Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
File: DspuBsaCS9G4ERg-Dhf6GUltJhw.mft (raw, json)
Hash identifier: ckgO9qi3vA20pq2MqRmuGtSzSiH2ZAkbwOaNI6tCkgY=
Subject key identifier: 8B:32:1A:70:E7:D5:75:0B:ED:09:C2:7D:52:1D:B5:25:F4:2B:A7:62
Authority key identifier: 0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
Certificate issuer: /CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Certificate serial: 01A0D9BB65E3E3DDDBF359295C8D784B6EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
Manifest number: 1264
Signing time: Fri 25 Sep 2026 18:02:12 +0000
Manifest this update: Fri 25 Sep 2026 18:02:12 +0000
Manifest next update: Sat 26 Sep 2026 18:02:12 +0000
Files and hashes: 1: 3r078bir07UdtDuJHV1FxgMDSKQ.roa (hash: OqiAJCqUSBU1voAMZmIIFG4MlxPRLpnSY78JVHA9lkw=)
2: DspuBsaCS9G4ERg-Dhf6GUltJhw.crl (hash: ILeL/B2CPCjxlEJQeCeAeVk1F+DbznSHIrRF77a9Grw=)
3: IDJTjBeFF1LDRx8gc3tSt6fCOVQ.roa (hash: dfSJ9a/11mLVMI7/XHCzsNnkPUfKtZgrRVtgHCRNHkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:65:e3:e3:dd:db:f3:59:29:5c:8d:78:4b:6e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Validity
Not Before: Sep 25 18:02:12 2026 GMT
Not After : Sep 26 18:02:12 2026 GMT
Subject: CN=8b321a70e7d5750bed09c27d521db525f42ba762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bd:5f:ed:ea:b9:6a:cc:05:ba:55:0d:67:33:
e2:91:d9:2a:11:84:54:81:b8:43:c4:01:f3:3c:30:
44:99:3b:45:79:32:ff:38:cd:86:4e:0d:53:4e:77:
7f:53:c6:f5:cc:ef:2d:9a:7b:75:94:c9:32:97:5a:
cc:a6:c3:73:af:a0:41:43:9c:a7:df:ef:fb:61:b3:
ad:b2:a1:6c:af:23:e0:40:07:e4:02:1a:49:0b:c5:
4d:e1:66:a0:92:53:d6:a5:63:e4:08:b0:d6:ed:1e:
4a:e1:9e:1a:79:d6:7a:b6:0c:17:7c:bf:17:f4:ed:
5c:25:0d:6a:ee:12:26:80:a2:70:7e:11:46:c2:b0:
2c:a9:13:67:7b:e6:e5:88:14:13:ad:09:6d:f4:48:
29:43:1d:95:f1:bd:a7:26:22:1a:98:b4:f8:fb:f5:
36:4e:08:d6:51:32:c9:24:d2:66:38:64:35:53:32:
6e:83:0d:71:79:96:e6:f6:4a:17:4c:c9:22:5a:8e:
d2:6f:19:ab:e9:1a:d1:65:28:71:ed:e6:ad:42:95:
f3:ee:24:d4:4c:5f:f3:43:52:59:a7:62:3d:44:52:
ea:23:76:a2:fd:95:79:ef:53:0b:17:02:3e:7d:5c:
93:d5:70:48:57:c4:e2:36:c8:ab:37:65:00:bb:bc:
90:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:32:1A:70:E7:D5:75:0B:ED:09:C2:7D:52:1D:B5:25:F4:2B:A7:62
X509v3 Authority Key Identifier:
keyid:0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:61:3a:b9:63:ee:f2:eb:56:46:0d:e9:52:6e:05:64:0a:51:
76:e6:ca:7a:b9:86:c4:1d:8a:07:11:d6:b2:2c:77:f8:ed:0b:
a0:0f:b3:2b:f1:85:49:42:9a:57:d9:10:3c:58:27:a8:8a:55:
58:07:d7:c4:e5:a0:2e:eb:16:db:8e:21:05:ff:a1:4d:2b:e0:
2c:8a:7f:69:96:47:a8:a6:b5:d8:db:1c:a0:96:61:dc:d9:4a:
94:e7:5c:5c:cc:0d:2a:32:22:c7:81:ae:1c:6f:58:82:1b:b3:
0a:78:d4:22:83:f5:39:57:41:84:c4:5e:33:2d:07:3c:a9:a3:
a7:1a:19:f9:de:2c:96:71:9a:0a:65:b6:dc:9b:64:0b:d0:73:
f4:5a:26:05:c4:34:70:44:a6:2b:89:37:f1:dc:22:e8:45:fb:
b5:0a:b7:1f:3a:49:d2:0d:0c:f4:c3:cc:42:69:d5:71:05:05:
c6:11:ce:22:c7:5d:ea:64:37:f3:c1:c5:7d:b4:f1:b0:11:13:
14:93:56:a5:df:56:9d:b2:4b:88:4a:ca:14:7d:45:72:c8:83:
48:79:24:76:7f:0f:f6:fd:0c:3a:60:dd:ff:cb:ce:de:f7:ca:
34:d0:fd:d1:76:7b:d4:bf:4d:73:0f:20:3e:de:a1:23:67:81:
af:dc:dd:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZu2Xj493b81kpXI14S276MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlY2E2ZTA2YzY4MjRiZDFiODExMTgzZTBlMTdmYTE5NDk2
ZDI2MWMwHhcNMjYwOTI1MTgwMjEyWhcNMjYwOTI2MTgwMjEyWjAzMTEwLwYDVQQD
Eyg4YjMyMWE3MGU3ZDU3NTBiZWQwOWMyN2Q1MjFkYjUyNWY0MmJhNzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk71f7eq5aswFulUNZzPikdkqEYRU
gbhDxAHzPDBEmTtFeTL/OM2GTg1TTnd/U8b1zO8tmnt1lMkyl1rMpsNzr6BBQ5yn
3+/7YbOtsqFsryPgQAfkAhpJC8VN4WagklPWpWPkCLDW7R5K4Z4aedZ6tgwXfL8X
9O1cJQ1q7hImgKJwfhFGwrAsqRNne+bliBQTrQlt9EgpQx2V8b2nJiIamLT4+/U2
TgjWUTLJJNJmOGQ1UzJugw1xeZbm9koXTMkiWo7Sbxmr6RrRZShx7eatQpXz7iTU
TF/zQ1JZp2I9RFLqI3ai/ZV571MLFwI+fVyT1XBIV8TiNsirN2UAu7yQ1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsyGnDn1XUL7QnCfVIdtSX0K6diMB8GA1UdIwQY
MBaAFA7KbgbGgkvRuBEYPg4X+hlJbSYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHNwdUJzYUNTOUc0RVJnLURoZjZHVWx0Smh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy85MTM3ZmYtMjA2My00Njc1LThkZTct
Y2ZkM2ZmOWZkZjdiLzEvRHNwdUJzYUNTOUc0RVJnLURoZjZHVWx0Smh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy85MTM3ZmYtMjA2My00Njc1LThkZTctY2ZkM2ZmOWZkZjdi
LzEvRHNwdUJzYUNTOUc0RVJnLURoZjZHVWx0Smh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2E6uWPu
8utWRg3pUm4FZApRdubKermGxB2KBxHWsix3+O0LoA+zK/GFSUKaV9kQPFgnqIpV
WAfXxOWgLusW244hBf+hTSvgLIp/aZZHqKa12NscoJZh3NlKlOdcXMwNKjIix4Gu
HG9YghuzCnjUIoP1OVdBhMReMy0HPKmjpxoZ+d4slnGaCmW23JtkC9Bz9FomBcQ0
cESmK4k38dwi6EX7tQq3HzpJ0g0M9MPMQmnVcQUFxhHOIsdd6mQ388HFfbTxsBET
FJNWpd9WnbJLiErKFH1FcsiDSHkkdn8P9v0MOmDd/8vO3vfKNND90XZ71L9Ncw8g
Pt6hI2eBr9zdQQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 01:44:55 2026 by rpki-client