Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
File: DspuBsaCS9G4ERg-Dhf6GUltJhw.mft (raw, json)
Hash identifier: IGQOYqzo/9mJSsnG7to24FVLHPq87NGGpbegDyBDtxs=
Subject key identifier: 29:BA:B0:95:F9:6F:57:91:D4:E6:68:A7:0C:6E:E4:31:60:A9:CA:FB
Authority key identifier: 0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
Certificate issuer: /CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Certificate serial: 019D277209D00238AB400438917C5050871B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
Manifest number: 107A
Signing time: Thu 26 Mar 2026 00:01:18 +0000
Manifest this update: Thu 26 Mar 2026 00:01:18 +0000
Manifest next update: Fri 27 Mar 2026 00:01:18 +0000
Files and hashes: 1: 3r078bir07UdtDuJHV1FxgMDSKQ.roa (hash: OqiAJCqUSBU1voAMZmIIFG4MlxPRLpnSY78JVHA9lkw=)
2: DspuBsaCS9G4ERg-Dhf6GUltJhw.crl (hash: K6jte5Y3kUkauMgo/FY5cDluxP2f3ncZ2sJ3Vuyin44=)
3: IDJTjBeFF1LDRx8gc3tSt6fCOVQ.roa (hash: dfSJ9a/11mLVMI7/XHCzsNnkPUfKtZgrRVtgHCRNHkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:09:d0:02:38:ab:40:04:38:91:7c:50:50:87:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Validity
Not Before: Mar 26 00:01:18 2026 GMT
Not After : Mar 27 00:01:18 2026 GMT
Subject: CN=29bab095f96f5791d4e668a70c6ee43160a9cafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1b:75:04:37:13:07:c2:83:9a:d5:57:bb:39:
03:fe:61:ed:4a:2d:53:8b:e6:ac:47:6e:eb:6b:bb:
bf:7e:af:95:9a:6f:65:34:19:f1:f9:fa:f3:e0:65:
0e:be:62:a5:ee:66:44:3b:e8:d9:fa:88:26:c0:dc:
1b:ef:8b:71:bc:8b:8d:f9:e9:f7:dc:42:0d:99:68:
6f:ee:38:42:ee:f7:8e:57:bd:4a:a2:67:a3:72:4e:
bf:18:f0:f9:0c:1b:81:f5:6c:d9:42:05:e4:0c:4b:
a5:af:81:3f:3b:b9:ea:41:13:5a:d1:3c:39:40:34:
08:55:83:82:fb:9e:82:bb:65:b6:25:d6:58:f3:f9:
8b:2e:89:cb:33:88:ac:a7:95:1c:2e:b3:6b:7b:76:
64:d9:16:bd:e4:52:b6:3a:42:3e:d3:b6:f4:aa:a8:
e1:d8:c9:cc:c6:0d:e8:81:a6:f4:6d:76:67:de:3d:
e3:ab:1d:ce:1d:65:34:ca:88:47:4f:77:b1:e3:a2:
bd:7c:e9:86:91:ea:ac:73:5d:8f:7e:74:41:6f:4c:
85:16:a5:bd:2b:0d:b8:b2:c5:d9:42:c7:99:c9:fe:
01:e1:7f:4e:27:d3:c8:3e:21:dd:e6:4f:61:db:d5:
d2:d7:ce:ce:20:9b:d9:5c:27:1c:42:8d:9c:97:2e:
c8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BA:B0:95:F9:6F:57:91:D4:E6:68:A7:0C:6E:E4:31:60:A9:CA:FB
X509v3 Authority Key Identifier:
keyid:0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:52:3a:ae:84:e3:42:12:b1:98:a4:ef:4c:2e:e2:fa:61:9f:
1d:96:15:5b:99:2b:47:d0:9f:4d:70:92:c4:c2:b8:07:12:fc:
22:ae:2c:85:8f:48:f6:59:d5:bd:2f:49:fe:01:d9:a5:0b:bd:
80:8d:a0:09:63:72:b5:61:5d:ec:9f:56:eb:44:6e:a8:cb:8c:
ab:18:5f:47:a6:52:ff:60:32:68:fe:72:fc:3d:ce:10:29:aa:
d2:43:ca:78:f2:92:a8:ae:9a:07:47:11:2d:00:29:72:2e:35:
c0:8d:d3:c9:df:3c:95:3f:ac:66:bc:40:f4:c9:7f:0a:61:e6:
14:52:2f:0b:23:1d:04:47:7f:d8:fd:cd:29:25:90:9c:45:a6:
2f:fa:79:83:2a:0f:72:4e:0d:ff:d6:31:13:75:90:19:01:f4:
f8:b0:66:bb:b0:0c:ad:e5:54:71:0d:30:22:8a:9b:f9:0e:52:
20:c5:9a:1e:de:09:6e:2d:37:66:c5:44:d2:ef:7d:71:72:f1:
38:2d:4e:b8:51:de:44:89:6c:1b:1e:28:16:44:14:5c:34:86:
4b:8e:f3:5e:b5:c2:1a:fa:e7:8b:cf:1c:1d:08:10:f3:64:21:
dd:3f:44:8a:69:d9:c0:96:14:1c:1c:c6:1b:10:cd:ed:18:7b:
42:61:fa:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:13:43 2026 by rpki-client