Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
File: DspuBsaCS9G4ERg-Dhf6GUltJhw.mft (raw, json)
Hash identifier: Pe8z1/Y6sV/H0tuPo9CNxHTUuo5Nngul51XJjpCrXF0=
Subject key identifier: FD:37:DC:74:22:C0:E0:AA:CC:68:04:D8:56:CF:85:1F:F5:D2:6B:63
Authority key identifier: 0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
Certificate issuer: /CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Certificate serial: 019E1EA32568DC18607794D52C429EC190B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
Manifest number: 10FA
Signing time: Wed 13 May 2026 00:01:08 +0000
Manifest this update: Wed 13 May 2026 00:01:08 +0000
Manifest next update: Thu 14 May 2026 00:01:08 +0000
Files and hashes: 1: 3r078bir07UdtDuJHV1FxgMDSKQ.roa (hash: OqiAJCqUSBU1voAMZmIIFG4MlxPRLpnSY78JVHA9lkw=)
2: DspuBsaCS9G4ERg-Dhf6GUltJhw.crl (hash: aSBPUKvpDzROlwP68NaCktOsiGRl9WAwMRxWpVZNb/w=)
3: IDJTjBeFF1LDRx8gc3tSt6fCOVQ.roa (hash: dfSJ9a/11mLVMI7/XHCzsNnkPUfKtZgrRVtgHCRNHkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:25:68:dc:18:60:77:94:d5:2c:42:9e:c1:90:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Validity
Not Before: May 13 00:01:08 2026 GMT
Not After : May 14 00:01:08 2026 GMT
Subject: CN=fd37dc7422c0e0aacc6804d856cf851ff5d26b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:09:d3:83:95:17:01:89:94:58:85:90:b4:69:
40:15:b8:3a:a7:9b:1a:68:04:ca:81:9f:c9:4c:e7:
d5:65:c8:ea:7c:a7:d1:bc:7c:42:a2:5f:b7:99:d5:
b6:1f:07:62:77:e3:88:76:c2:77:6a:37:6f:e6:99:
5f:f1:4c:6a:46:c3:11:2b:83:88:b6:7d:bf:07:0d:
3d:c9:fa:a9:33:8c:0f:30:ef:19:b0:d0:02:53:ce:
ff:58:00:63:e0:4f:72:b4:cf:21:fd:58:c6:ff:bb:
4d:65:59:b1:78:6b:ce:c7:ea:ee:1a:3e:c8:c6:cd:
1d:50:ab:94:52:b4:34:c8:22:e6:37:b5:ca:14:1c:
f3:61:dc:1f:5b:93:c7:b4:18:a9:87:9a:8d:11:0b:
80:05:98:5d:99:1b:f9:42:b0:97:e2:e5:45:58:c2:
3a:d5:a6:78:d5:b3:30:cb:44:a8:d7:2b:61:ef:29:
5d:28:4d:c1:ae:54:4f:b7:4a:a4:3b:28:3b:fc:03:
02:50:c1:82:9a:78:fd:3a:1f:20:3f:96:bf:30:02:
03:04:8b:d3:50:8e:fe:4f:d6:c3:4a:d7:97:13:52:
e7:ef:c4:a3:20:87:e1:2f:08:9b:f1:50:9c:a9:64:
7f:99:4f:04:c8:40:2d:de:2a:63:91:3b:00:d8:6c:
98:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:37:DC:74:22:C0:E0:AA:CC:68:04:D8:56:CF:85:1F:F5:D2:6B:63
X509v3 Authority Key Identifier:
keyid:0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c7:28:59:e2:f5:89:40:2e:90:2e:27:61:7d:51:a5:c4:cb:
93:e0:2c:18:22:0c:58:2b:b6:d8:ea:a7:a1:df:de:cb:cd:6b:
f5:b7:62:32:ff:ba:51:ca:25:f3:b9:eb:33:8d:57:3d:0a:78:
0d:65:19:0f:79:69:b9:80:7d:3f:9a:c3:14:7f:fe:9b:00:98:
66:49:61:da:33:b2:c3:15:a5:cc:05:9a:8e:de:bc:be:b2:0e:
2d:db:ad:fe:8a:3a:bb:e9:db:fa:5b:09:7f:9f:64:b7:ef:31:
ae:57:db:f7:c8:2c:15:93:19:5a:8d:3d:a9:23:a3:8d:9e:a0:
14:51:14:f0:00:0e:67:ab:70:27:2b:af:38:3e:a2:ed:ee:60:
ca:f8:41:d0:37:3e:bd:da:96:cb:1a:79:bf:ae:ba:e8:7e:6e:
a2:56:d2:66:56:1c:80:9b:db:b8:4d:bf:79:f7:f8:55:2b:11:
43:ac:3b:91:e2:92:77:e9:b3:b0:87:d9:db:b6:98:e3:de:df:
6e:f6:29:41:2d:1a:51:b9:56:04:6e:a5:d8:f3:10:5c:94:18:
19:30:7c:0a:73:d5:27:59:79:87:0c:f2:e7:f4:c3:4c:e7:4d:
20:6a:3f:01:44:0e:46:a3:08:90:c8:b6:ba:82:c3:df:b0:ab:
32:f5:8d:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eoyVo3Bhgd5TVLEKewZC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlY2E2ZTA2YzY4MjRiZDFiODExMTgzZTBlMTdmYTE5NDk2
ZDI2MWMwHhcNMjYwNTEzMDAwMTA4WhcNMjYwNTE0MDAwMTA4WjAzMTEwLwYDVQQD
EyhmZDM3ZGM3NDIyYzBlMGFhY2M2ODA0ZDg1NmNmODUxZmY1ZDI2YjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgnTg5UXAYmUWIWQtGlAFbg6p5sa
aATKgZ/JTOfVZcjqfKfRvHxCol+3mdW2Hwdid+OIdsJ3ajdv5plf8UxqRsMRK4OI
tn2/Bw09yfqpM4wPMO8ZsNACU87/WABj4E9ytM8h/VjG/7tNZVmxeGvOx+ruGj7I
xs0dUKuUUrQ0yCLmN7XKFBzzYdwfW5PHtBiph5qNEQuABZhdmRv5QrCX4uVFWMI6
1aZ41bMwy0So1yth7yldKE3BrlRPt0qkOyg7/AMCUMGCmnj9Oh8gP5a/MAIDBIvT
UI7+T9bDSteXE1Ln78SjIIfhLwib8VCcqWR/mU8EyEAt3ipjkTsA2GyY3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP033HQiwOCqzGgE2FbPhR/10mtjMB8GA1UdIwQY
MBaAFA7KbgbGgkvRuBEYPg4X+hlJbSYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHNwdUJzYUNTOUc0RVJnLURoZjZHVWx0Smh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy85MTM3ZmYtMjA2My00Njc1LThkZTct
Y2ZkM2ZmOWZkZjdiLzEvRHNwdUJzYUNTOUc0RVJnLURoZjZHVWx0Smh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy85MTM3ZmYtMjA2My00Njc1LThkZTctY2ZkM2ZmOWZkZjdi
LzEvRHNwdUJzYUNTOUc0RVJnLURoZjZHVWx0Smh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMcoWeL1
iUAukC4nYX1RpcTLk+AsGCIMWCu22Oqnod/ey81r9bdiMv+6Ucol87nrM41XPQp4
DWUZD3lpuYB9P5rDFH/+mwCYZklh2jOywxWlzAWajt68vrIOLdut/oo6u+nb+lsJ
f59kt+8xrlfb98gsFZMZWo09qSOjjZ6gFFEU8AAOZ6twJyuvOD6i7e5gyvhB0Dc+
vdqWyxp5v6666H5uolbSZlYcgJvbuE2/eff4VSsRQ6w7keKSd+mzsIfZ27aY497f
bvYpQS0aUblWBG6l2PMQXJQYGTB8CnPVJ1l5hwzy5/TDTOdNIGo/AUQORqMIkMi2
uoLD37CrMvWNzg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:36:46 2026 by rpki-client