Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier: LXpvg/KSOruSxJxj+cawN48lazw74JdmuSLrs+mfX6M=
Subject key identifier: 92:6A:C7:49:B9:3B:48:43:F6:02:FB:F5:FD:98:5D:19:32:C3:F5:64
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 01A04A2CE692671369168261CBDC34708852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number: 1A2B
Signing time: Fri 28 Aug 2026 21:00:51 +0000
Manifest this update: Fri 28 Aug 2026 21:00:51 +0000
Manifest next update: Sat 29 Aug 2026 21:00:51 +0000
Files and hashes: 1: 8iFh47rsQY1Vo7NxaCj0gAXzGQw.roa (hash: dQKNiBDwo55CqXHW6Wzk5DmXJyAe2csEyBTMcfc3KRs=)
2: HcOXGHBaCEmGLqDWw-IGRcrt9TM.roa (hash: Y2NgeeXh3CWzQ6WzeXvUZMOxEVVMsrRGPKbZGQKApUE=)
3: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: w5dzF+/7zJw5tiY4nrmvwc0mmNqYAr29y1s2N6j+7IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4a:2c:e6:92:67:13:69:16:82:61:cb:dc:34:70:88:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Aug 28 21:00:51 2026 GMT
Not After : Aug 29 21:00:51 2026 GMT
Subject: CN=926ac749b93b4843f602fbf5fd985d1932c3f564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d9:c2:85:fc:17:1d:7b:dd:e5:3f:02:6e:77:
1f:3c:d7:de:fd:d9:06:21:cd:9e:04:f3:90:57:b6:
0d:f2:a0:3c:1b:f6:34:12:00:b5:6b:a1:eb:72:a9:
a3:75:0a:9b:be:01:70:b5:55:9b:11:b9:f9:1c:67:
de:70:4d:cc:f4:a4:c3:11:01:83:69:5f:0b:e5:0f:
ab:2e:eb:10:c9:cb:9b:15:37:21:5f:16:16:f8:ee:
99:49:ed:91:d6:87:e5:f0:c9:b7:64:c0:a4:fb:e4:
ff:4f:aa:17:6e:4e:95:ac:11:4d:a4:34:40:63:78:
61:0d:17:bc:b0:e2:b8:c3:cc:01:d8:f6:d5:d8:a2:
c4:30:ee:0c:37:05:f9:be:ed:96:81:d5:67:35:5e:
4f:4a:10:b0:9a:22:ca:97:d4:45:4f:39:e1:d1:d1:
65:b0:f5:81:83:cf:94:5c:16:17:b5:f0:72:c9:64:
10:2f:f3:2b:c6:b0:4c:18:13:20:0c:83:47:0d:d6:
43:6b:3a:fc:3d:f3:42:dc:a6:6d:1d:59:ab:4a:1d:
8f:66:6d:fe:3f:c2:55:b4:6d:d9:11:e0:2d:3d:b9:
c2:2b:d1:f2:05:83:9d:79:f7:16:e9:b7:d3:f9:9f:
09:9b:10:43:30:81:4d:0a:0f:c5:ad:ca:58:2e:3a:
34:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6A:C7:49:B9:3B:48:43:F6:02:FB:F5:FD:98:5D:19:32:C3:F5:64
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5a:6f:24:89:5d:97:56:78:1d:81:8c:e3:4c:b5:14:8c:66:
47:a5:96:63:ee:04:ac:0f:ec:79:f4:5a:a4:d3:b1:fe:4e:0d:
3d:7d:e9:14:1c:72:68:3e:23:1f:91:b1:dc:18:9d:09:bd:45:
2b:da:35:0f:23:34:39:c4:fc:41:7f:18:fb:7a:d0:87:5c:e4:
bd:83:aa:f7:ad:65:63:d1:67:64:bf:c4:20:ab:9a:7a:f4:ff:
56:35:8d:39:68:fb:81:56:99:40:64:bd:fd:71:40:68:12:3a:
a5:30:cf:ce:7d:1e:43:f5:26:c1:f5:62:c3:de:b1:a2:02:32:
99:57:46:02:6d:40:e3:03:c3:d9:72:69:aa:98:a5:90:03:d2:
30:06:6e:61:54:18:7a:9c:68:67:42:32:85:35:ef:f7:2b:a8:
80:c2:12:f4:4d:35:01:ee:61:8c:af:30:49:81:cf:02:b3:95:
c3:8d:9b:07:c8:8c:28:16:6c:f6:29:6e:6c:3d:6d:1d:bd:1e:
c7:b6:3b:96:84:64:ba:a8:41:86:14:44:d2:17:1f:65:9e:3c:
34:2a:e4:58:6b:22:19:d1:4c:a4:83:33:77:3a:4e:6c:fe:54:
c0:7c:57:eb:7e:2f:6e:c2:bc:c4:ed:a1:07:fc:6a:7a:d8:80:
23:d9:8c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:02:23 2026 by rpki-client