Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
File: dXXVPbgi0l24J9A3fL6wbSykGss.mft (raw, json)
Hash identifier: NSwiMyEta5B23ngZYN53VUUAFvLziHxnOfIBJUgmUAg=
Subject key identifier: 2D:4D:91:31:11:55:DC:08:7C:6D:A2:6C:9D:6F:66:4E:C0:06:B9:EC
Authority key identifier: 75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
Certificate issuer: /CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Certificate serial: 019D2771F34B8148AD7813D3CFA773EB7BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
Manifest number: 06F3
Signing time: Thu 26 Mar 2026 00:01:12 +0000
Manifest this update: Thu 26 Mar 2026 00:01:12 +0000
Manifest next update: Fri 27 Mar 2026 00:01:12 +0000
Files and hashes: 1: WdrS0-eTVbTpcKvZNgVuCTckKKo.roa (hash: dDBCNbLwPdkAiREI4hqWEs1arJVi4Mi0tvtKIDF579g=)
2: dXXVPbgi0l24J9A3fL6wbSykGss.crl (hash: 2fvx7Bk+X71PAwtJncHsz/dF8i29zbjpYdnLIhKJCKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f3:4b:81:48:ad:78:13:d3:cf:a7:73:eb:7b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7575d53db822d25db827d0377cbeb06d2ca41acb
Validity
Not Before: Mar 26 00:01:12 2026 GMT
Not After : Mar 27 00:01:12 2026 GMT
Subject: CN=2d4d91311155dc087c6da26c9d6f664ec006b9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ce:e0:ba:88:bb:ce:1e:3e:82:3c:9a:81:13:
9d:4d:8b:16:86:ef:31:2e:9a:b0:bf:0a:99:3a:49:
56:89:11:e2:08:47:5a:f5:13:8f:7b:78:e9:f9:96:
77:d1:57:28:0a:ae:45:72:ca:1f:4a:59:d9:a7:2a:
de:45:bd:dc:5a:4d:f1:23:03:4c:8a:5c:b4:8e:45:
78:66:cb:61:aa:c9:72:c4:8c:04:14:01:da:c1:b5:
65:55:5b:31:7b:5d:a5:e7:3a:40:c1:8d:b2:8e:8c:
b1:22:15:4c:08:1f:9e:e0:be:20:f4:90:41:f9:fc:
a0:2f:c3:46:7e:33:f9:ad:bd:bc:df:fe:64:72:ef:
24:b5:87:06:e7:5a:60:67:17:b4:b3:04:bd:6e:f2:
3d:b9:0f:df:3c:ae:eb:65:89:77:60:53:2c:0f:5b:
16:b9:16:ca:4c:17:2d:f7:96:c3:6c:84:a6:36:f2:
ed:90:90:72:fc:68:50:05:9b:c2:b6:e8:91:f1:23:
e2:d6:03:44:cb:a6:f6:3b:ac:b6:31:b4:60:42:fc:
c9:34:5a:21:dc:70:d3:69:4f:60:a8:3a:70:be:2e:
36:bf:75:fa:35:1f:3f:51:f2:8c:0a:18:6c:d5:d7:
c9:66:3d:13:65:b1:d3:4b:09:2e:66:6f:5a:50:f8:
11:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4D:91:31:11:55:DC:08:7C:6D:A2:6C:9D:6F:66:4E:C0:06:B9:EC
X509v3 Authority Key Identifier:
keyid:75:75:D5:3D:B8:22:D2:5D:B8:27:D0:37:7C:BE:B0:6D:2C:A4:1A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXXVPbgi0l24J9A3fL6wbSykGss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f7f0f2-479e-4f03-baa2-061ed9371475/1/dXXVPbgi0l24J9A3fL6wbSykGss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3a:cc:93:a4:9a:01:45:18:e6:08:b5:3b:62:06:94:e5:9c:
f2:fe:75:02:f1:8f:f2:f1:37:e2:15:06:52:49:67:f1:f2:71:
9c:26:c8:8b:c5:35:5a:0d:8e:53:3b:ca:ef:c0:b2:fa:f7:28:
d0:16:2b:0b:65:86:54:fb:31:ca:06:e4:4f:72:be:fe:de:d8:
24:38:bd:23:8e:b3:48:bc:d2:be:d7:02:5e:92:94:2b:6b:86:
9d:df:ff:6a:6e:76:2d:78:cd:b9:df:05:6a:1b:5f:4e:e0:cc:
e9:44:4a:59:06:be:53:f3:9c:76:4d:4c:67:1c:b8:6d:a3:99:
f5:c3:54:1e:3b:c9:71:14:e1:68:0d:70:96:21:df:0a:b2:bf:
44:03:9d:67:2f:aa:b1:e6:7c:33:88:9e:e3:da:72:7c:95:52:
a3:dd:c6:13:d5:bd:81:cd:89:63:81:26:0f:9f:77:84:28:8f:
c0:42:7a:f6:b2:cc:b5:ef:d2:d9:ef:2b:c8:54:0b:4b:4e:cb:
36:4a:d4:3f:ac:f8:95:4b:a9:03:ba:8e:62:ca:c1:7f:5b:3e:
e2:85:91:b3:fd:d2:46:35:bb:00:43:ab:0e:67:7b:85:eb:93:
de:f8:15:b9:4d:66:62:cf:8b:1f:91:bc:e0:cb:10:80:b1:82:
98:01:a0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:31 2026 by rpki-client