Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json)
Hash identifier: 1I2zbukxqEL6rZ/a8L56ZTOpXAvAm4+Hfz/m0kIi6H8=
Subject key identifier: 56:B8:06:7B:11:34:68:1C:FD:44:E9:2E:5E:9A:F1:D3:E2:33:CE:59
Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Certificate serial: 01A13F7089778B5A733CA36F0C1ABCB133E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
Manifest number: 1AAA
Signing time: Thu 15 Oct 2026 12:01:42 +0000
Manifest this update: Thu 15 Oct 2026 12:01:42 +0000
Manifest next update: Fri 16 Oct 2026 12:01:42 +0000
Files and hashes: 1: 8iFh47rsQY1Vo7NxaCj0gAXzGQw.roa (hash: dQKNiBDwo55CqXHW6Wzk5DmXJyAe2csEyBTMcfc3KRs=)
2: HcOXGHBaCEmGLqDWw-IGRcrt9TM.roa (hash: Y2NgeeXh3CWzQ6WzeXvUZMOxEVVMsrRGPKbZGQKApUE=)
3: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: nLD4sar57gBGPM80bFlROLOrpxdI3+tC5nWt4f0tsCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:89:77:8b:5a:73:3c:a3:6f:0c:1a:bc:b1:33:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828
Validity
Not Before: Oct 15 12:01:42 2026 GMT
Not After : Oct 16 12:01:42 2026 GMT
Subject: CN=56b8067b1134681cfd44e92e5e9af1d3e233ce59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:0a:45:e9:e8:eb:fd:7f:45:36:7b:e2:93:
42:7c:a3:1d:68:be:09:cc:17:aa:4f:d5:bc:c1:e1:
08:3c:6b:d1:f6:2d:de:88:a3:3a:24:75:f5:4a:bb:
89:56:08:b8:e5:73:8f:e6:14:66:89:28:f5:83:e8:
1d:2f:2d:0b:2b:e5:ba:ed:6b:1a:98:d3:52:dc:73:
18:b6:e7:dc:0b:9e:6e:fd:81:de:0f:a2:73:a1:e7:
d7:ea:fd:ef:3e:90:71:8f:1f:57:2f:d9:40:02:76:
bb:8f:ec:e4:9d:36:eb:d8:b8:b7:6d:2c:e7:57:44:
2b:38:6d:8b:5f:3b:38:6d:33:14:d4:7c:d7:20:0b:
bf:7d:0b:9d:1a:51:5c:43:64:c8:18:87:b0:a2:f3:
65:cf:a5:97:5a:cf:3b:95:60:56:83:55:5a:fc:31:
8b:e2:27:7f:07:32:9e:50:0c:5f:93:e8:fc:69:b3:
ca:c9:0d:e3:36:36:87:29:ac:c8:89:06:91:2e:5c:
da:02:6f:b8:e9:a2:a9:ea:82:04:7b:7d:5b:11:23:
7e:e0:84:0c:1b:57:ef:ed:6a:81:77:94:d9:d2:6f:
d7:87:7d:8a:f6:7b:b5:af:a3:14:9e:62:97:0f:77:
2b:3e:54:a7:53:41:0a:53:49:42:89:fb:bc:c2:88:
ac:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B8:06:7B:11:34:68:1C:FD:44:E9:2E:5E:9A:F1:D3:E2:33:CE:59
X509v3 Authority Key Identifier:
keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:7e:96:40:45:7d:3d:cc:21:b4:dd:2d:91:d8:f2:2b:88:b0:
49:e1:cc:fb:02:ac:2a:0a:ad:73:60:7e:7d:a1:70:88:10:39:
f5:d7:56:5d:bc:b0:3a:6f:c4:eb:0f:54:90:9f:9d:8c:67:56:
96:ed:9c:2d:d7:03:f0:72:34:cc:bc:a7:8d:b3:74:5e:0c:49:
95:17:af:6b:0b:fc:e8:0c:94:c8:98:b0:e2:f4:4e:ad:da:d6:
d5:fd:f5:09:86:e2:15:30:11:94:bf:20:e4:20:a5:13:0f:f5:
61:6f:ea:af:6e:ed:90:03:09:9f:f9:21:5d:dd:7b:f7:32:73:
50:0c:74:a7:d3:d0:d7:65:94:eb:01:83:1e:45:8c:ff:73:87:
b1:b7:0e:e9:d0:8d:6b:33:47:ae:0e:89:0c:f1:6c:24:6b:06:
06:e0:1f:71:51:80:4b:9b:62:95:33:df:70:0a:32:78:6a:3f:
b9:e6:7c:59:c2:95:77:64:ee:26:8b:41:1c:e2:69:86:29:38:
7d:d4:ff:ef:7a:f2:79:8a:c5:6b:a0:98:a0:9f:40:de:91:db:
f1:e1:a2:9b:4d:1f:82:9b:74:89:2f:dc:2f:31:29:08:c7:ef:
4a:dd:0d:36:b8:cf:8f:47:0a:be:a0:fc:d8:24:3d:0f:78:f4:
38:3b:fb:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:19:44 2026 by rpki-client