Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json)
Hash identifier: NdOELfaLqUeXj+Yj85F1rFP300DPXorQhRDb492l/fc=
Subject key identifier: C8:9A:5B:8A:90:F4:80:35:7D:FD:58:BF:6E:F6:0C:40:94:10:61:A1
Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Certificate serial: 01A0CA474799E022654F20D4CB6B73B9DA2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
Manifest number: 08D5
Signing time: Tue 22 Sep 2026 18:01:03 +0000
Manifest this update: Tue 22 Sep 2026 18:01:03 +0000
Manifest next update: Wed 23 Sep 2026 18:01:03 +0000
Files and hashes: 1: WdrS0-eTVbTpcKvZNgVuCTckKKo.roa (hash: dDBCNbLwPdkAiREI4hqWEs1arJVi4Mi0tvtKIDF579g=)
2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: KD2LhZ+cM4kespbL/0IlE9W+MqRP3QuaCltRELJhLd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:47:99:e0:22:65:4f:20:d4:cb:6b:73:b9:da:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Validity
Not Before: Sep 22 18:01:03 2026 GMT
Not After : Sep 23 18:01:03 2026 GMT
Subject: CN=c89a5b8a90f480357dfd58bf6ef60c40941061a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:65:80:44:cd:61:59:8d:e3:47:4c:65:c3:d3:
de:01:7e:db:fd:b3:84:0f:21:ec:dd:1f:1e:fb:04:
5b:80:47:c1:bb:9d:68:cd:7a:11:e8:e1:a6:f7:0c:
5e:36:f2:36:2c:11:1a:b0:3b:75:ff:15:5e:4e:91:
6b:6b:e8:1e:37:d8:9b:01:fb:16:43:cc:97:5e:88:
3f:a3:47:af:9d:ed:9f:de:66:74:1e:4a:26:87:40:
a4:e8:81:b6:44:f8:6b:52:a7:49:aa:b1:b2:44:2c:
f2:75:45:17:52:04:2e:65:d4:1a:b4:44:21:84:82:
c0:0e:bd:29:cc:fd:38:dd:2d:9b:b3:cc:b1:3d:ee:
26:97:08:fe:cf:98:cf:b7:0d:a2:eb:b0:79:8f:b9:
65:a7:6c:29:d5:25:56:b1:63:0a:dd:e7:e2:c3:b3:
36:8a:64:10:0d:47:6a:68:dd:d1:73:57:32:76:06:
d0:0f:a9:ca:82:ab:ec:68:8d:d5:51:62:fc:65:13:
55:15:7a:21:49:63:b2:a0:f0:b2:29:94:2c:97:d2:
11:7f:d9:80:30:97:14:80:bb:92:4d:4c:20:5e:4a:
2e:d2:e1:3a:f4:51:fe:c4:55:0e:3b:be:fd:78:82:
93:2f:53:58:cd:c5:57:22:6f:e9:70:1a:d0:0c:7b:
3c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9A:5B:8A:90:F4:80:35:7D:FD:58:BF:6E:F6:0C:40:94:10:61:A1
X509v3 Authority Key Identifier:
keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:24:21:4c:3a:65:ff:7e:fc:0c:6a:3a:b7:31:59:01:5f:33:
48:08:ac:bf:af:7c:14:6a:86:84:59:5c:4c:f8:05:57:6f:e9:
ee:bd:9f:9b:fb:31:b4:f2:45:a9:0c:4b:6f:36:1f:6c:07:26:
8b:c4:6f:54:44:2f:33:19:f3:47:86:d4:c7:1c:16:04:0b:ed:
7f:9d:7f:51:df:be:45:bb:0d:a0:0c:1b:7e:be:5e:9f:02:a7:
87:a1:f9:2f:66:31:b2:f8:7c:f9:cc:3d:c9:70:11:e8:aa:ec:
4b:aa:a3:e7:35:f0:14:8b:2e:9b:1c:2e:2c:ef:a1:64:f6:7f:
ec:31:ba:b1:e3:7a:ee:54:2f:85:aa:4c:c1:f5:db:77:9e:ea:
3e:98:52:eb:cb:7d:b7:ef:96:5d:35:51:fc:b5:dd:dc:9c:89:
9c:17:3a:eb:52:7d:f2:58:42:73:4c:8e:e6:44:99:37:9b:c0:
93:c4:a0:b5:ad:d0:bb:39:fe:ed:0e:81:c0:10:5f:83:10:db:
a8:2a:b0:88:7d:d7:f7:c1:20:6e:49:d2:7b:fd:3e:55:c8:66:
d6:4a:9a:20:53:7d:a7:a7:38:b1:6a:41:a0:48:29:9f:7b:d2:
94:82:a3:1e:45:b5:46:0c:2c:81:93:10:12:cb:7d:c9:fc:22:
85:e5:10:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:12:02 2026 by rpki-client