Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json)
Hash identifier: EoEixaJVfo1PFxaNt3URRLQ/GQT9F5M3tofD4ECIR4c=
Subject key identifier: 37:ED:AC:D9:C2:82:DC:32:FF:91:9D:FE:0E:22:EA:3F:01:4E:26:0A
Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Certificate serial: 01A0D7CC3E677058BA36BF8B97B1D514D290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
Manifest number: 08DC
Signing time: Fri 25 Sep 2026 09:01:21 +0000
Manifest this update: Fri 25 Sep 2026 09:01:21 +0000
Manifest next update: Sat 26 Sep 2026 09:01:21 +0000
Files and hashes: 1: WdrS0-eTVbTpcKvZNgVuCTckKKo.roa (hash: dDBCNbLwPdkAiREI4hqWEs1arJVi4Mi0tvtKIDF579g=)
2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: 4ms6lIPTZ+q1AGg42VpuMpP81IBd0+pg3ZXh+DLFXpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:3e:67:70:58:ba:36:bf:8b:97:b1:d5:14:d2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Validity
Not Before: Sep 25 09:01:21 2026 GMT
Not After : Sep 26 09:01:21 2026 GMT
Subject: CN=37edacd9c282dc32ff919dfe0e22ea3f014e260a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:05:4e:1e:c0:05:46:ba:f9:2a:0f:0a:21:
f4:0e:0d:3c:e1:f1:39:26:bf:fb:e2:a1:93:3f:fb:
c0:14:10:c8:b8:d8:f9:8f:f4:c2:1c:d9:16:c0:3a:
09:09:a9:4b:35:93:de:60:4b:97:f7:95:f7:81:17:
30:fb:13:b6:db:40:1f:59:ca:0d:78:68:4d:e8:15:
7b:ad:5a:89:64:91:94:d7:75:1d:4f:9b:20:9b:81:
c8:e5:94:1b:94:63:7b:4d:11:9e:27:2a:d6:20:ce:
e2:44:b8:22:3b:32:e4:b4:e9:80:b0:de:99:2e:55:
05:e0:62:24:3c:81:07:ed:d4:3c:6a:12:66:56:a2:
eb:be:cb:fa:96:24:d7:6f:a8:a8:4d:12:61:e3:17:
e4:29:29:cb:44:40:9f:ef:23:51:3a:2a:b4:86:b9:
1d:dc:f3:5f:74:c4:c9:f3:8c:6a:26:a1:5e:be:51:
bc:2c:04:59:05:c8:15:b1:38:ec:b9:af:1f:ce:fb:
4a:00:88:69:61:64:72:05:05:00:25:2e:fd:cf:21:
c8:b0:80:fd:bc:e3:9a:c2:4c:57:67:d9:67:bb:4f:
31:ae:04:19:05:14:06:6c:1b:86:f4:d7:af:47:29:
c0:ad:43:34:c0:14:da:3c:33:c1:24:33:10:13:d4:
ea:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:ED:AC:D9:C2:82:DC:32:FF:91:9D:FE:0E:22:EA:3F:01:4E:26:0A
X509v3 Authority Key Identifier:
keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:7b:12:84:e1:55:b1:6b:5d:83:12:1e:ee:03:d2:1a:2a:9d:
ae:cd:d2:47:45:1c:60:66:83:92:0b:f8:07:aa:95:31:73:d0:
7f:67:e4:2f:ed:27:1f:ed:c3:58:2a:06:4c:79:91:05:39:38:
05:d9:23:d1:83:56:93:ca:c9:58:11:ec:1a:df:f4:49:f2:1d:
6a:5d:a8:4c:25:70:c3:e9:c0:14:6f:32:0e:54:3f:ae:72:a0:
09:e7:d5:b6:6a:21:3d:34:da:1b:aa:9b:5f:e7:e0:5c:f3:9d:
05:0b:35:ce:a1:2a:fc:d2:dd:74:5b:a0:21:c6:75:e1:41:d4:
f6:01:fc:00:71:df:0e:ce:1e:8e:80:c2:1d:33:55:bc:3f:c6:
b8:f2:0e:b3:34:2d:be:05:4d:06:78:c0:10:51:a8:a1:59:62:
d7:6f:92:b6:60:30:a3:26:c3:26:4e:69:a8:5b:a0:af:b8:7a:
5f:7f:0e:1a:23:2b:f3:89:d0:0b:d2:af:58:e6:28:78:47:37:
8e:29:65:57:2e:3f:4b:a2:bf:43:d4:b3:3e:fc:ed:84:41:09:
89:57:68:25:1b:46:2a:51:df:b4:42:58:c1:48:71:11:54:95:
45:8d:ea:e0:d7:b3:bf:49:10:5e:f8:cf:29:b0:60:c7:a3:2e:
c7:be:87:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:52:51 2026 by rpki-client