Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier: koyM3ChlKxQmBBI+vqUsrM3kqbSQB64IfuQ82c54xPE=
Subject key identifier: 08:DB:9C:6C:BB:93:5A:37:81:CD:7F:C2:F5:71:F0:B9:86:70:CF:34
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 019F1AFAF3FAC81ECD9771C88AA4787C3D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number: 198E
Signing time: Wed 01 Jul 2026 00:01:21 +0000
Manifest this update: Wed 01 Jul 2026 00:01:21 +0000
Manifest next update: Thu 02 Jul 2026 00:01:21 +0000
Files and hashes: 1: 8iFh47rsQY1Vo7NxaCj0gAXzGQw.roa (hash: dQKNiBDwo55CqXHW6Wzk5DmXJyAe2csEyBTMcfc3KRs=)
2: HcOXGHBaCEmGLqDWw-IGRcrt9TM.roa (hash: Y2NgeeXh3CWzQ6WzeXvUZMOxEVVMsrRGPKbZGQKApUE=)
3: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: 8eBNNDi/oK0Q5O7MvdEXp1Bnlvm+CSCJ1UJcPBG1tlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:fa:f3:fa:c8:1e:cd:97:71:c8:8a:a4:78:7c:3d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Jul 1 00:01:21 2026 GMT
Not After : Jul 2 00:01:21 2026 GMT
Subject: CN=08db9c6cbb935a3781cd7fc2f571f0b98670cf34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:b6:bc:50:2a:fb:65:16:55:bc:3d:95:1a:
9d:fa:29:79:27:24:ed:12:42:79:71:70:55:04:48:
a7:4c:17:ac:04:ee:a7:9f:17:a5:4b:ef:fb:34:e2:
5e:bf:9a:e7:d9:e6:33:33:32:72:45:dd:ed:b9:03:
b0:16:a3:3c:8c:43:cc:fe:54:2a:b1:fd:90:f0:e7:
f7:28:11:68:7c:93:69:e8:7c:6a:12:05:18:f7:86:
48:59:73:37:0b:a2:03:a7:55:f5:0f:40:e7:3e:5d:
5d:18:cc:30:ea:d6:ac:50:67:41:3e:80:34:8f:f9:
b1:35:8b:15:d6:4e:47:62:6b:22:b5:41:a9:85:c6:
6e:57:d6:84:34:d9:0a:ae:df:c5:1b:c0:e7:a3:47:
ba:c2:b0:47:3c:e4:7b:e1:5d:bc:7d:ff:92:d1:7f:
9f:3d:a2:8b:3e:83:bc:b1:a1:95:cb:68:12:d2:a0:
82:b0:62:1b:08:14:c7:9d:5f:f9:e2:1c:37:89:8d:
1f:08:73:1e:8e:11:17:b6:07:67:3b:bc:d4:8f:d5:
54:16:53:09:93:b5:5d:b5:2d:2b:08:fb:50:25:87:
fc:85:7c:43:8f:79:3b:6e:2f:cf:8d:d7:9d:01:16:
07:11:60:81:5f:fb:87:3b:39:5b:15:c9:76:17:11:
43:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DB:9C:6C:BB:93:5A:37:81:CD:7F:C2:F5:71:F0:B9:86:70:CF:34
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5c:52:b6:7b:e5:68:61:ad:7a:a2:1b:da:ac:4b:1d:9c:cd:
67:b1:19:0a:df:61:db:d9:be:60:8e:2d:51:b7:71:2a:f2:27:
7e:b9:96:91:67:d8:28:39:9c:93:b5:59:c6:b9:78:c7:73:3b:
f4:62:1d:73:ce:fd:6e:02:be:db:72:5f:8d:7d:09:2a:11:3a:
4b:82:58:da:99:63:e6:11:1f:73:22:0f:b7:1f:f3:93:8e:35:
9e:eb:cd:4a:1d:93:82:dc:d4:5a:53:2b:52:3b:59:79:11:10:
11:a0:13:36:32:ba:a9:b4:1c:b5:af:b3:39:27:14:db:24:5c:
11:08:18:fa:93:4c:66:2d:ea:fd:37:e8:4b:f1:1a:73:68:67:
84:bd:61:c7:76:a4:01:80:c5:bd:1c:4b:5e:29:7f:ad:c5:72:
b0:96:71:16:35:6d:ce:c4:3f:e4:06:ab:20:74:f8:8c:33:f7:
d4:f7:d3:a1:1c:ee:83:09:8c:9e:7c:94:a0:56:5f:c9:bd:95:
cf:f2:28:2b:b7:64:8a:0a:09:e1:b0:a7:fb:a6:0b:b8:91:a4:
c1:eb:68:6b:c1:40:b8:e3:93:32:83:2e:86:c5:10:ef:86:d6:
ce:d3:54:f6:47:ca:12:7f:bb:18:8c:4f:3a:c3:a0:3c:b3:ec:
cb:01:77:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:17:03 2026 by rpki-client