Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
File: DspuBsaCS9G4ERg-Dhf6GUltJhw.mft (raw, json)
Hash identifier: p6Ij3KV1lfooBLGlrie/uEL1R9+lumsRu5KC8QhgdQs=
Subject key identifier: A6:FF:EA:0D:40:2A:97:CF:A1:C2:84:66:42:92:3E:78:B0:D1:1C:5B
Authority key identifier: 0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
Certificate issuer: /CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Certificate serial: 01A1212F06D51A8F96BBA78246BB4CCAF2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
Manifest number: 1289
Signing time: Fri 09 Oct 2026 15:01:32 +0000
Manifest this update: Fri 09 Oct 2026 15:01:32 +0000
Manifest next update: Sat 10 Oct 2026 15:01:32 +0000
Files and hashes: 1: 3r078bir07UdtDuJHV1FxgMDSKQ.roa (hash: OqiAJCqUSBU1voAMZmIIFG4MlxPRLpnSY78JVHA9lkw=)
2: DspuBsaCS9G4ERg-Dhf6GUltJhw.crl (hash: w93a5iXXwUyR8Y8hL8eHjkEDsSYEtAswXsdrvZPm9aM=)
3: IDJTjBeFF1LDRx8gc3tSt6fCOVQ.roa (hash: dfSJ9a/11mLVMI7/XHCzsNnkPUfKtZgrRVtgHCRNHkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2f:06:d5:1a:8f:96:bb:a7:82:46:bb:4c:ca:f2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Validity
Not Before: Oct 9 15:01:32 2026 GMT
Not After : Oct 10 15:01:32 2026 GMT
Subject: CN=a6ffea0d402a97cfa1c2846642923e78b0d11c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9b:1d:da:cb:44:44:27:d9:af:da:d0:8e:6b:
2e:3c:c6:00:5a:7f:86:62:e3:88:14:2d:0c:70:33:
e4:15:a0:7a:73:93:87:1d:16:b9:9b:30:2e:92:a2:
2c:85:98:62:5d:43:06:9b:a6:3d:98:ac:e1:0a:61:
c9:90:a8:f8:54:9c:e5:34:49:63:13:9d:90:5e:3f:
44:5f:4b:1d:89:b5:f7:2a:4d:30:49:f8:25:93:77:
3c:fe:97:c5:53:63:ea:86:bf:5c:02:96:97:44:5e:
ae:db:94:c7:94:07:c4:68:32:eb:3c:6c:36:4f:50:
51:db:42:21:68:f0:0d:b8:74:8b:28:d9:6f:ab:db:
e7:84:18:e2:f7:19:e0:3d:08:e8:3d:b1:b9:1d:04:
4c:55:c5:80:4c:2a:02:ac:22:bc:c3:a0:65:e4:a5:
c7:9f:78:c1:68:b0:89:90:1e:19:b0:9d:f1:cf:c5:
2c:8b:fc:df:3f:84:2f:30:33:bb:65:c4:e0:2b:0a:
39:7b:d1:bc:7d:37:56:ba:78:7f:cc:60:94:54:4b:
e0:c0:7b:33:24:b9:ab:e8:51:b0:27:34:60:95:6b:
e6:68:7b:f5:f1:67:d2:2d:c6:9f:a5:01:14:bb:a9:
76:21:30:af:02:55:5b:dd:e1:0e:19:ad:eb:88:d2:
63:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FF:EA:0D:40:2A:97:CF:A1:C2:84:66:42:92:3E:78:B0:D1:1C:5B
X509v3 Authority Key Identifier:
keyid:0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:65:69:4b:1e:5e:eb:96:7d:4c:3e:9f:47:46:8e:73:2f:3e:
96:f7:e6:c3:a3:4b:32:02:c3:ed:df:c4:8e:11:1f:81:4b:a5:
92:8e:a8:f8:b2:4e:69:b6:86:6d:11:d5:3d:a7:04:e2:be:5a:
7e:e9:27:f4:20:d9:0a:ec:01:a7:c5:3c:e2:fd:ad:8c:2e:8f:
87:08:44:5d:e1:da:15:e0:9d:9a:a7:b0:f5:9a:3a:c2:13:20:
7e:6a:52:00:0f:36:5c:7f:ab:0b:4a:ff:99:5b:c0:46:90:65:
80:76:c3:d7:2f:a0:73:82:cf:f5:73:af:f7:e4:10:9f:cb:dc:
70:60:e8:79:f7:e4:72:b1:1b:3d:8e:55:2a:50:1e:ad:d3:36:
be:75:2f:5e:64:2c:2a:38:18:27:e9:3a:c7:46:a6:5e:01:8c:
c0:bd:63:77:7a:b1:80:08:8d:40:b6:01:e8:37:f1:f0:9f:ee:
cb:be:90:4e:b5:60:d1:35:95:a6:91:cf:dc:c4:29:f7:ac:4a:
d1:78:dc:09:5e:78:6f:ad:a2:c7:41:c5:ab:ed:30:be:e3:a9:
68:1e:d7:4a:9c:73:64:6e:64:7c:80:3e:37:82:df:74:68:a3:
c7:af:37:b7:d6:c2:cf:78:94:32:b1:f8:49:2d:54:8c:cb:30:
ba:c6:d2:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEhLwbVGo+Wu6eCRrtMyvKvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlY2E2ZTA2YzY4MjRiZDFiODExMTgzZTBlMTdmYTE5NDk2
ZDI2MWMwHhcNMjYxMDA5MTUwMTMyWhcNMjYxMDEwMTUwMTMyWjAzMTEwLwYDVQQD
EyhhNmZmZWEwZDQwMmE5N2NmYTFjMjg0NjY0MjkyM2U3OGIwZDExYzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJsd2stERCfZr9rQjmsuPMYAWn+G
YuOIFC0McDPkFaB6c5OHHRa5mzAukqIshZhiXUMGm6Y9mKzhCmHJkKj4VJzlNElj
E52QXj9EX0sdibX3Kk0wSfglk3c8/pfFU2Pqhr9cApaXRF6u25THlAfEaDLrPGw2
T1BR20IhaPANuHSLKNlvq9vnhBji9xngPQjoPbG5HQRMVcWATCoCrCK8w6Bl5KXH
n3jBaLCJkB4ZsJ3xz8Usi/zfP4QvMDO7ZcTgKwo5e9G8fTdWunh/zGCUVEvgwHsz
JLmr6FGwJzRglWvmaHv18WfSLcafpQEUu6l2ITCvAlVb3eEOGa3riNJjfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKb/6g1AKpfPocKEZkKSPniw0RxbMB8GA1UdIwQY
MBaAFA7KbgbGgkvRuBEYPg4X+hlJbSYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHNwdUJzYUNTOUc0RVJnLURoZjZHVWx0Smh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy85MTM3ZmYtMjA2My00Njc1LThkZTct
Y2ZkM2ZmOWZkZjdiLzEvRHNwdUJzYUNTOUc0RVJnLURoZjZHVWx0Smh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy85MTM3ZmYtMjA2My00Njc1LThkZTctY2ZkM2ZmOWZkZjdi
LzEvRHNwdUJzYUNTOUc0RVJnLURoZjZHVWx0Smh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2VpSx5e
65Z9TD6fR0aOcy8+lvfmw6NLMgLD7d/EjhEfgUulko6o+LJOabaGbRHVPacE4r5a
fukn9CDZCuwBp8U84v2tjC6PhwhEXeHaFeCdmqew9Zo6whMgfmpSAA82XH+rC0r/
mVvARpBlgHbD1y+gc4LP9XOv9+QQn8vccGDoeffkcrEbPY5VKlAerdM2vnUvXmQs
KjgYJ+k6x0amXgGMwL1jd3qxgAiNQLYB6Dfx8J/uy76QTrVg0TWVppHP3MQp96xK
0XjcCV54b62ix0HFq+0wvuOpaB7XSpxzZG5kfIA+N4LfdGijx683t9bCz3iUMrH4
SS1UjMswusbSSw==
-----END CERTIFICATE-----
Generated at Fri Oct 9 23:16:25 2026 by rpki-client