Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier: SOqKDA/dyQiOjyY28BSxe8ehB7ZBd5591JdKjg7Rhzw=
Subject key identifier: AF:27:18:23:55:4C:96:80:9B:B6:4A:8F:BB:CB:24:7C:C2:31:FA:76
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 019CABA2333F2648256C0583A4BBBBABB92E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 23:00:59 +0000
Manifest this update: Sun 01 Mar 2026 23:00:59 +0000
Manifest next update: Mon 02 Mar 2026 23:00:59 +0000
Files and hashes: 1: HcOXGHBaCEmGLqDWw-IGRcrt9TM.roa (hash: Y2NgeeXh3CWzQ6WzeXvUZMOxEVVMsrRGPKbZGQKApUE=)
2: _5yeP8Eb2jKe-Xeqhcc0hIAm4-Q.roa (hash: Yn3HgARWmI7gwy/zWx3yTkjpoO+0RdnX9tXAUL57rNM=)
3: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: nhcdMVamcIPJBDoboUUBaFgmjrVfaVC0Ti1YwUns+5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:33:3f:26:48:25:6c:05:83:a4:bb:bb:ab:b9:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Mar 1 23:00:59 2026 GMT
Not After : Mar 2 23:00:59 2026 GMT
Subject: CN=af271823554c96809bb64a8fbbcb247cc231fa76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:20:a5:c2:45:c6:f0:c0:17:24:02:6c:a9:5a:
01:1e:19:0b:c3:f6:5e:13:7a:48:ed:71:3e:dd:3b:
eb:52:ad:33:81:cf:d3:e2:26:19:d0:67:31:2d:0a:
d7:ec:98:a1:cf:3f:04:fa:92:e3:63:45:55:05:51:
89:4b:0b:4c:58:55:11:10:6e:85:b0:56:da:9a:fd:
db:61:0c:ac:4f:cd:2b:3b:c4:7f:4e:8f:f9:ef:b6:
45:2e:dd:21:85:71:77:b3:58:7f:12:70:b9:63:f3:
96:00:ee:a1:9f:8e:c7:e3:90:4b:5a:c4:08:e3:74:
c6:6d:99:03:b4:de:bf:be:e4:30:b7:47:55:80:97:
a2:64:18:a4:ab:be:8b:6f:df:4c:ed:2f:5c:8a:65:
11:a3:31:6a:e4:5b:b7:35:69:ac:af:58:80:36:3d:
60:57:ab:cf:59:06:87:71:28:13:84:84:81:fd:eb:
00:f9:82:65:21:d0:2a:1e:dd:53:f0:d9:ca:28:d0:
db:a7:dc:18:74:d6:89:bd:93:e8:94:51:0a:b6:33:
76:6f:84:51:36:c5:81:94:d9:a6:14:cb:39:a3:2e:
1b:51:33:9e:2a:4d:91:90:38:a2:17:61:e5:b1:c3:
f7:c4:6d:87:82:e6:6d:b8:a4:f6:36:e8:9f:b9:ff:
21:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:27:18:23:55:4C:96:80:9B:B6:4A:8F:BB:CB:24:7C:C2:31:FA:76
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a2:76:46:12:14:d2:9b:7b:90:42:5e:5c:34:56:3b:9a:cc:
5b:48:0c:69:c3:1f:4c:66:94:5e:b6:45:aa:78:6f:43:b4:a0:
fe:28:13:c0:a4:b7:b7:8d:b6:64:e8:3b:18:aa:0c:e8:5e:8d:
3f:16:1f:21:20:32:5c:e3:37:b1:53:41:28:76:47:e5:37:33:
40:7c:18:27:a8:98:fb:b1:55:b8:d6:ff:01:47:34:f1:c6:2a:
70:5e:bf:85:ad:ae:54:80:98:02:a6:8e:7c:e5:bc:49:30:df:
45:15:43:c1:1c:32:24:d0:b8:31:c4:59:c0:a2:e0:85:a6:c4:
e0:3f:ef:e1:4e:74:2c:bf:b4:78:b5:5c:d6:62:32:04:7d:ad:
2b:55:19:f3:2b:95:7c:9f:d7:ea:2c:85:f1:9f:0d:70:d0:78:
9d:2b:2a:07:08:f6:73:2c:31:cb:20:9d:56:9e:15:93:57:fa:
32:bc:2e:95:4d:00:c7:24:0b:e4:55:cd:75:23:cb:aa:0c:a1:
85:10:3a:05:da:1a:9e:45:db:7b:f6:cd:cb:09:28:67:6d:8a:
e8:2c:f1:34:50:37:fe:d6:01:91:5f:77:ff:aa:1f:9e:4d:85:
73:c8:13:48:93:87:b2:84:e9:0a:14:28:68:71:99:9a:bf:b9:
54:06:cf:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:48 2026 by rpki-client