Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json)
Hash identifier: rVkkw5TJCFT59g/ecGnlvCg3ySKP2qFSxvry0YSQUt0=
Subject key identifier: 9E:C1:AF:E7:04:71:D4:7F:EF:E7:9B:E9:92:64:B0:BA:AB:0C:3A:BD
Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Certificate serial: 019CADC745074CE7915D90E97A92017CAD25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
Manifest number: 06B4
Signing time: Mon 02 Mar 2026 09:00:43 +0000
Manifest this update: Mon 02 Mar 2026 09:00:43 +0000
Manifest next update: Tue 03 Mar 2026 09:00:43 +0000
Files and hashes: 1: WdrS0-eTVbTpcKvZNgVuCTckKKo.roa (hash: dDBCNbLwPdkAiREI4hqWEs1arJVi4Mi0tvtKIDF579g=)
2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: MtKAAOISHASRYr0a2mf9bfQ+Ra52QIXU5/k1FQ7zyH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:45:07:4c:e7:91:5d:90:e9:7a:92:01:7c:ad:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Validity
Not Before: Mar 2 09:00:43 2026 GMT
Not After : Mar 3 09:00:43 2026 GMT
Subject: CN=9ec1afe70471d47fefe79be99264b0baab0c3abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ba:c7:ba:d7:2c:f0:f2:30:e7:59:b4:9b:59:
0c:7e:78:6b:65:50:1d:a1:8f:05:9c:47:e6:8e:94:
15:07:ac:0c:4d:24:7c:df:33:e2:e6:d1:95:90:11:
b4:15:da:6f:0a:15:ab:47:0d:02:10:cd:fc:ac:11:
fd:96:b8:b5:35:6f:ee:28:01:e2:34:df:22:7c:29:
bf:e2:da:5f:6a:41:d4:5b:b6:32:79:85:9a:e8:fc:
44:e8:7c:b1:7d:a3:95:e8:88:47:ea:e4:dd:04:4d:
09:67:ab:52:05:42:6d:25:42:3f:2f:8f:3b:9f:d2:
54:90:7b:1f:41:1b:bb:b4:ea:54:d8:0b:8d:c6:94:
5d:69:51:ab:6f:15:27:07:4d:7b:07:89:02:14:19:
ca:f8:7b:a3:4d:e3:34:d8:6b:34:ee:e1:c6:15:33:
2c:f7:6a:76:21:b6:10:8f:ce:c0:08:1e:13:d8:95:
1b:97:0d:28:1d:32:15:14:2d:f5:8a:25:4c:fa:2a:
88:e5:ba:a5:d2:23:c0:29:1a:2a:de:c7:a6:1e:57:
13:81:59:8d:2e:82:8b:b3:ec:54:6a:cb:09:4c:89:
9a:1a:d9:4f:5a:cb:fe:b1:94:9f:43:9c:c8:0b:23:
d1:41:fa:0a:b7:e2:16:94:c5:e0:66:e5:45:6f:5a:
ac:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C1:AF:E7:04:71:D4:7F:EF:E7:9B:E9:92:64:B0:BA:AB:0C:3A:BD
X509v3 Authority Key Identifier:
keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:cf:ce:23:4b:27:d5:fe:ae:27:65:fc:71:75:95:24:84:3b:
78:f1:c5:a1:31:6d:5f:99:fa:4f:d4:3e:f4:ea:d5:91:e3:6c:
03:dd:89:fa:20:33:bd:cb:94:30:0d:78:6f:a5:2b:99:f8:22:
d9:5d:bf:e5:e9:90:26:d7:e2:72:c3:6e:bb:86:46:60:0d:09:
40:b0:ff:71:7b:d3:26:38:a5:f4:35:8a:58:57:d2:e1:0e:e0:
6e:60:35:59:2b:83:67:03:62:e1:3e:7d:28:37:41:a4:7a:31:
13:60:f8:14:72:f4:4f:71:4c:d4:1a:4e:2b:30:3d:d8:b4:8e:
23:49:40:3d:bb:72:84:6a:92:1b:0a:7b:fd:21:90:22:ca:e9:
5b:bf:dd:5a:4a:b6:b5:1f:d9:dd:17:bc:fd:d4:93:9b:1f:7a:
bb:e1:ec:11:9d:30:74:04:45:2b:02:08:2d:33:4f:d2:f2:e5:
bf:65:f4:10:1a:14:31:9f:19:54:fa:38:f3:6f:a1:34:d0:97:
a8:b1:ef:30:81:fa:fb:0c:13:65:e5:da:ef:5c:47:b3:34:83:
2b:07:57:29:c8:3d:32:5f:ff:06:90:16:15:4a:26:bb:ca:1f:
09:16:32:92:f5:4e:29:c1:72:94:66:e2:52:57:3b:92:d8:e9:
3b:2c:0c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:18 2026 by rpki-client