Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json)
Hash identifier: /V8FTrVYP3NTLjYWZZP+fEsmXjoJxZ8ZuVT9PmpIFr4=
Subject key identifier: EB:40:37:A9:14:4D:8E:41:2B:D0:D5:1E:1B:70:78:52:96:33:BA:69
Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Certificate serial: 01A08C7AE0911F74D2C2E8B21262901EDEF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
Manifest number: 08B5
Signing time: Thu 10 Sep 2026 18:00:58 +0000
Manifest this update: Thu 10 Sep 2026 18:00:58 +0000
Manifest next update: Fri 11 Sep 2026 18:00:58 +0000
Files and hashes: 1: WdrS0-eTVbTpcKvZNgVuCTckKKo.roa (hash: dDBCNbLwPdkAiREI4hqWEs1arJVi4Mi0tvtKIDF579g=)
2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: sZwyAfpdOdxrywaEcm6jT/AFK8/ae122808fmmB0pBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:e0:91:1f:74:d2:c2:e8:b2:12:62:90:1e:de:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Validity
Not Before: Sep 10 18:00:58 2026 GMT
Not After : Sep 11 18:00:58 2026 GMT
Subject: CN=eb4037a9144d8e412bd0d51e1b7078529633ba69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1d:17:84:f5:22:d0:87:4a:00:a9:ee:08:37:
ff:fd:ea:f2:81:5e:75:44:79:a3:66:46:5b:50:a7:
23:43:7a:b1:c9:61:db:60:e2:9c:ff:44:64:19:2d:
76:5e:b2:a6:2d:9c:b9:c1:09:7f:d0:a2:71:8e:5b:
f1:f1:13:ec:84:3d:5a:40:6a:ba:e4:39:7b:5e:af:
de:1a:45:79:67:70:f8:a5:14:12:56:47:92:3e:f9:
5b:38:37:30:ce:84:ee:2b:6d:e3:dd:42:72:76:2e:
54:be:b6:75:18:20:de:c3:3c:c3:8d:ec:37:a1:b8:
9a:b9:ea:3d:d7:48:51:54:f6:65:21:cf:e9:12:e9:
b2:3e:5f:08:2c:0f:5d:1f:93:fe:e2:24:0a:1e:7e:
34:b7:9e:eb:a0:3b:cd:e2:5b:0e:96:3a:fa:78:50:
c8:b2:18:07:07:50:07:e8:85:e0:02:9d:7d:b4:8d:
5e:18:e4:e5:12:83:17:7b:18:69:ce:1a:5c:89:ef:
e6:2a:6e:10:ca:ab:16:9a:12:8e:95:1b:10:ba:80:
47:25:bc:ce:25:37:d5:9e:50:31:56:d2:89:8d:14:
af:f9:19:7a:26:76:0b:90:53:83:7b:d7:56:5c:c8:
46:f6:aa:7e:ee:19:5a:f8:54:fe:e4:b0:d0:d2:e3:
9a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:40:37:A9:14:4D:8E:41:2B:D0:D5:1E:1B:70:78:52:96:33:BA:69
X509v3 Authority Key Identifier:
keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:73:a1:11:a3:f7:0f:62:6b:5a:d7:f6:5c:a0:cc:64:c4:31:
37:41:d3:4a:b9:60:64:4d:53:1e:13:40:e7:bc:10:75:98:73:
8c:2b:e1:67:5d:93:be:03:81:ff:49:cc:6e:23:3c:e1:38:40:
17:f2:2a:90:c3:00:21:b2:b7:e4:56:d8:c4:d6:b0:97:93:74:
35:c3:25:11:36:86:05:a8:c7:36:1b:f1:a5:bb:b6:1e:4b:73:
e5:f5:12:f8:48:ea:49:73:e9:c0:73:e9:71:fc:8a:28:4d:97:
04:9b:64:4d:b0:a8:bf:2c:de:ac:49:01:76:3a:86:5b:59:97:
f9:aa:0e:20:f0:a8:71:2c:07:b7:ea:ba:cc:ce:c7:7d:ed:40:
8e:05:bf:8b:b7:51:ed:96:8e:b5:29:c6:36:da:68:c7:53:3b:
f6:97:56:72:61:ae:28:95:12:08:25:3f:de:2c:fd:a9:94:de:
79:5d:8f:40:cc:8f:36:25:ec:99:55:83:46:4c:90:6c:87:a8:
19:b3:b7:26:fe:14:0a:fc:e9:38:e3:9b:86:f1:cc:12:26:91:
03:5c:a5:33:ba:9f:48:6c:f0:1b:e4:a7:5f:ea:6f:a0:fb:a8:
94:39:dc:e1:24:ab:eb:92:f7:53:c4:91:51:8a:38:1d:40:34:
4a:08:ac:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:42:17 2026 by rpki-client