Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier: R0I4KQcmmjcigE3umShrJHJOafHmxOHzayNvivqfJOM=
Subject key identifier: 90:60:60:EC:D3:B3:1F:97:6B:13:2C:9D:2B:BB:60:20:8C:A5:C0:67
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 019D389C3139535155577E5733B0432D2966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 08:00:53 +0000
Manifest this update: Sun 29 Mar 2026 08:00:53 +0000
Manifest next update: Mon 30 Mar 2026 08:00:53 +0000
Files and hashes: 1: HcOXGHBaCEmGLqDWw-IGRcrt9TM.roa (hash: Y2NgeeXh3CWzQ6WzeXvUZMOxEVVMsrRGPKbZGQKApUE=)
2: _5yeP8Eb2jKe-Xeqhcc0hIAm4-Q.roa (hash: Yn3HgARWmI7gwy/zWx3yTkjpoO+0RdnX9tXAUL57rNM=)
3: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: BmZOSAtq77OWnyoCGfR3BPbl+dzGdOwrcT7g17SMroE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:31:39:53:51:55:57:7e:57:33:b0:43:2d:29:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Mar 29 08:00:53 2026 GMT
Not After : Mar 30 08:00:53 2026 GMT
Subject: CN=906060ecd3b31f976b132c9d2bbb60208ca5c067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:04:1f:4a:ff:26:1b:36:a3:ca:7e:b7:10:c1:
6b:7f:70:7e:fd:8a:d2:22:f4:32:ed:0d:5c:95:66:
74:dd:5e:c5:0e:26:e2:dc:4d:78:64:58:3e:eb:aa:
0a:62:c7:c9:3e:ed:91:da:54:d9:90:c0:ba:ef:97:
89:44:09:4c:90:87:92:e1:a7:6e:f6:b6:f0:49:df:
d3:40:4e:4a:4d:52:b9:28:b4:d5:91:99:35:6a:e7:
83:20:01:82:06:07:db:d6:29:ab:06:48:c0:a1:b0:
ba:4e:c4:44:26:3e:f6:94:49:fe:d6:7c:d2:4b:52:
f2:f3:be:6f:b2:64:b6:1f:30:75:44:99:9d:1e:55:
a8:6d:c6:79:b2:87:97:41:d4:66:6b:68:a4:10:fc:
58:8e:80:2f:e5:3e:c6:51:5b:3f:a3:73:7f:f2:79:
a3:80:ca:98:74:1a:e5:d0:b8:4c:2d:92:d7:1f:d9:
74:d2:79:83:94:33:8f:c5:7b:3d:55:4d:7c:9b:33:
13:45:54:e2:0f:09:d8:29:8d:b0:2b:fa:67:76:a7:
e9:3f:8d:4b:3b:ad:cb:4f:56:dd:d5:51:d5:8c:45:
9e:73:88:6c:0e:a0:de:2f:29:aa:ee:08:2f:bb:6b:
c1:57:82:be:38:01:2c:ce:d2:4b:fb:01:14:d7:6d:
af:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:60:60:EC:D3:B3:1F:97:6B:13:2C:9D:2B:BB:60:20:8C:A5:C0:67
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f3:c8:69:89:8e:32:0b:d8:66:63:e3:c7:a7:40:3f:6e:45:
1a:00:67:0f:61:b4:b2:d7:f5:21:be:8a:0c:c3:a8:16:52:c4:
97:a6:9b:32:85:e6:61:c4:99:ce:94:59:97:2d:93:f9:e3:f3:
26:84:23:74:91:22:ad:c8:6a:c5:8b:0f:d0:c0:81:3c:d2:ea:
6c:d1:66:87:4d:58:25:f0:22:8e:16:88:a4:aa:9b:52:9f:fb:
bb:74:f2:21:f8:9c:c2:1b:fc:1c:db:7c:f9:f1:55:ac:0f:e9:
d2:a6:20:66:bc:28:ed:3b:d1:b7:3f:b2:42:7c:a3:b0:f1:f6:
aa:5f:a7:3b:1a:13:9a:c8:31:66:3d:f0:09:0f:ff:82:29:6d:
9d:63:5e:df:0b:b7:cd:cc:26:f8:84:26:13:55:f7:9f:70:3d:
e7:57:9a:00:88:59:3d:0e:02:3f:cd:bb:48:66:dc:58:38:05:
fe:23:2d:8b:92:fc:45:46:cd:7f:62:81:06:a1:7d:4d:01:f1:
fe:c6:30:88:5e:02:e6:a1:b7:ac:cc:b6:4f:38:3c:2b:6f:46:
43:80:5b:53:c3:eb:9e:2d:b3:df:6c:97:7f:43:a2:e6:f4:66:
5e:b0:cf:bc:cf:44:3e:9b:7d:5d:77:60:f5:bd:7b:ef:54:17:
1a:da:34:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:48:52 2026 by rpki-client