Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json)
Hash identifier: zWlWr1tQiL0/82Coxm2di0gU0WWr0s3YPUX8khvD1mg=
Subject key identifier: 8B:D2:A8:E4:0B:C0:B1:83:F9:39:55:FD:CA:88:33:49:B9:19:1B:B5
Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Certificate serial: 019DCD86ACA83A4865867A5AA70A9E9FC90F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
Manifest number: 0749
Signing time: Mon 27 Apr 2026 06:00:48 +0000
Manifest this update: Mon 27 Apr 2026 06:00:48 +0000
Manifest next update: Tue 28 Apr 2026 06:00:48 +0000
Files and hashes: 1: WdrS0-eTVbTpcKvZNgVuCTckKKo.roa (hash: dDBCNbLwPdkAiREI4hqWEs1arJVi4Mi0tvtKIDF579g=)
2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: wPyFetOll5kOM9XtzFpRrLvjxumpo5xmitkGQMEDgt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:86:ac:a8:3a:48:65:86:7a:5a:a7:0a:9e:9f:c9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Validity
Not Before: Apr 27 06:00:48 2026 GMT
Not After : Apr 28 06:00:48 2026 GMT
Subject: CN=8bd2a8e40bc0b183f93955fdca883349b9191bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5d:34:c8:c2:87:48:9b:ea:3c:63:26:f9:14:
db:f7:33:05:1d:24:8c:d2:b5:be:c4:71:0b:f0:e9:
1f:62:46:a5:18:23:5e:51:11:56:f7:83:64:0d:7b:
aa:cb:45:54:68:57:68:c1:89:38:55:bd:13:ba:ff:
06:2c:99:de:db:e0:76:64:f7:77:d2:0c:8c:c3:f0:
aa:64:ae:9e:e1:5e:da:e7:37:be:7e:50:b2:10:86:
e4:d4:c0:77:63:7b:9b:86:aa:96:8a:c4:cc:59:ff:
43:0f:94:03:e9:6f:a3:b0:ea:c5:53:d6:b1:95:8e:
00:e3:11:cd:09:1d:55:07:f4:ab:8d:39:7c:33:97:
13:1d:ce:03:6f:e6:51:33:79:bf:e2:39:38:92:c4:
dc:df:b1:0f:74:d4:f1:67:73:3a:4e:f3:c1:cb:b1:
9b:30:60:cc:25:8a:31:da:f3:51:3d:91:e6:47:94:
6b:0c:24:1f:30:de:38:bc:58:ec:73:93:29:35:65:
b7:28:bb:f8:b2:0d:47:f1:07:fc:1a:e3:e3:5d:95:
a6:2f:c7:6d:07:5d:3c:31:be:3a:76:96:2c:41:2b:
3e:9f:62:7c:c7:26:d2:59:b0:b2:b1:9d:92:d4:7c:
7f:0b:ac:b3:3c:ee:6d:5f:3e:82:1e:48:fc:57:e7:
5f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D2:A8:E4:0B:C0:B1:83:F9:39:55:FD:CA:88:33:49:B9:19:1B:B5
X509v3 Authority Key Identifier:
keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0d:78:17:ab:60:93:58:e5:bd:41:b4:d2:5e:ab:6e:55:45:
dc:02:22:ab:91:8b:67:ff:23:ee:b4:5d:23:10:23:80:8e:d2:
74:27:22:f8:26:47:a3:9c:0c:f0:98:5d:d4:4e:96:25:3f:82:
c0:06:b5:1a:23:15:28:58:4e:e0:43:09:63:a0:1c:cd:14:5b:
b2:07:d4:a8:0e:02:3a:c0:74:f2:e9:3a:29:34:4f:d2:96:91:
bc:56:a4:8b:fd:44:fa:cc:25:ae:b9:c8:c7:74:f7:63:af:f2:
4e:3b:cc:ca:fa:cd:69:7a:60:0d:d3:a8:ce:cb:a5:d7:a0:aa:
92:94:5e:ca:3e:21:9b:1a:f6:df:b2:f7:c4:6a:b6:9e:05:9a:
d4:2e:5a:ad:a1:0f:c8:52:dc:ed:f8:00:3d:24:eb:49:b2:52:
07:1d:53:e6:f4:81:9a:1f:8b:b7:a2:de:a3:e8:61:54:95:ea:
5e:fd:6d:e7:c6:c6:c2:a8:37:4b:c7:9d:ed:03:9f:26:bc:24:
28:f6:7e:d9:64:6b:65:43:86:66:77:12:fd:06:a6:d0:3c:c5:
44:96:f7:d9:74:de:49:ed:a4:f6:14:2f:2a:d2:5c:9b:f2:10:
12:fb:94:b9:a3:77:5a:ac:0f:22:12:9c:e4:76:4b:90:1b:36:
d6:88:32:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:59:53 2026 by rpki-client