
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json)
Hash identifier: NoI+YUtIATvkkB0YCUItAj3/P6ME3HysYGuGpm6LMiA=
Subject key identifier: CA:F3:15:E9:15:69:9F:A7:77:BE:CE:8D:6A:96:ED:C4:1B:2C:CA:CC
Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Certificate serial: 019ED42BCC9334FA04726F794FDD547C4CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
Manifest number: 07D1
Signing time: Wed 17 Jun 2026 06:01:40 +0000
Manifest this update: Wed 17 Jun 2026 06:01:40 +0000
Manifest next update: Thu 18 Jun 2026 06:01:40 +0000
Files and hashes: 1: WdrS0-eTVbTpcKvZNgVuCTckKKo.roa (hash: dDBCNbLwPdkAiREI4hqWEs1arJVi4Mi0tvtKIDF579g=)
2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: NBcgqcfUy0D3YuehV+Jfio5b7CL+1SaDNFBhSqGI9LI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 06:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2b:cc:93:34:fa:04:72:6f:79:4f:dd:54:7c:4c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Validity
Not Before: Jun 17 06:01:40 2026 GMT
Not After : Jun 18 06:01:40 2026 GMT
Subject: CN=caf315e915699fa777bece8d6a96edc41b2ccacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:68:b1:a0:c9:43:c5:ca:69:42:9d:2d:7a:
fd:35:d7:29:f1:e5:75:2f:80:cd:96:87:27:ce:ef:
a5:ea:56:24:84:29:f5:a0:13:1e:60:1c:a8:49:9b:
d5:a5:75:c3:f0:ec:e0:fe:16:95:ad:54:2f:c0:bd:
35:5f:ee:e2:cb:f7:e7:87:b7:81:ec:28:f1:39:7b:
69:be:5f:d9:19:75:ec:84:15:68:c5:40:1b:d9:49:
55:c6:a5:d7:03:f4:57:c7:37:25:04:17:ff:64:d7:
a2:81:da:d5:a6:b6:ee:50:bc:22:4c:19:13:39:8d:
94:f3:5a:81:98:65:03:70:70:38:16:26:d3:65:8c:
3b:89:f0:10:6b:4f:cd:9e:03:d2:06:db:47:69:bc:
3e:d1:86:cd:3e:a8:54:b7:a5:53:9c:b0:73:2a:55:
fd:62:10:51:78:1d:6f:d7:dd:8f:b7:87:c6:6f:82:
03:0b:23:e8:e5:91:7c:b2:53:0c:1b:f0:17:ed:ff:
83:19:92:0c:bc:23:0c:06:97:16:9a:d3:8e:6a:9a:
c4:a9:5c:36:e7:79:a7:a1:47:ba:f9:8a:1d:e4:f1:
df:04:1f:5d:3d:30:2d:24:05:da:de:11:d9:15:f1:
e6:f7:1a:0b:90:66:85:43:00:c4:67:aa:77:ba:3d:
53:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F3:15:E9:15:69:9F:A7:77:BE:CE:8D:6A:96:ED:C4:1B:2C:CA:CC
X509v3 Authority Key Identifier:
keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0a:ea:e0:60:81:d9:9b:b7:b2:24:8a:92:fa:01:5a:9b:51:
cb:cd:e2:7d:dc:75:f4:db:9d:4a:d4:a6:e9:50:4c:f5:92:33:
bd:ae:1b:a1:19:83:14:37:5f:c9:b0:50:ec:19:70:be:1a:26:
00:e0:02:e2:04:bf:af:7d:54:60:17:de:d3:57:a6:32:1c:3b:
30:73:56:c4:fc:78:45:52:2c:66:b5:16:0e:57:75:d4:f4:47:
2b:99:22:2b:50:25:22:9c:21:8f:3b:c3:ec:45:f4:7e:2e:95:
07:56:08:14:27:ca:52:18:60:6a:7e:69:e6:8c:8b:f2:79:cd:
7e:42:f0:11:2c:da:4c:8e:9e:1f:f5:62:d0:87:7e:77:96:0c:
42:71:07:94:ab:40:c9:3b:ed:70:00:6f:a5:1c:a3:89:fd:ac:
79:be:6d:27:c3:2a:3a:4e:91:39:b4:eb:76:9a:07:69:f6:4f:
16:b1:ee:80:d0:0e:71:6e:cb:22:94:c6:bf:a9:6e:d2:da:96:
ac:94:fe:88:4c:d7:96:c3:13:cc:e1:b5:3d:e1:72:66:a9:fb:
ab:d6:e8:be:eb:b1:d4:00:cb:17:03:bb:1a:94:28:6f:81:94:
da:d0:b8:30:2c:f8:03:e2:fd:80:a0:05:64:25:36:67:30:67:
59:17:57:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:26:14 2026 by rpki-client