
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier: NZ1yUAZqVXA7f2Qo8MkF+8dTqswepVx76XtbFt05pDQ=
Subject key identifier: DC:F7:B0:76:0D:10:FC:35:72:C4:C9:EE:0C:ED:63:CC:CA:2F:40:0B
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 019EC224CB6DC3DAA9D21980D242D825D57C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number: 1960
Signing time: Sat 13 Jun 2026 18:00:51 +0000
Manifest this update: Sat 13 Jun 2026 18:00:51 +0000
Manifest next update: Sun 14 Jun 2026 18:00:51 +0000
Files and hashes: 1: 8iFh47rsQY1Vo7NxaCj0gAXzGQw.roa (hash: dQKNiBDwo55CqXHW6Wzk5DmXJyAe2csEyBTMcfc3KRs=)
2: HcOXGHBaCEmGLqDWw-IGRcrt9TM.roa (hash: Y2NgeeXh3CWzQ6WzeXvUZMOxEVVMsrRGPKbZGQKApUE=)
3: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: K/tYMgQyvQ3XRiS3NTZjn49DrxGnn5zR2HEg6jQcwYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:cb:6d:c3:da:a9:d2:19:80:d2:42:d8:25:d5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Jun 13 18:00:51 2026 GMT
Not After : Jun 14 18:00:51 2026 GMT
Subject: CN=dcf7b0760d10fc3572c4c9ee0ced63ccca2f400b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ec:c5:2a:5b:be:c3:7e:ab:0e:6b:7f:c2:fa:
9b:34:49:2d:c8:76:da:c3:4f:87:b9:52:18:21:6a:
43:90:b4:40:bc:64:ed:62:4d:d2:50:5f:65:b8:e8:
34:fb:71:59:b2:d6:d2:67:9b:c8:7a:b2:dc:91:a6:
a2:b9:e3:34:22:52:0a:bf:ac:f5:46:e6:22:32:7e:
83:f5:82:c5:7c:75:83:06:db:c9:11:8c:d5:26:48:
69:4b:4c:78:f5:78:d1:69:9c:0c:6c:61:5d:f7:3c:
84:ab:38:b8:ad:51:fa:1c:d8:d8:56:31:dd:6f:de:
70:ee:be:0f:2d:f4:10:f4:5e:86:d0:48:9b:e6:ad:
11:2a:4c:8b:10:18:0a:95:8a:a0:ea:e1:e4:bd:ab:
99:2f:6c:7a:3b:90:7a:a7:1e:c5:26:65:51:ae:7a:
f0:80:c8:a3:dd:ec:8a:ba:fd:e7:a9:37:21:46:87:
6a:cc:af:48:8e:48:9b:31:f6:9a:ee:8a:71:51:83:
d2:ff:24:fd:a1:ca:af:7c:a3:a4:72:e6:91:2b:49:
f9:7e:e5:45:20:35:b5:1f:01:d0:a4:1d:b1:ea:37:
83:8f:af:14:37:0b:6b:a6:7c:81:40:9b:ee:08:14:
45:44:96:f2:8d:c6:72:98:2f:f1:b8:a4:07:d9:f0:
af:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F7:B0:76:0D:10:FC:35:72:C4:C9:EE:0C:ED:63:CC:CA:2F:40:0B
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:65:d3:79:7a:5d:12:03:e0:14:3b:1b:5a:c0:09:34:46:7e:
61:77:86:73:be:2a:4b:fa:9a:c0:07:dd:a4:9c:55:80:18:fd:
b8:2b:a8:21:fa:03:b0:f7:93:21:49:ae:6c:5c:31:10:7a:df:
4e:bf:fc:1e:07:85:68:66:f2:35:0a:d4:07:13:6d:04:f1:95:
4f:fc:79:27:ee:c2:67:b7:20:3b:e8:49:9e:91:a2:66:f7:b1:
c2:13:e8:e7:b9:77:31:80:97:91:9a:70:33:f4:5d:6e:a1:d9:
49:47:61:a7:01:11:c2:82:04:df:26:cc:f7:1e:a1:82:1b:21:
fe:79:54:f3:16:ef:dc:86:0a:62:35:fe:72:a0:20:d8:8a:f5:
b7:ce:7c:a5:60:ce:29:23:be:6e:65:c0:0a:c1:e7:e0:68:17:
ae:b8:d2:51:e0:67:75:45:14:de:09:c8:a2:a0:55:e8:ba:34:
ae:f8:12:86:0f:dc:3b:30:92:5c:a9:a0:d2:f5:bb:b1:9d:bb:
e0:27:70:2f:d3:f6:0f:e5:1c:83:a2:50:52:3d:f5:51:ce:37:
87:f0:13:4a:ee:e6:0d:0c:c6:d2:e5:a3:d4:d5:4a:bd:07:6c:
54:d0:f5:99:5f:f1:d3:cb:c9:26:ad:1e:f7:32:3e:b8:40:0f:
29:89:24:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:43:52 2026 by rpki-client