Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.mft
File: DIXrpeHV0Efz2lfeYnX968At-5g.mft (raw, json)
Hash identifier: 6PZixWKNCIByWuNaz1bV9HsQhEenSc0aWCRsF3SFVoc=
Subject key identifier: E7:74:A1:8B:CB:91:1F:B3:1B:2E:D2:8E:BD:99:9F:1A:6D:48:E3:F3
Authority key identifier: 0C:85:EB:A5:E1:D5:D0:47:F3:DA:57:DE:62:75:FD:EB:C0:2D:FB:98
Certificate issuer: /CN=0c85eba5e1d5d047f3da57de6275fdebc02dfb98
Certificate serial: 019F83E81AE72A1A4FE3764DB01C4F1B3CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIXrpeHV0Efz2lfeYnX968At-5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.mft
Manifest number: A2
Signing time: Tue 21 Jul 2026 09:00:54 +0000
Manifest this update: Tue 21 Jul 2026 09:00:54 +0000
Manifest next update: Wed 22 Jul 2026 09:00:54 +0000
Files and hashes: 1: 07X4-aly_fwzIPkdRTVK5Fls7IE.asa (hash: PSrwFcPr+F0Ok6ZKKWr4uBgYHzYBf4fKh4J9YvDEC+k=)
2: DIXrpeHV0Efz2lfeYnX968At-5g.crl (hash: zU9lRfTlrJCmKTotsRjV3b9qMyHnDJ7B+a90frhacvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIXrpeHV0Efz2lfeYnX968At-5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:e8:1a:e7:2a:1a:4f:e3:76:4d:b0:1c:4f:1b:3c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c85eba5e1d5d047f3da57de6275fdebc02dfb98
Validity
Not Before: Jul 21 09:00:54 2026 GMT
Not After : Jul 22 09:00:54 2026 GMT
Subject: CN=e774a18bcb911fb31b2ed28ebd999f1a6d48e3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:91:28:1e:1f:b8:ca:a3:8a:92:c2:36:bb:90:
c3:c1:6f:39:92:2e:b9:e5:a3:eb:19:21:b2:17:6d:
3d:17:69:b1:ae:06:fd:92:77:25:9d:de:1f:f5:38:
c0:fd:dc:d6:6d:05:7f:6a:12:77:46:c8:1c:c4:bd:
32:4b:29:9b:e3:04:0a:5a:29:05:32:1b:10:ef:1a:
28:28:91:92:9c:48:36:a3:58:6b:d6:61:ba:a0:bc:
19:87:11:03:f6:85:02:56:c6:5e:b9:d5:b0:53:c0:
5c:15:66:52:35:07:4d:ea:08:85:52:84:86:fd:c3:
78:1a:d3:30:15:97:c8:98:2a:60:a0:18:de:ea:e0:
90:ad:3e:1c:1b:8c:80:bb:11:2e:30:b0:1e:d5:a2:
ca:b5:81:f1:b4:69:3e:05:0b:f5:26:5a:bb:64:92:
d2:90:8b:39:88:c8:3e:b3:aa:aa:3c:51:69:74:b9:
f4:89:68:07:e2:7b:c4:40:98:37:79:b4:d8:7a:13:
11:33:d7:d5:a3:30:4b:4c:85:01:a3:78:82:08:f6:
75:68:ac:37:b0:2f:8e:42:a9:3e:db:cc:8b:83:ef:
12:bd:b5:6d:1f:c1:86:54:3b:a0:0e:d2:56:77:b9:
6a:04:67:c2:0c:20:14:41:fb:66:c8:0b:d6:64:f7:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:74:A1:8B:CB:91:1F:B3:1B:2E:D2:8E:BD:99:9F:1A:6D:48:E3:F3
X509v3 Authority Key Identifier:
keyid:0C:85:EB:A5:E1:D5:D0:47:F3:DA:57:DE:62:75:FD:EB:C0:2D:FB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIXrpeHV0Efz2lfeYnX968At-5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/430f08-6332-4dc6-9f2c-20d42e49313e/1/DIXrpeHV0Efz2lfeYnX968At-5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2a:99:ba:88:50:1f:0d:fa:92:43:d9:46:55:db:3f:60:5f:
aa:1c:67:19:28:67:d9:36:42:f5:de:26:c7:19:0e:87:ed:a1:
47:fa:12:d0:7b:46:85:74:73:4e:16:1a:e4:60:1e:84:2f:68:
f2:d7:b3:ec:63:59:7a:7c:87:9b:1d:71:62:b9:05:f3:b7:60:
35:bf:b6:f7:6b:32:72:9b:1e:b6:9b:b9:3e:1b:c0:fd:af:7a:
4d:b1:1f:12:e4:f7:37:6f:0c:61:5e:5c:c9:4e:ae:f2:66:b4:
99:5d:2e:a1:88:da:12:38:bc:78:e9:fb:d8:17:4d:a7:d0:53:
77:d8:13:15:7a:57:74:96:8a:3f:4f:21:9c:d4:67:22:33:f5:
08:39:8a:01:4b:6c:72:cd:94:72:ea:fd:dd:c9:5e:88:f4:d7:
0a:87:a7:61:d0:ca:7a:18:ff:e1:d5:5f:a3:d0:79:60:e5:ff:
f2:de:38:85:a4:cb:66:98:b0:f7:f1:6f:59:98:c9:15:01:a8:
68:75:15:56:b7:dd:91:59:52:f1:d5:ab:79:ea:07:f2:e1:39:
0e:42:09:7e:cc:30:c9:df:0a:35:b7:a0:49:d0:d2:5d:90:4b:
30:d4:b6:5e:fb:85:fe:7e:ff:66:89:3e:8f:d3:63:f5:d2:cd:
93:88:7e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:32:45 2026 by rpki-client