Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
File: DSXP1Saq1ypMj0cz-soPTbf592c.mft (raw, json)
Hash identifier: +3yF8nJLFPEcN45BufJyIkloj/EUfgUvLJv1Xz8YcLg=
Subject key identifier: 61:B3:74:85:07:00:36:19:EC:90:9D:C4:04:20:1B:59:05:8E:B1:CF
Authority key identifier: 0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
Certificate issuer: /CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Certificate serial: 019D27A8E10BAB48717E0061A32FAE61AE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
Manifest number: 0243
Signing time: Thu 26 Mar 2026 01:01:12 +0000
Manifest this update: Thu 26 Mar 2026 01:01:12 +0000
Manifest next update: Fri 27 Mar 2026 01:01:12 +0000
Files and hashes: 1: 1-VF1HeLc0TVIs0YYW6YwoXZdo8c.asa (hash: KLFgdmKccdlHIAP3ZnS+JYnP7Rs5RZwMaM2WwUNBXZU=)
2: Al7UlQjrzC_B0KidPO1VngOHAZs.roa (hash: RboRF3P/11e8NVLi7uKrgu86UzYAOCgIgjZIHHYh4Fo=)
3: DSXP1Saq1ypMj0cz-soPTbf592c.crl (hash: Rew+U/lCUKMpalHzIWQaCWEOJCJKpB/Lh5nWFMYXsYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e1:0b:ab:48:71:7e:00:61:a3:2f:ae:61:ae:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Validity
Not Before: Mar 26 01:01:12 2026 GMT
Not After : Mar 27 01:01:12 2026 GMT
Subject: CN=61b3748507003619ec909dc404201b59058eb1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:32:4a:77:d5:02:bb:64:ba:57:85:19:ac:9a:
ca:c2:9d:0c:f2:b7:37:78:36:ed:8e:a6:9a:a2:cc:
88:bf:48:f2:d8:f3:88:39:db:81:be:10:ca:1a:a1:
c8:3d:69:42:b0:42:7c:34:31:9e:63:80:35:69:e1:
27:ec:3e:e4:ef:11:4a:f4:1d:53:85:13:a7:a4:89:
57:fd:80:ba:b1:21:c8:bc:df:cb:c0:c3:90:a4:e9:
19:7c:51:1f:32:ff:2d:6c:7f:e7:93:4e:88:1c:90:
5b:bb:5c:22:5d:c5:36:91:e6:f6:08:76:61:ca:74:
56:8c:b1:b7:51:8b:13:9e:e7:a6:ef:4d:3b:95:12:
d7:75:d1:6c:dd:43:f3:56:74:4f:85:b8:e2:9e:06:
4b:fb:a4:58:cb:4c:3d:a9:89:76:99:cf:13:7b:99:
36:dc:ce:22:07:d7:f8:04:42:38:06:fe:88:5a:29:
62:63:cf:90:72:42:e1:41:2f:06:48:3f:cd:36:d1:
18:bf:4e:14:0c:2b:de:e1:87:85:04:10:b6:01:fa:
4b:f3:5b:61:28:38:8f:b3:38:cc:2a:52:5a:4e:ce:
9d:af:92:80:7c:7d:39:47:28:9d:a1:4a:2b:31:78:
a8:df:d9:d9:3d:95:b5:ce:4f:b3:03:64:83:3e:e7:
6a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B3:74:85:07:00:36:19:EC:90:9D:C4:04:20:1B:59:05:8E:B1:CF
X509v3 Authority Key Identifier:
keyid:0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:15:14:3a:37:5c:99:76:05:07:97:ee:4e:7d:29:e2:3e:c6:
34:ee:0f:cc:4c:0f:d6:46:d5:52:ce:05:eb:d0:6a:3f:0f:21:
2d:b6:d5:ee:c6:69:84:e9:94:38:dd:b8:76:e3:83:e3:04:78:
38:b6:25:df:b6:17:13:bf:ca:f3:cc:27:c3:0e:46:0e:69:86:
20:e4:94:53:09:3d:b7:b0:0d:43:df:07:dc:e9:0c:3f:df:48:
4c:df:5c:cb:f0:f3:18:d6:fd:d7:44:a8:ed:4b:fe:fd:dc:68:
ae:ca:b9:a4:9b:b7:da:b2:ac:65:7f:78:8e:87:0d:24:25:73:
40:a3:da:82:bc:15:c7:19:06:b8:b7:20:7f:62:14:2c:59:6a:
df:87:a4:c1:5e:67:fa:43:86:2a:45:7f:12:33:15:5e:3a:5f:
de:c1:8c:b0:4a:89:06:32:f4:11:6f:b4:bf:8c:08:5e:9d:a7:
d9:1b:d6:76:d5:91:3e:b7:36:78:05:38:36:d3:2e:39:d3:f7:
af:08:41:3a:11:bb:67:c2:2f:39:4b:20:8d:07:b3:d3:56:c7:
7d:69:09:8a:b1:b4:29:f2:38:2f:3f:27:09:bd:20:12:4a:0f:
e5:09:6e:5b:fc:55:b4:50:44:16:ec:81:12:9a:b5:67:59:a4:
6a:f8:c8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:52 2026 by rpki-client