Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier: PNXEJq95MQfY33v56ga7dkomfMoaZPOuJmBNF9b+ysI=
Subject key identifier: 59:7B:2D:EE:86:A9:0E:6E:B4:08:FC:49:14:73:BE:64:DF:9A:8E:EF
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 019FABD15D36D673D35BCAD9D9A53E758590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number: 19D9
Signing time: Wed 29 Jul 2026 03:00:52 +0000
Manifest this update: Wed 29 Jul 2026 03:00:52 +0000
Manifest next update: Thu 30 Jul 2026 03:00:52 +0000
Files and hashes: 1: 8iFh47rsQY1Vo7NxaCj0gAXzGQw.roa (hash: dQKNiBDwo55CqXHW6Wzk5DmXJyAe2csEyBTMcfc3KRs=)
2: HcOXGHBaCEmGLqDWw-IGRcrt9TM.roa (hash: Y2NgeeXh3CWzQ6WzeXvUZMOxEVVMsrRGPKbZGQKApUE=)
3: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: oqM1aLbcwiHDcB8DfstY19KPkfBGJmLrMyyyd9wuffg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:5d:36:d6:73:d3:5b:ca:d9:d9:a5:3e:75:85:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Jul 29 03:00:52 2026 GMT
Not After : Jul 30 03:00:52 2026 GMT
Subject: CN=597b2dee86a90e6eb408fc491473be64df9a8eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:6b:94:f0:e1:7b:c6:21:de:f4:bc:ba:0f:
20:5b:59:cf:4b:9f:24:c0:3f:05:38:af:8e:c9:84:
7b:b6:65:17:ff:bc:86:79:c4:ac:fa:65:4b:0e:57:
d9:6e:2c:da:6a:88:a5:d2:71:1e:b3:b0:0c:88:45:
ca:5b:e1:33:38:b2:19:1a:37:5d:1a:35:98:51:7e:
78:df:5d:b1:7b:b3:8c:a0:89:06:0c:16:38:ea:42:
99:df:a5:40:ac:9b:91:bc:f4:ab:30:20:6b:1c:3c:
c0:c7:d8:5f:df:6d:3f:27:a9:61:db:8c:2e:9b:f5:
72:d9:24:72:00:83:e3:b9:fd:51:fb:1c:f5:d4:f4:
aa:75:17:61:5b:41:d7:4a:89:53:49:b2:0b:f1:5f:
66:28:f4:65:48:78:bc:a8:3a:d4:78:7b:4f:f7:dd:
dd:91:0e:bd:09:ba:ef:77:73:ac:3f:bb:07:6c:60:
77:30:58:99:15:f4:f9:bf:3d:2c:e1:4d:fc:60:b2:
79:c3:a2:df:4b:43:ac:e9:f9:89:a4:ee:7d:10:e9:
2a:13:7c:d2:9c:5c:ba:d6:02:4c:f6:cc:08:dd:16:
79:cc:41:43:1d:72:e1:55:7c:5c:d5:e2:5d:f3:a8:
04:ee:e0:dc:a7:cb:3c:5e:12:85:1b:9b:fe:0d:8a:
a2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7B:2D:EE:86:A9:0E:6E:B4:08:FC:49:14:73:BE:64:DF:9A:8E:EF
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:be:68:d6:bb:4d:50:0a:c9:4a:5a:26:40:a4:14:0e:da:1d:
f7:c0:17:74:ea:c9:4c:7d:bb:04:14:d8:50:28:7b:69:cd:6a:
81:08:96:71:49:bf:52:53:ea:a7:3e:ec:fe:1c:c6:9a:e9:bd:
92:df:15:31:95:65:9e:ad:bd:d1:fe:e6:38:61:fa:b0:93:0f:
28:5d:5e:ab:4c:f2:e0:b5:67:67:27:56:7c:9f:31:0f:3d:94:
b3:d9:de:bd:76:30:82:20:d6:22:6b:aa:c5:55:7f:d2:f0:42:
ea:7f:fa:68:5f:04:f9:7e:ad:df:33:50:7b:5e:9c:32:9a:d7:
50:59:26:b6:23:be:4b:85:9f:ea:f1:44:30:e0:43:fb:3f:4c:
a5:95:a4:2a:df:56:66:16:5b:6e:b3:fd:1c:0b:05:46:d1:93:
61:e3:cb:62:6c:2e:0b:1f:0e:78:c7:1f:dc:59:b8:0a:01:86:
d9:bd:97:e6:82:be:55:f7:7d:62:70:55:7a:f4:af:ba:f3:b6:
53:86:c2:71:60:dd:0a:b4:09:9a:8a:44:6a:55:80:2d:fc:fb:
5a:5c:27:05:70:46:d9:9b:e1:e0:0a:b9:25:de:22:5e:c5:0d:
98:6f:1a:b3:4b:26:04:77:6c:f2:33:d0:d5:17:b4:8d:1f:d7:
b3:4b:ac:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:26:19 2026 by rpki-client