Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json)
Hash identifier: L8D1BZQUQRuwJzawAHFfohQBm640ETI4f+OLtY+I7EU=
Subject key identifier: 80:CE:B9:02:AB:36:B2:90:95:E3:D9:C7:57:D3:D7:97:55:AB:0F:88
Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Certificate serial: 019F916D86918BD2E12C91169DEC8D0586E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
Manifest number: 0833
Signing time: Fri 24 Jul 2026 00:01:41 +0000
Manifest this update: Fri 24 Jul 2026 00:01:41 +0000
Manifest next update: Sat 25 Jul 2026 00:01:41 +0000
Files and hashes: 1: WdrS0-eTVbTpcKvZNgVuCTckKKo.roa (hash: dDBCNbLwPdkAiREI4hqWEs1arJVi4Mi0tvtKIDF579g=)
2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: kaqz4zJ/MuWYQ9hfesJKbrsRtDD7voKWYfVmYJMXQgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:86:91:8b:d2:e1:2c:91:16:9d:ec:8d:05:86:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Validity
Not Before: Jul 24 00:01:41 2026 GMT
Not After : Jul 25 00:01:41 2026 GMT
Subject: CN=80ceb902ab36b29095e3d9c757d3d79755ab0f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:e7:a5:d6:2e:ea:df:68:d8:58:84:29:7c:
da:62:28:7e:14:64:d4:46:5a:f5:c1:58:41:fc:cb:
f9:6e:f1:21:22:59:d2:fb:2c:67:cd:8e:5f:14:20:
06:8e:45:78:37:24:77:c4:d8:bd:40:4e:2f:12:0b:
59:1d:46:36:41:51:99:5f:19:8b:b0:7e:b1:19:45:
ae:b5:04:3d:d4:9f:ab:cf:3d:ce:32:28:76:c8:8e:
8e:14:8d:85:84:a7:d2:69:c9:fa:24:7e:05:e1:ca:
ed:c4:78:3c:b4:07:78:0d:35:cb:d7:7f:9e:39:d1:
bb:ba:cf:24:0b:a8:b8:c0:ec:38:43:1a:c0:f0:01:
88:b2:fb:07:3a:20:c6:aa:21:cd:42:a7:e0:d5:cd:
a0:83:0e:ce:b2:13:09:c9:ad:2a:cd:3a:a5:1b:2c:
5b:e1:f8:6f:2a:7d:e0:60:1c:fd:b8:81:53:95:85:
93:d3:99:16:cd:1b:a9:d9:7c:94:ee:0c:71:28:3c:
bb:49:2a:df:4a:21:cb:69:67:ab:8c:ab:9c:db:4d:
96:fd:57:bd:7d:83:f0:16:3d:c8:19:65:2c:29:71:
c9:de:dd:18:25:af:2c:f4:93:89:cd:6a:c5:46:b3:
b9:ef:3e:14:75:79:9f:9c:f3:c3:04:be:8a:89:7a:
86:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CE:B9:02:AB:36:B2:90:95:E3:D9:C7:57:D3:D7:97:55:AB:0F:88
X509v3 Authority Key Identifier:
keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:1a:23:06:c5:83:ae:e8:46:d8:4a:07:54:5b:5e:3e:03:9c:
5d:87:7e:16:2e:1b:4c:73:14:61:42:92:14:9f:9d:4b:38:c2:
f2:45:38:30:6d:45:00:4a:5a:fc:6d:04:18:cb:40:1a:c0:3d:
8a:18:5a:4e:1d:f8:52:36:84:30:78:72:b7:f3:6a:62:db:4f:
45:ac:7f:d1:ee:7f:0d:40:c1:6a:d8:56:20:3f:91:9b:7d:c2:
b7:88:bb:1e:74:45:5b:1b:29:e0:55:a0:41:2b:b6:cf:20:9f:
4c:51:1f:21:7a:44:8d:6e:54:db:61:68:e3:ab:7b:f7:85:19:
3d:75:15:32:03:b0:1a:36:22:0e:2a:fe:ba:d8:ad:92:4f:7d:
b6:33:62:bd:b7:55:0d:a3:15:ea:2d:80:75:cd:39:14:26:c4:
47:b9:66:11:f1:c4:cc:69:21:ed:4e:b7:9e:b5:d0:61:b4:43:
01:24:af:57:cf:d2:69:ef:cb:a1:b4:98:de:da:ad:2f:af:34:
5b:aa:99:19:43:7c:69:cd:5c:a3:c7:6e:59:9d:67:67:ff:e5:
e8:0c:be:05:a5:ef:df:d1:07:a8:4f:27:7d:f0:45:d6:52:63:
fb:7a:31:95:d9:08:16:4d:d1:95:87:06:c1:2e:ac:49:42:46:
bd:f3:47:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:17:23 2026 by rpki-client