Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json)
Hash identifier: KasxSUCPCY9dH1hwvC9/RyiEvCRG/p5XSeItyybOyrQ=
Subject key identifier: CC:D9:77:5D:95:D7:97:CE:44:DC:A2:47:CB:F1:38:83:FE:A4:A2:FA
Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Certificate serial: 01A1DC827CB77ACE4F129D281230BBA025E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
Manifest number: 0963
Signing time: Sun 15 Nov 2026 00:01:41 +0000
Manifest this update: Sun 15 Nov 2026 00:01:41 +0000
Manifest next update: Mon 16 Nov 2026 00:01:41 +0000
Files and hashes: 1: WdrS0-eTVbTpcKvZNgVuCTckKKo.roa (hash: dDBCNbLwPdkAiREI4hqWEs1arJVi4Mi0tvtKIDF579g=)
2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: 7r1QOSQSzFplkLpm8CwrxUADFfbJQ7BrmlhJ3VD7CCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:82:7c:b7:7a:ce:4f:12:9d:28:12:30:bb:a0:25:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Validity
Not Before: Nov 15 00:01:41 2026 GMT
Not After : Nov 16 00:01:41 2026 GMT
Subject: CN=ccd9775d95d797ce44dca247cbf13883fea4a2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:f7:bd:16:c2:6f:00:e9:b4:86:a2:f7:72:
cd:6b:4b:32:5b:de:ae:bf:04:3b:91:21:a2:7e:83:
9f:30:84:d2:85:e1:ce:99:43:01:26:ab:ec:0e:ea:
53:2e:9b:46:8e:02:f9:03:57:89:04:bc:c2:c9:d4:
15:e7:5d:aa:cc:dd:b8:2a:5a:65:07:7b:dd:15:89:
3c:a3:d9:c9:ae:96:a5:eb:2c:7b:5e:7f:ac:d5:b2:
46:dc:13:f4:40:94:d3:a2:0a:30:72:f0:1a:ae:85:
89:28:a7:68:d5:45:97:a7:7e:ed:c5:3f:89:6c:18:
1d:d9:da:9f:53:0f:27:4a:e1:08:b3:d2:c1:ed:b1:
54:ee:e0:6a:88:3e:43:39:e6:4f:75:6b:cd:4b:b3:
18:df:df:fc:56:70:a1:eb:36:aa:f0:c1:24:06:ad:
13:27:57:56:68:92:57:36:57:1e:ff:a3:53:6b:3c:
ce:c6:c0:79:6c:22:20:84:a4:d7:5b:1f:60:35:36:
4e:dd:b3:32:a7:0f:0a:65:d1:b8:c6:86:ac:0e:0e:
41:92:9a:31:97:c6:ed:26:fa:58:87:04:d7:51:b7:
ea:ef:da:c3:bf:f3:17:cb:96:86:45:09:38:59:bd:
da:57:ee:ad:74:69:30:48:fd:ce:d1:d3:bf:45:c9:
43:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D9:77:5D:95:D7:97:CE:44:DC:A2:47:CB:F1:38:83:FE:A4:A2:FA
X509v3 Authority Key Identifier:
keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c2:d8:a2:df:53:59:c9:9e:1d:28:a6:7c:05:76:dd:da:22:
aa:a3:de:80:72:4f:41:aa:24:43:2d:92:83:e9:9d:0c:8b:17:
51:66:07:94:05:cd:31:75:8f:c7:b9:89:94:f0:e8:f7:df:c5:
37:69:3a:14:31:85:c0:66:17:dd:6a:a6:5b:bb:f8:1b:94:ae:
01:0d:6b:71:e0:10:82:2f:84:88:5c:f0:24:a4:55:55:18:1b:
70:1c:c0:4f:15:5b:d0:dd:96:d6:49:3e:6f:09:5d:88:82:03:
52:48:95:cc:73:a1:50:b1:08:e5:68:60:d2:24:6f:82:88:43:
ba:b8:78:0d:78:bc:5a:8b:f2:3e:6a:f0:e8:0f:14:f7:d2:d7:
92:64:e4:85:a4:e2:42:c9:9c:67:af:e0:a0:98:dc:b6:7c:47:
f8:7d:a3:7f:bb:88:3f:1d:a3:ec:69:74:5b:85:11:72:d7:b3:
bd:3e:2f:24:77:0e:7c:c2:62:9e:a4:d5:36:40:90:c4:8d:b8:
9f:53:91:12:96:ba:eb:4d:36:52:ff:f4:15:0d:b5:ad:aa:c6:
62:87:b5:c9:2f:c0:e3:57:22:eb:fb:9e:ee:e8:ca:4f:4b:bd:
98:eb:7f:8d:c6:79:8a:3a:61:77:ff:45:e8:1c:d1:39:99:e5:
01:77:89:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:40:05 2026 by rpki-client