Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
File: DxgybgAap_xW-DUxMVN2-equCYg.mft (raw, json)
Hash identifier: CjHgpUw9It7S5EvzGDNmrmA6S24xkokS0uean8lFKbQ=
Subject key identifier: 86:86:52:8B:80:95:AE:4C:71:40:2F:E9:D3:D9:F5:73:5B:BE:E4:19
Authority key identifier: 0F:18:32:6E:00:1A:A7:FC:56:F8:35:31:31:53:76:F9:EA:AE:09:88
Certificate issuer: /CN=0f18326e001aa7fc56f83531315376f9eaae0988
Certificate serial: 019F189E503183A325B1A4E7DB6470B8D76A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
Manifest number: 0BFF
Signing time: Tue 30 Jun 2026 13:00:56 +0000
Manifest this update: Tue 30 Jun 2026 13:00:56 +0000
Manifest next update: Wed 01 Jul 2026 13:00:56 +0000
Files and hashes: 1: 64Gcj0h8vNXf7GFNZxmMm2mfr1E.roa (hash: pu8wgjr4VrA4g+LsPAV0cojDn7FfUUvf2NSJDNpkiw8=)
2: DxgybgAap_xW-DUxMVN2-equCYg.crl (hash: tWMQ93CqXZ0ZbhTNcdgqCjEjqi+IXXyHtZbNUHiJx1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:50:31:83:a3:25:b1:a4:e7:db:64:70:b8:d7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f18326e001aa7fc56f83531315376f9eaae0988
Validity
Not Before: Jun 30 13:00:56 2026 GMT
Not After : Jul 1 13:00:56 2026 GMT
Subject: CN=8686528b8095ae4c71402fe9d3d9f5735bbee419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0b:55:9c:e5:ec:f3:fe:9b:8b:b8:a2:84:f1:
22:55:3c:e8:6e:af:53:b1:59:d9:67:b6:c6:b2:dc:
34:6f:28:4d:30:62:b3:b4:10:5b:36:bb:5a:4a:8f:
3d:ca:7b:0a:3b:d6:f9:dd:df:02:66:90:4d:72:77:
d0:2b:f8:48:04:82:b6:db:5e:25:0b:ef:d4:a1:3f:
78:00:60:ed:11:95:d2:8b:fa:b9:2e:38:eb:81:64:
e9:bf:ea:f4:96:fe:14:1b:4b:dc:c3:9a:07:9d:6e:
74:c8:09:8e:63:1a:85:1c:f9:81:0f:e9:41:66:47:
60:dd:78:b4:4e:0d:72:30:a4:c0:7d:b2:ed:46:4c:
ed:1f:d0:2d:74:c7:6a:f1:c7:85:49:0e:d1:32:a2:
8f:85:8c:7b:9b:de:c2:f8:c8:63:f1:cf:e7:ba:1a:
b5:85:c2:c4:77:17:58:04:e3:3c:02:b1:a3:30:f1:
97:d2:e3:38:7a:94:bb:65:46:76:87:58:4b:9d:fc:
e4:f7:3a:56:94:10:fe:ef:19:04:c2:9a:09:eb:94:
2d:73:b2:cc:35:ee:27:cf:34:8e:86:d1:9e:d8:41:
b9:3d:09:9a:6e:af:c0:a5:99:fa:12:85:7a:65:11:
6e:6f:bf:b2:39:50:f2:2c:48:7a:5a:26:e0:b1:02:
83:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:86:52:8B:80:95:AE:4C:71:40:2F:E9:D3:D9:F5:73:5B:BE:E4:19
X509v3 Authority Key Identifier:
keyid:0F:18:32:6E:00:1A:A7:FC:56:F8:35:31:31:53:76:F9:EA:AE:09:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:97:b7:82:0b:9e:4c:0f:94:a1:3e:72:31:20:d3:79:35:35:
c0:49:4a:f9:51:ef:86:9d:8e:d1:10:8e:46:0b:e3:82:02:ae:
85:00:d0:a2:d5:13:63:60:01:fe:bc:a3:ba:0e:13:bc:28:ea:
9c:82:d3:29:46:1b:3e:82:2a:6d:5a:e2:e2:4b:07:fc:04:0f:
34:9f:6b:5b:d9:d3:62:6f:f0:aa:be:7d:99:23:1d:80:72:92:
fd:86:aa:bc:90:b9:5b:0d:d6:a2:d4:5a:5b:dd:e4:d8:8b:d8:
0e:b6:ba:a5:66:e7:b4:3f:ef:97:20:33:8d:6d:61:15:1f:5a:
d0:71:6f:35:d1:0c:01:93:30:3b:13:c3:64:af:62:cc:86:7c:
be:f8:88:2b:b0:65:51:b0:f0:fc:a8:e4:1b:48:60:ae:a3:cd:
51:27:07:20:4c:57:a5:c6:82:83:6a:4e:4a:39:16:44:86:ea:
70:c4:e9:13:ca:e5:b2:ae:a4:f1:f8:63:bb:68:92:cf:12:9d:
6e:54:58:bd:5f:50:11:03:fa:54:9b:30:b8:be:74:a9:b8:c2:
23:ba:70:81:25:0f:6a:aa:fa:d5:a6:0f:55:6b:6f:bf:a7:f6:
a3:61:be:1a:d8:fd:00:fb:ac:0f:5b:d8:ac:27:c3:4a:da:8a:
e9:54:98:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:06 2026 by rpki-client