Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json)
Hash identifier: 3Tjz03xtmOX5F8pocdxR8zwVFg7doC+UYV8ZDn7iGJg=
Subject key identifier: A5:72:F2:60:D9:80:ED:36:41:5A:2A:95:2E:02:AD:DD:F2:09:B0:BE
Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Certificate serial: 01A17FCFA9615AF5DE55D394FD4C2401AAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
Manifest number: 0933
Signing time: Wed 28 Oct 2026 00:01:18 +0000
Manifest this update: Wed 28 Oct 2026 00:01:18 +0000
Manifest next update: Thu 29 Oct 2026 00:01:18 +0000
Files and hashes: 1: WdrS0-eTVbTpcKvZNgVuCTckKKo.roa (hash: dDBCNbLwPdkAiREI4hqWEs1arJVi4Mi0tvtKIDF579g=)
2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: HBdSc6P2kFenDA5FRtfGMZqkH5uuwa77+48+R0YuyrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:a9:61:5a:f5:de:55:d3:94:fd:4c:24:01:aa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Validity
Not Before: Oct 28 00:01:18 2026 GMT
Not After : Oct 29 00:01:18 2026 GMT
Subject: CN=a572f260d980ed36415a2a952e02adddf209b0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:27:b0:4a:73:e5:ee:d7:8b:dc:d6:14:a5:a2:
7b:31:f1:79:8d:d0:49:b6:11:6a:1d:26:27:95:b6:
07:48:6d:66:2f:32:77:d2:7c:45:3e:68:d0:f5:7e:
0a:a5:e2:cc:61:e6:3d:70:8c:e3:0a:68:f3:05:d0:
1d:7c:c1:df:34:8a:c6:7d:cf:b9:f8:d8:d3:0a:29:
02:6b:e0:d2:8a:76:f8:f4:86:98:a3:23:1d:ca:0c:
74:52:2b:ea:e6:46:0c:ef:26:30:24:ca:24:c5:98:
13:dc:68:be:8e:07:5e:65:b5:3c:64:cc:a8:ba:6f:
d9:6a:4e:12:f5:4d:35:a1:26:5b:f1:b6:8c:64:73:
c7:3e:72:25:8e:16:4b:b2:ae:21:8c:b3:90:54:03:
21:71:80:6e:bf:da:74:f5:57:1f:3f:ad:dd:00:c8:
7a:b5:62:d5:fb:f7:5e:4a:5a:36:43:0f:27:a9:cc:
b4:2c:04:50:41:37:4b:60:51:da:c0:bb:ad:0c:aa:
44:7f:3f:8a:0a:61:58:de:f2:9f:8c:c2:78:c5:be:
89:75:73:43:04:4c:77:39:7e:19:f9:37:fd:9f:41:
c6:1f:82:a5:b1:42:ad:16:7f:f9:de:4e:b8:a3:ba:
a7:7d:71:8a:c8:a0:60:40:fa:7e:8f:d8:a6:3a:9d:
0b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:72:F2:60:D9:80:ED:36:41:5A:2A:95:2E:02:AD:DD:F2:09:B0:BE
X509v3 Authority Key Identifier:
keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1a:0e:9c:56:9f:ca:e6:fc:6f:34:1c:17:ee:39:0e:b6:04:
58:1e:c2:ea:c8:88:d3:bf:2b:75:14:61:82:75:d9:14:42:26:
75:04:e5:1b:30:ce:ab:cb:b0:7c:1a:7b:f6:d0:d3:73:0f:45:
42:34:7d:e8:6a:f0:fd:40:ab:67:af:a1:ab:84:2d:41:70:20:
08:39:2c:cf:9e:5f:16:cf:4a:23:4a:3f:a8:53:f1:eb:f7:bb:
0b:25:59:c8:0d:32:db:e5:62:b5:e6:79:3a:fe:1a:5d:27:59:
ca:1a:85:6a:e8:da:37:f2:5a:d2:3a:f5:1a:21:27:4a:e4:70:
aa:18:fc:16:13:d2:4c:73:12:1b:33:18:f7:60:d7:ec:02:07:
46:07:9b:66:46:7f:b4:2f:12:36:87:da:25:1b:bc:1f:d0:17:
d1:ce:35:bc:a6:3b:08:33:e9:1a:24:fb:3c:e7:ad:f6:36:e5:
6e:24:46:d9:07:ca:0a:fd:19:7d:cf:45:2f:50:17:9c:38:df:
7b:3a:4e:83:0e:f1:9d:30:d4:5e:92:a4:6c:f7:f8:d9:ba:a5:
c3:0e:48:03:76:6f:b1:93:71:19:89:ec:c7:75:29:3a:dd:04:
a0:bc:86:f4:41:d5:72:ce:2e:30:5d:ca:f4:a5:8e:53:69:2b:
3a:9f:0b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:57:43 2026 by rpki-client