Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
File: DSXP1Saq1ypMj0cz-soPTbf592c.mft (raw, json)
Hash identifier: +7FAov8GWc96sUYXV4rMdLRkLV7Cbftn08UGkLedks0=
Subject key identifier: 8B:BB:C1:D7:FA:A1:5D:6D:5B:6C:26:66:46:B6:25:CD:FF:50:45:AE
Authority key identifier: 0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
Certificate issuer: /CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Certificate serial: 019E1CEBFB141278635E1B79520E6B7021D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
Manifest number: 02C2
Signing time: Tue 12 May 2026 16:01:27 +0000
Manifest this update: Tue 12 May 2026 16:01:27 +0000
Manifest next update: Wed 13 May 2026 16:01:27 +0000
Files and hashes: 1: 1-VF1HeLc0TVIs0YYW6YwoXZdo8c.asa (hash: KLFgdmKccdlHIAP3ZnS+JYnP7Rs5RZwMaM2WwUNBXZU=)
2: Al7UlQjrzC_B0KidPO1VngOHAZs.roa (hash: RboRF3P/11e8NVLi7uKrgu86UzYAOCgIgjZIHHYh4Fo=)
3: DSXP1Saq1ypMj0cz-soPTbf592c.crl (hash: pKGwHAmZhDh0GBdPP6YXdXQnvoCnzPmJTw6MBAzf/0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:fb:14:12:78:63:5e:1b:79:52:0e:6b:70:21:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Validity
Not Before: May 12 16:01:27 2026 GMT
Not After : May 13 16:01:27 2026 GMT
Subject: CN=8bbbc1d7faa15d6d5b6c266646b625cdff5045ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:07:41:d9:87:48:54:a5:67:6f:78:0e:28:
a2:d1:c0:f8:7d:f9:d1:cc:f3:47:53:a4:d2:08:fb:
7d:b6:ec:b7:34:bb:20:fd:6d:32:e4:fb:99:ac:a3:
8a:7b:04:a8:07:f3:bd:8c:7e:4c:c1:72:6b:3a:c1:
1a:9c:d3:c7:72:0f:b9:a3:8a:40:53:75:25:73:0d:
0e:25:1a:46:30:b5:45:c3:84:d3:f0:42:90:b5:a0:
54:dd:6d:85:0b:15:f3:c0:21:86:3a:d4:71:a0:0c:
6d:69:bc:43:0c:ec:6c:fe:b4:68:7e:b3:39:7d:52:
3e:ff:be:91:1a:db:49:9f:1d:f3:68:a6:6f:ea:7b:
5d:05:cf:0d:95:3c:fb:d1:e6:f4:82:55:b6:02:4d:
cb:32:a6:39:58:1c:8e:ac:43:9d:9c:27:38:b6:5b:
84:a8:09:6e:9d:b4:cf:a5:1c:f4:d8:c4:32:a3:89:
24:b4:e7:6f:12:f3:8d:ba:01:05:c8:47:26:d2:c7:
58:58:2d:79:3a:07:9c:44:e0:02:5b:50:74:f6:82:
42:e8:40:1a:f2:13:78:c9:7a:33:b4:26:6c:73:8a:
48:5e:10:fd:aa:af:ed:ff:cf:67:de:19:2f:81:68:
9b:29:6d:50:7a:89:e0:65:f9:29:5d:a9:a2:56:d5:
03:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BB:C1:D7:FA:A1:5D:6D:5B:6C:26:66:46:B6:25:CD:FF:50:45:AE
X509v3 Authority Key Identifier:
keyid:0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:14:5f:82:25:f9:88:23:fb:23:5b:01:67:d8:c7:25:5f:4f:
7a:f6:41:92:03:bb:33:72:83:a9:08:da:a0:b6:ad:eb:d2:fd:
cb:b2:31:dd:72:ea:57:a2:db:df:07:e8:b3:bf:8c:fc:18:1d:
fd:a9:c5:69:37:17:c2:14:ab:5a:f9:fa:99:ff:64:88:e0:5e:
12:ce:b1:4b:b1:10:aa:4a:e3:87:85:2f:11:b1:ec:87:d3:71:
cd:f2:bb:74:e5:11:fc:75:71:b3:d7:06:4f:06:97:1c:56:a5:
a7:97:70:f4:75:82:6e:86:82:b2:47:24:21:f5:cb:fd:f9:e1:
59:2d:5d:c0:20:8a:c3:25:ad:7f:d2:c6:d4:55:d5:b9:27:1d:
16:e8:9a:a6:8d:e3:bf:2e:dc:95:af:af:d8:24:f3:64:25:e7:
97:61:3c:a7:2d:fe:75:7b:e9:20:09:68:53:0f:ea:01:8c:c8:
66:99:7d:f1:35:67:1f:f9:fd:59:93:25:1c:16:50:71:4f:79:
af:ad:39:7d:eb:b4:c2:f4:a9:76:9d:8d:1e:83:59:45:45:fb:
e6:9a:1c:f1:77:44:20:a3:80:65:fb:55:4a:ab:50:a6:93:17:
4b:0b:56:ca:ca:08:30:6e:18:42:a8:ae:48:34:2b:42:74:e5:
15:96:ec:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c6/sUEnhjXht5Ug5rcCHXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjVjZmQ1MjZhYWQ3MmE0YzhmNDczM2ZhY2EwZjRkYjdm
OWY3NjcwHhcNMjYwNTEyMTYwMTI3WhcNMjYwNTEzMTYwMTI3WjAzMTEwLwYDVQQD
Eyg4YmJiYzFkN2ZhYTE1ZDZkNWI2YzI2NjY0NmI2MjVjZGZmNTA0NWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukMHQdmHSFSlZ294Diii0cD4ffnR
zPNHU6TSCPt9tuy3NLsg/W0y5PuZrKOKewSoB/O9jH5MwXJrOsEanNPHcg+5o4pA
U3Ulcw0OJRpGMLVFw4TT8EKQtaBU3W2FCxXzwCGGOtRxoAxtabxDDOxs/rRofrM5
fVI+/76RGttJnx3zaKZv6ntdBc8NlTz70eb0glW2Ak3LMqY5WByOrEOdnCc4tluE
qAlunbTPpRz02MQyo4kktOdvEvONugEFyEcm0sdYWC15OgecROACW1B09oJC6EAa
8hN4yXoztCZsc4pIXhD9qq/t/89n3hkvgWibKW1QeongZfkpXamiVtUD0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIu7wdf6oV1tW2wmZka2Jc3/UEWuMB8GA1UdIwQY
MBaAFA0lz9UmqtcqTI9HM/rKD023+fdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNYUDFTYXExeXBNajBjei1zb1BUYmY1OTJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS85NjI4MmYtNWEyOS00ZmRkLWFkZjkt
ZDIxMDgzOGE0NmU2LzEvRFNYUDFTYXExeXBNajBjei1zb1BUYmY1OTJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS85NjI4MmYtNWEyOS00ZmRkLWFkZjktZDIxMDgzOGE0NmU2
LzEvRFNYUDFTYXExeXBNajBjei1zb1BUYmY1OTJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhRfgiX5
iCP7I1sBZ9jHJV9PevZBkgO7M3KDqQjaoLat69L9y7Ix3XLqV6Lb3wfos7+M/Bgd
/anFaTcXwhSrWvn6mf9kiOBeEs6xS7EQqkrjh4UvEbHsh9NxzfK7dOUR/HVxs9cG
TwaXHFalp5dw9HWCboaCskckIfXL/fnhWS1dwCCKwyWtf9LG1FXVuScdFuiapo3j
vy7cla+v2CTzZCXnl2E8py3+dXvpIAloUw/qAYzIZpl98TVnH/n9WZMlHBZQcU95
r605feu0wvSpdp2NHoNZRUX75poc8XdEIKOAZftVSqtQppMXSwtWysoIMG4YQqiu
SDQrQnTlFZbscQ==
-----END CERTIFICATE-----
Generated at Wed May 13 03:17:36 2026 by rpki-client