Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
File: DspuBsaCS9G4ERg-Dhf6GUltJhw.mft (raw, json)
Hash identifier: K0kgeGJj6Sx3CFeXjzcn84xREEq7uWobiEXXKMRZ5nk=
Subject key identifier: 90:B6:FC:4F:4D:6A:49:F5:2A:59:94:27:98:36:0C:2F:DA:B0:AF:33
Authority key identifier: 0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
Certificate issuer: /CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Certificate serial: 01A1E05FAF7EE6471BD912E0EF1EEC81B9B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
Manifest number: 12EC
Signing time: Sun 15 Nov 2026 18:02:09 +0000
Manifest this update: Sun 15 Nov 2026 18:02:09 +0000
Manifest next update: Mon 16 Nov 2026 18:02:09 +0000
Files and hashes: 1: 3r078bir07UdtDuJHV1FxgMDSKQ.roa (hash: OqiAJCqUSBU1voAMZmIIFG4MlxPRLpnSY78JVHA9lkw=)
2: DspuBsaCS9G4ERg-Dhf6GUltJhw.crl (hash: V3lLJCRp0PI7OpyJLKVqWW2GJlhT3nazcn9nNuk9EHQ=)
3: IDJTjBeFF1LDRx8gc3tSt6fCOVQ.roa (hash: dfSJ9a/11mLVMI7/XHCzsNnkPUfKtZgrRVtgHCRNHkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5f:af:7e:e6:47:1b:d9:12:e0:ef:1e:ec:81:b9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Validity
Not Before: Nov 15 18:02:09 2026 GMT
Not After : Nov 16 18:02:09 2026 GMT
Subject: CN=90b6fc4f4d6a49f52a59942798360c2fdab0af33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5f:a3:57:06:e7:01:c1:8f:b3:a3:8e:c1:c5:
21:fc:00:e8:9c:8b:78:14:1a:57:2a:f3:3c:20:57:
a1:0d:27:d0:ab:a7:ba:d0:ba:2b:9b:df:a6:09:0d:
5d:7e:fe:63:c0:7c:7a:7f:96:ca:3e:b3:6c:33:13:
00:a3:a7:37:00:09:ed:46:7f:7b:98:e0:6b:52:e8:
33:cd:c9:7b:ca:ac:b2:d9:17:b3:e0:8c:d4:8e:55:
05:b7:fc:93:39:4d:c0:7b:b0:37:6f:f5:6b:41:27:
b0:6d:c4:83:2b:a2:0a:a5:1b:10:f7:12:16:56:7c:
7c:0d:87:b9:eb:c9:88:52:a8:7e:6f:5d:14:fd:bb:
2e:3e:6a:89:af:e6:e7:2c:59:1e:83:17:fd:31:e5:
3e:b4:25:d3:a0:e4:f1:ae:7e:63:14:1f:04:f8:b8:
73:e5:b4:0a:7d:d8:95:87:03:08:21:e1:7b:37:64:
76:53:c6:94:e0:cb:49:5e:e4:07:b9:f0:b3:d3:0b:
c3:72:21:ca:b7:13:8d:2e:75:4f:03:14:51:a9:58:
83:56:6e:76:35:f9:d0:ff:4e:6f:24:f2:4e:71:de:
6c:09:3f:ad:16:9d:b2:5c:cd:12:7e:fc:c7:dc:76:
91:0e:b9:68:6e:19:1d:eb:59:1e:d4:9c:35:7e:d4:
fd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B6:FC:4F:4D:6A:49:F5:2A:59:94:27:98:36:0C:2F:DA:B0:AF:33
X509v3 Authority Key Identifier:
keyid:0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ef:f1:4c:17:d7:ab:a0:60:8a:8e:8b:43:cb:47:f2:6c:4d:
8a:a6:59:80:46:eb:0c:c6:93:41:ff:5d:ac:48:61:88:18:38:
1e:a0:34:23:c7:c2:ef:3c:ca:6d:54:f2:cb:9c:fd:b5:14:7d:
5d:9f:de:96:23:d0:b6:4e:a2:93:2f:3c:d7:61:5a:28:94:ca:
11:76:ad:9e:45:e5:ff:18:c5:2e:86:79:00:a3:13:19:c5:c4:
5d:99:ee:de:96:f1:ab:bb:22:83:21:22:64:4d:bf:cb:21:c9:
e7:dd:a5:77:81:29:e2:cb:80:70:9b:ba:8d:48:e1:cd:b8:ec:
5f:6e:a3:90:39:a4:62:14:46:d7:df:bd:20:6b:c2:e6:08:a2:
0a:4f:1d:84:bc:81:18:46:0c:97:d7:a8:d1:4f:e4:3a:ae:df:
8a:22:86:f6:20:19:f1:3b:6d:c3:d4:73:78:a9:e1:05:7b:45:
5f:6b:08:db:d8:98:02:a0:9b:05:70:88:55:1c:ab:ac:ea:40:
d0:c4:26:fc:ec:f1:f8:fd:30:77:17:13:fc:94:e4:ff:f8:9b:
62:ac:dc:de:33:04:58:00:34:08:e3:a5:b6:75:06:23:f8:6d:
77:1e:56:d3:e5:73:c3:d3:9b:d1:dc:ff:fe:8b:4f:6d:9d:ca:
2f:07:0f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:59:51 2026 by rpki-client