Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
File: DSXP1Saq1ypMj0cz-soPTbf592c.mft (raw, json)
Hash identifier: 4l8LGaBNqgnwN1mtHqqTtKTffuFGUA3Sh+1s69dcWFw=
Subject key identifier: D9:8F:67:39:E9:54:E4:69:CB:F7:CC:41:02:5E:A3:C4:94:6E:45:E8
Authority key identifier: 0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
Certificate issuer: /CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Certificate serial: 019F9090D70F1D87DE8C0F1DE0B0248A329F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
Manifest number: 0383
Signing time: Thu 23 Jul 2026 20:00:39 +0000
Manifest this update: Thu 23 Jul 2026 20:00:39 +0000
Manifest next update: Fri 24 Jul 2026 20:00:39 +0000
Files and hashes: 1: Al7UlQjrzC_B0KidPO1VngOHAZs.roa (hash: RboRF3P/11e8NVLi7uKrgu86UzYAOCgIgjZIHHYh4Fo=)
2: DSXP1Saq1ypMj0cz-soPTbf592c.crl (hash: V/50ds6DSDm/UREwvEyvNOvPwixCZTilIJbKDRSQsW8=)
3: jZQNv-yh5eCwU2Kirw-Z5gHvj-c.asa (hash: thfnHHqjTl52Y1pCia3Qv6HUHVqsAuWoPD4pOKWanAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:d7:0f:1d:87:de:8c:0f:1d:e0:b0:24:8a:32:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Validity
Not Before: Jul 23 20:00:39 2026 GMT
Not After : Jul 24 20:00:39 2026 GMT
Subject: CN=d98f6739e954e469cbf7cc41025ea3c4946e45e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:a4:2d:5a:eb:da:14:95:8a:54:2e:5e:6f:
c7:a9:44:9f:a9:31:9a:86:27:f7:d9:b5:5a:c9:b9:
32:12:12:1a:1b:92:f2:c4:54:5c:9d:31:63:5c:55:
8a:17:a8:c6:4e:91:44:cb:b9:ba:fd:e1:d3:34:92:
28:ac:d8:0f:18:85:ea:2f:0b:61:ab:87:c8:13:20:
0e:fe:6d:2d:ec:6c:04:71:ad:54:37:e1:53:99:46:
da:f7:33:03:4e:01:a3:95:32:b4:76:25:b9:dc:63:
98:53:fc:c0:36:0e:0a:b7:7f:47:97:f2:b4:e2:94:
02:ec:ea:2e:b6:3e:55:c3:9b:76:d1:9e:d7:63:2d:
a5:8d:1d:b9:52:4b:87:4d:f8:72:28:26:3f:c8:53:
80:68:0c:6c:41:7a:82:b5:43:02:84:76:f0:58:69:
bb:c7:c2:5a:01:b7:69:0e:20:60:50:c5:36:e4:14:
1d:53:2e:eb:5d:94:02:48:28:c9:ae:38:1e:8a:2a:
c1:86:ab:5e:06:81:da:13:11:32:d2:5c:48:0f:9f:
ba:22:b6:47:4b:62:b6:29:bc:83:28:7f:a9:1d:6f:
6d:39:2b:04:51:a7:32:ee:d7:f5:d1:e9:e6:14:62:
3b:ba:14:1e:47:11:32:b0:49:02:33:16:73:e6:1b:
e2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8F:67:39:E9:54:E4:69:CB:F7:CC:41:02:5E:A3:C4:94:6E:45:E8
X509v3 Authority Key Identifier:
keyid:0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:85:71:6e:b2:7d:51:82:93:2d:86:d0:08:68:b3:a5:c1:57:
ca:29:bd:39:25:37:9e:64:89:7b:47:39:51:df:e2:60:3f:91:
2a:27:9f:17:06:74:83:70:4e:5c:e8:a7:71:ed:3c:5e:a4:6d:
13:69:63:33:b6:96:47:3d:8a:a5:bb:56:a3:b6:53:62:31:8a:
f4:d6:fa:d2:14:6a:6c:30:10:a9:aa:98:93:39:96:b6:83:8e:
52:63:64:4a:56:39:e6:c9:36:35:f2:e7:c4:db:40:dd:0f:57:
0d:df:ab:b8:56:21:21:24:f0:c4:ea:bb:74:43:0d:74:f2:d8:
4b:7f:5d:62:42:09:f0:6b:f1:55:47:8e:ac:db:c6:9d:8e:2f:
94:f5:54:da:79:c3:cd:d2:01:28:03:4c:13:38:65:51:dd:b7:
82:90:b3:6d:e3:4a:9b:3f:e7:62:12:a3:8a:c4:08:05:f9:10:
ff:e6:58:c4:22:f3:c2:1b:0f:cc:5a:bd:fa:1e:5b:c8:d5:93:
d9:8a:81:5b:f0:b3:88:c2:16:90:18:ff:b5:a7:3f:c2:f1:ae:
ca:8a:8e:34:5f:bd:14:97:5e:36:51:22:fc:84:a2:71:92:3a:
5d:52:1f:82:8d:26:b7:a6:4f:1e:2a:37:5e:25:0e:93:b9:f1:
90:84:fb:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkNcPHYfejA8d4LAkijKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjVjZmQ1MjZhYWQ3MmE0YzhmNDczM2ZhY2EwZjRkYjdm
OWY3NjcwHhcNMjYwNzIzMjAwMDM5WhcNMjYwNzI0MjAwMDM5WjAzMTEwLwYDVQQD
EyhkOThmNjczOWU5NTRlNDY5Y2JmN2NjNDEwMjVlYTNjNDk0NmU0NWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprakLVrr2hSVilQuXm/HqUSfqTGa
hif32bVaybkyEhIaG5LyxFRcnTFjXFWKF6jGTpFEy7m6/eHTNJIorNgPGIXqLwth
q4fIEyAO/m0t7GwEca1UN+FTmUba9zMDTgGjlTK0diW53GOYU/zANg4Kt39Hl/K0
4pQC7Ooutj5Vw5t20Z7XYy2ljR25UkuHTfhyKCY/yFOAaAxsQXqCtUMChHbwWGm7
x8JaAbdpDiBgUMU25BQdUy7rXZQCSCjJrjgeiirBhqteBoHaExEy0lxID5+6IrZH
S2K2KbyDKH+pHW9tOSsEUacy7tf10enmFGI7uhQeRxEysEkCMxZz5hviNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmPZznpVORpy/fMQQJeo8SUbkXoMB8GA1UdIwQY
MBaAFA0lz9UmqtcqTI9HM/rKD023+fdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNYUDFTYXExeXBNajBjei1zb1BUYmY1OTJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS85NjI4MmYtNWEyOS00ZmRkLWFkZjkt
ZDIxMDgzOGE0NmU2LzEvRFNYUDFTYXExeXBNajBjei1zb1BUYmY1OTJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS85NjI4MmYtNWEyOS00ZmRkLWFkZjktZDIxMDgzOGE0NmU2
LzEvRFNYUDFTYXExeXBNajBjei1zb1BUYmY1OTJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIVxbrJ9
UYKTLYbQCGizpcFXyim9OSU3nmSJe0c5Ud/iYD+RKiefFwZ0g3BOXOince08XqRt
E2ljM7aWRz2KpbtWo7ZTYjGK9Nb60hRqbDAQqaqYkzmWtoOOUmNkSlY55sk2NfLn
xNtA3Q9XDd+ruFYhISTwxOq7dEMNdPLYS39dYkIJ8GvxVUeOrNvGnY4vlPVU2nnD
zdIBKANMEzhlUd23gpCzbeNKmz/nYhKjisQIBfkQ/+ZYxCLzwhsPzFq9+h5byNWT
2YqBW/CziMIWkBj/tac/wvGuyoqONF+9FJdeNlEi/ISicZI6XVIfgo0mt6ZPHio3
XiUOk7nxkIT7qA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:44:28 2026 by rpki-client