Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json)
Hash identifier: afV4wDT5H3xDICIY06gy7vhHWHttooKoc95Zfl0nu+o=
Subject key identifier: A4:24:2D:32:88:8A:E4:4E:7E:AD:A2:D7:20:51:D6:1A:31:70:97:66
Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Certificate serial: 019D9961F02813F75239AB3E5D7D45BAF227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
Manifest number: 072E
Signing time: Fri 17 Apr 2026 03:00:25 +0000
Manifest this update: Fri 17 Apr 2026 03:00:25 +0000
Manifest next update: Sat 18 Apr 2026 03:00:25 +0000
Files and hashes: 1: WdrS0-eTVbTpcKvZNgVuCTckKKo.roa (hash: dDBCNbLwPdkAiREI4hqWEs1arJVi4Mi0tvtKIDF579g=)
2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: b+OAZftZofzHg84bKF4jtOrO5fUsWRkwFmfKcQjjU2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:f0:28:13:f7:52:39:ab:3e:5d:7d:45:ba:f2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Validity
Not Before: Apr 17 03:00:25 2026 GMT
Not After : Apr 18 03:00:25 2026 GMT
Subject: CN=a4242d32888ae44e7eada2d72051d61a31709766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:05:30:7d:75:4e:20:93:26:9f:76:3b:ad:cf:
97:a6:fe:16:f3:a2:fa:35:ac:99:1a:6a:86:ea:1d:
88:6f:d5:15:bc:21:6c:5e:f7:16:1b:5e:02:0c:0a:
01:0e:88:54:83:f4:81:8c:1e:4b:7e:a5:d6:eb:30:
f2:ed:a0:0f:2d:4b:a2:65:a4:af:9e:d2:8a:07:e5:
c4:26:09:24:f5:40:d1:5e:c5:07:cc:b6:7e:74:f0:
01:19:8d:20:0a:ba:d7:5b:d1:f2:47:4f:5f:61:ed:
22:c1:64:4d:18:d1:86:d5:65:4b:68:12:f9:2a:8e:
e3:e8:6f:1c:06:0f:26:6f:f3:06:89:d3:46:21:e8:
ca:7b:c4:47:dc:02:9b:11:83:d1:b6:84:27:00:6e:
45:0e:85:8a:cf:0a:b1:be:07:9a:a9:79:23:c7:85:
05:2a:cb:5d:6a:78:6f:b0:76:69:9e:19:ae:39:2c:
3c:a4:96:24:5b:f3:fe:03:fb:46:5e:0f:06:cd:6a:
e6:0a:06:f3:f3:ef:c9:de:6b:05:db:3b:38:d0:bd:
da:19:80:f5:22:24:4a:f1:39:67:88:e8:e2:39:4c:
3e:b5:26:26:14:b1:a6:07:a2:e5:66:fe:02:8a:92:
6b:68:5a:3a:cd:6e:05:28:85:d7:a1:2e:76:65:83:
e3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:24:2D:32:88:8A:E4:4E:7E:AD:A2:D7:20:51:D6:1A:31:70:97:66
X509v3 Authority Key Identifier:
keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:dc:85:ed:4d:ab:11:68:28:24:a2:b2:49:13:d2:e7:c3:05:
a3:44:ee:e5:a9:23:6d:6c:3f:a3:fb:b7:69:4f:d0:68:dd:39:
7c:2e:a5:ab:08:49:07:36:29:d3:5e:0e:9c:f8:93:e9:e1:26:
d8:be:5b:d9:cd:55:5a:e9:bf:42:1f:52:06:cf:a0:c3:f5:4f:
29:92:4a:30:1c:c0:48:c9:32:53:27:45:b8:49:b4:b9:e1:d4:
b9:d4:de:93:cf:12:d0:22:b8:30:0f:ce:5f:53:37:37:ef:5a:
ff:8b:96:91:97:bb:0c:ef:23:53:2d:cf:de:25:bd:66:16:91:
f1:2c:e6:40:60:b8:b4:0e:58:66:ab:85:ef:64:25:d1:2b:83:
8e:05:fb:9b:ae:67:2a:3c:af:87:05:b9:85:4d:b7:e6:ac:ea:
42:62:80:25:a5:f1:b4:cf:e5:e7:1a:8f:62:61:81:35:d7:e5:
83:2f:c7:95:b9:a3:35:69:06:a1:c4:01:34:2c:81:39:58:8e:
de:03:74:46:4c:20:a5:fc:99:07:23:d6:f5:24:07:68:fd:8d:
9a:d4:ca:99:18:c6:ad:29:c5:2c:89:05:8a:8a:e3:ce:b0:1f:
14:b9:28:32:1b:cf:b7:43:0b:b6:16:0f:38:94:c0:83:a3:3d:
b0:4d:2a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:45 2026 by rpki-client