Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
File: DspuBsaCS9G4ERg-Dhf6GUltJhw.mft (raw, json)
Hash identifier: l7Tzrqy5POoInnoshR9SQe6cYFTdF6hLpDF2xRgvrZA=
Subject key identifier: 52:1A:3E:06:41:39:1D:94:55:3E:C0:16:F5:00:30:1C:EE:AC:C0:A3
Authority key identifier: 0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
Certificate issuer: /CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Certificate serial: 019F916D47555B3FB6AC17509FFEEB54277D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
Manifest number: 11BA
Signing time: Fri 24 Jul 2026 00:01:25 +0000
Manifest this update: Fri 24 Jul 2026 00:01:25 +0000
Manifest next update: Sat 25 Jul 2026 00:01:25 +0000
Files and hashes: 1: 3r078bir07UdtDuJHV1FxgMDSKQ.roa (hash: OqiAJCqUSBU1voAMZmIIFG4MlxPRLpnSY78JVHA9lkw=)
2: DspuBsaCS9G4ERg-Dhf6GUltJhw.crl (hash: 5oj0yEUf6qErka8yeY1rpygM2gVtMwcTp7ap3EnRGX8=)
3: IDJTjBeFF1LDRx8gc3tSt6fCOVQ.roa (hash: dfSJ9a/11mLVMI7/XHCzsNnkPUfKtZgrRVtgHCRNHkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:47:55:5b:3f:b6:ac:17:50:9f:fe:eb:54:27:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Validity
Not Before: Jul 24 00:01:25 2026 GMT
Not After : Jul 25 00:01:25 2026 GMT
Subject: CN=521a3e0641391d94553ec016f500301ceeacc0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:55:6e:63:dc:68:61:65:73:c1:5c:b3:2d:
07:0b:d6:f6:ff:11:96:45:8b:ad:34:dc:5c:f6:5f:
ab:d3:c4:29:40:2c:1f:27:9b:77:e8:7e:5c:d0:9e:
18:10:a7:53:42:13:e9:64:2b:0c:73:a2:7c:2e:ad:
db:3b:f8:6a:bd:9a:8d:50:5b:fa:2e:7f:f9:72:36:
a6:50:60:4b:cc:34:7a:78:81:07:8f:69:e1:4e:71:
59:9d:3c:bd:33:6d:e2:2d:fe:70:63:9e:45:b4:55:
5f:dc:3f:77:13:22:ef:16:2b:d6:e6:81:7a:01:41:
7d:94:a2:7d:a2:da:c9:46:87:56:db:54:fa:f0:06:
ae:53:ad:b5:c5:ef:b7:56:ad:e0:e2:8d:8b:e6:f8:
f9:24:4f:2b:38:b4:fa:dc:51:f9:41:27:ad:08:80:
06:61:d6:71:9e:57:99:d0:19:65:84:c3:be:77:15:
9b:df:41:54:4e:d7:64:cc:70:79:d4:95:d2:d2:8e:
76:f4:bc:c5:53:81:69:44:e5:d2:40:ef:73:aa:36:
f5:4e:85:88:95:f8:5e:3d:55:86:8e:e6:23:bf:30:
7f:29:4e:e1:38:a8:2f:e3:0d:ad:61:d5:1c:14:9d:
0a:8d:fc:62:e6:fb:42:8b:44:e7:9b:b0:f1:7a:f4:
18:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1A:3E:06:41:39:1D:94:55:3E:C0:16:F5:00:30:1C:EE:AC:C0:A3
X509v3 Authority Key Identifier:
keyid:0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:8e:31:16:15:db:8d:ef:c4:d7:e9:15:91:ce:e3:3a:cb:9b:
07:99:e4:00:45:a1:c2:7e:cd:d4:3c:7c:2e:13:79:37:69:87:
5c:26:5f:1a:60:6b:52:ab:6f:f0:fc:52:f9:23:0f:0e:3f:0e:
dc:12:b3:ad:f5:b9:c0:f1:7d:b4:b5:ba:be:26:ab:ff:3f:67:
aa:2c:82:bf:81:68:91:73:9a:06:d4:e1:d4:d6:1d:c5:ab:ad:
27:5a:71:b7:61:4c:2e:2f:74:d2:2e:93:27:35:c7:ba:30:9b:
21:cf:d1:d0:71:92:15:5e:55:f8:2a:b1:ee:ae:08:cb:47:87:
11:1b:e4:3e:47:fa:7b:12:65:2b:8c:32:ff:ab:85:e3:87:6f:
7f:f3:1f:57:96:e2:21:4b:2e:f0:bd:f3:05:94:53:99:07:2a:
d3:23:19:28:32:a8:46:da:93:4e:0e:5e:86:fa:97:a8:72:5a:
e3:8b:8c:02:2e:82:9b:16:87:78:9c:dd:46:d9:89:47:02:af:
d5:df:63:7d:8a:ba:3b:bf:66:55:ae:14:2c:8a:9c:e1:4e:ad:
6c:a9:ca:81:3f:ff:3e:87:a9:ea:e2:22:ef:1b:23:37:91:07:
ca:8d:82:40:1b:44:53:2f:7e:72:e2:a7:24:fa:c3:bc:4f:ed:
33:e7:11:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:10 2026 by rpki-client