Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json)
Hash identifier: 8zwNl6YDMyZv9ZZo0xsl+fdCpdNAoVGtJh9XNjQzq8A=
Subject key identifier: 22:41:FB:24:AE:E2:AC:5F:7B:27:FE:4F:57:5B:71:E7:A8:06:DF:E2
Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Certificate serial: 019CD844C11D5463DF4605C661CEEF82112B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
Manifest number: 06CA
Signing time: Tue 10 Mar 2026 15:01:50 +0000
Manifest this update: Tue 10 Mar 2026 15:01:50 +0000
Manifest next update: Wed 11 Mar 2026 15:01:50 +0000
Files and hashes: 1: WdrS0-eTVbTpcKvZNgVuCTckKKo.roa (hash: dDBCNbLwPdkAiREI4hqWEs1arJVi4Mi0tvtKIDF579g=)
2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: 5ow7JaqStOGFHSQ6jqkHTIgV4PQXtV51W52995si49A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 15:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:44:c1:1d:54:63:df:46:05:c6:61:ce:ef:82:11:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Validity
Not Before: Mar 10 15:01:50 2026 GMT
Not After : Mar 11 15:01:50 2026 GMT
Subject: CN=2241fb24aee2ac5f7b27fe4f575b71e7a806dfe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:17:5c:20:6a:8b:03:7b:06:be:a1:bc:66:63:
94:1c:f1:f3:89:ef:c0:08:e9:aa:a4:03:31:40:a6:
47:d1:c4:c9:85:2d:c7:9e:e5:eb:2e:57:dd:d4:86:
f7:cf:70:d4:05:60:3b:b1:54:4e:a5:9d:16:18:8e:
c3:81:13:bf:35:d7:9e:bd:a1:cb:61:78:36:fe:12:
a5:f9:49:35:01:30:57:92:71:33:b0:7a:89:9e:c6:
b4:47:8a:c6:ea:01:ed:de:d0:3b:23:3d:45:07:4f:
72:12:1a:96:b4:d2:da:dc:ec:5d:6d:96:6b:a3:bd:
4c:b8:47:1e:60:f5:21:d2:c6:c4:7b:3c:d0:93:27:
d3:81:cc:70:10:a7:77:07:c8:56:7b:d1:10:10:36:
0a:d6:da:c6:d3:92:1a:e0:90:a9:29:0f:24:31:82:
3c:e7:30:06:f1:b2:15:8b:27:31:e4:1c:e0:bb:9a:
08:0b:65:bd:f3:4c:6b:4b:b2:31:09:f4:b6:b5:9e:
4f:d8:5f:d4:30:0e:5c:2c:3a:56:a8:63:1c:a6:43:
2f:c3:c6:52:a1:31:cd:89:98:a5:9d:77:17:64:ba:
3f:47:99:8e:7a:02:57:1a:92:2c:8d:9d:3f:9a:b2:
23:45:34:21:33:d7:9e:1c:12:d3:5e:d9:0f:62:b9:
20:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:41:FB:24:AE:E2:AC:5F:7B:27:FE:4F:57:5B:71:E7:A8:06:DF:E2
X509v3 Authority Key Identifier:
keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7e:8f:38:52:8e:3b:0f:28:1f:62:7f:a3:a3:fc:f8:01:c7:
f1:7b:9c:5f:92:d2:b0:d4:48:5f:a2:24:78:d8:7d:3b:d4:67:
73:1d:07:0f:34:49:d6:03:3a:03:3c:2b:bf:25:38:2b:71:39:
6e:fd:68:0a:bc:9e:22:82:7e:52:5a:83:b8:a7:43:ec:fd:88:
a8:43:e7:5e:6d:58:50:14:dd:17:76:ef:1e:08:a4:73:2e:51:
47:8d:f3:c8:bd:4a:cf:5e:92:e3:b0:98:70:95:9e:ab:0f:31:
49:9e:cb:12:4a:80:0b:eb:fe:5e:ce:34:ec:5b:a4:61:58:96:
4f:ef:70:73:33:5a:cd:4b:d2:67:6b:a6:21:12:43:cd:c1:27:
16:7f:f7:cd:ed:19:74:fe:9a:ed:2b:6d:cd:d9:8a:96:fe:c9:
96:5f:4e:b3:cc:5f:d7:c6:2e:81:69:c6:5a:0c:19:22:0c:d6:
b1:ed:6b:1d:46:16:f5:7d:43:31:af:d1:1f:ff:c9:90:b6:7e:
4e:27:57:fd:23:68:35:70:1a:4c:39:47:4a:9d:dd:f6:71:65:
b7:a7:34:13:e0:97:e8:3c:ef:f4:35:4d:fe:e2:6c:e1:34:cc:
f9:e7:12:05:3c:95:2c:be:19:ca:14:a1:1e:74:7e:8b:e5:4a:
1f:cd:9c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 18:26:55 2026 by rpki-client