:56:31:86:DB:DB:E7:76
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:50:b8:71:c1:7f:fe:aa:a1:13:ce:17:66:58:69:81:9a:e2:
1d:a3:71:b9:15:69:06:6b:4d:db:54:fb:e4:ad:59:c0:01:c3:
20:a7:40:fd:fe:22:dd:a8:f6:ed:2c:7a:0c:32:59:78:47:2f:
c5:c0:77:1a:db:74:6b:56:47:5d:4d:11:2f:60:39:67:8c:2e:
58:53:25:a7:c1:67:88:c7:ca:e5:49:95:d2:0f:1b:47:2f:b4:
8e:02:c8:ca:fe:e9:5e:c3:10:50:44:a6:8c:c9:4c:5d:29:23:
ff:0f:8c:ca:b4:a2:ff:88:48:ec:a2:37:2a:19:7a:00:da:b6:
c9:14:c2:c0:9a:09:8e:ea:59:27:89:10:8c:61:d7:bb:dc:e8:
f4:ea:04:43:0f:d5:9e:ee:3e:4a:56:77:4f:4b:0a:9a:25:05:
e5:40:17:36:8c:22:33:3c:d2:6b:46:77:ed:e1:07:57:3a:5e:
ee:d5:df:bb:20:1f:58:1e:6c:d7:80:60:ed:ce:75:58:0f:52:
f4:a5:77:2a:c2:a2:b4:51:e4:83:b3:fb:91:e6:12:18:0f:44:
3d:08:b7:41:36:e3:55:64:8d:d7:23:d5:8e:f6:ea:9a:b0:f9:
d5:01:a9:96:2a:54:f8:c6:24:cf:fd:81:18:ef:7c:ea:40:8e:
e0:06:13:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:32 2026 by rpki-client