Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
File: DspuBsaCS9G4ERg-Dhf6GUltJhw.mft (raw, json)
Hash identifier: X4MQHOg6yLUxPSIEX7wlzFmY5ob77a7zGRx/CGAL8d8=
Subject key identifier: F9:60:73:FE:D0:14:42:13:80:6C:C6:8B:48:53:B8:6D:F1:8E:3F:38
Authority key identifier: 0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
Certificate issuer: /CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Certificate serial: 019D36E43CB26F2BE2BE92413845DA505B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
Manifest number: 1082
Signing time: Sun 29 Mar 2026 00:00:20 +0000
Manifest this update: Sun 29 Mar 2026 00:00:20 +0000
Manifest next update: Mon 30 Mar 2026 00:00:20 +0000
Files and hashes: 1: 3r078bir07UdtDuJHV1FxgMDSKQ.roa (hash: OqiAJCqUSBU1voAMZmIIFG4MlxPRLpnSY78JVHA9lkw=)
2: DspuBsaCS9G4ERg-Dhf6GUltJhw.crl (hash: o5/IGRpdfFCyYEWBYgQevrXqOgmUMnLaqH7dl34glRo=)
3: IDJTjBeFF1LDRx8gc3tSt6fCOVQ.roa (hash: dfSJ9a/11mLVMI7/XHCzsNnkPUfKtZgrRVtgHCRNHkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:3c:b2:6f:2b:e2:be:92:41:38:45:da:50:5b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Validity
Not Before: Mar 29 00:00:20 2026 GMT
Not After : Mar 30 00:00:20 2026 GMT
Subject: CN=f96073fed0144213806cc68b4853b86df18e3f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:07:55:2b:f9:80:f7:db:5c:14:c8:1b:e3:3e:
7a:64:31:a4:c3:74:b0:52:e7:dc:3e:7a:48:4a:b4:
55:61:6c:30:44:6d:1f:be:1f:00:a0:95:b1:4e:15:
91:2d:e5:a2:dc:87:ef:fe:cd:f8:56:68:6f:62:c0:
11:b8:a9:1f:7d:f0:02:5d:c9:f3:dc:53:b7:39:96:
73:9d:d5:ad:dd:2e:98:3f:ef:24:45:f8:e0:06:82:
84:d5:3c:51:58:d5:f2:52:32:01:14:a4:9b:85:28:
dc:18:45:03:cb:95:fe:32:5e:f3:60:30:c1:4d:0a:
a5:20:e3:2b:aa:0d:2d:5e:b2:be:f8:08:6f:85:60:
91:dc:27:35:0d:f0:3a:5b:c3:93:e5:4b:2a:e5:4f:
53:7c:b9:56:b6:67:5e:11:fc:00:08:37:8c:29:cb:
09:7a:68:99:e2:44:f3:a9:2a:01:a6:2e:76:f8:0a:
5c:5b:1c:84:9c:a8:50:89:bd:39:1d:e4:f9:a1:b1:
90:a2:fc:94:12:df:d3:2b:6c:60:32:0e:08:1f:c6:
59:b1:9c:a8:dd:5b:ef:aa:7c:36:bf:30:eb:27:be:
0b:ab:c0:d1:b0:ac:78:e1:6a:ad:95:57:d1:2a:30:
fe:6a:bc:ec:3e:91:5e:27:2a:c9:3d:eb:4b:b7:e9:
a8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:60:73:FE:D0:14:42:13:80:6C:C6:8B:48:53:B8:6D:F1:8E:3F:38
X509v3 Authority Key Identifier:
keyid:0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8b:37:d8:00:3d:6f:77:db:a3:9d:85:f1:aa:11:c1:61:63:
ff:f1:9a:3f:60:a1:3e:8d:7b:8e:76:40:a1:50:88:15:8b:19:
3e:51:b5:09:d0:3b:f2:f6:79:ef:4d:9c:22:d5:7e:d0:be:49:
48:bf:50:fb:2c:94:a1:04:db:c0:1b:54:e7:e0:24:7c:41:46:
38:5d:e5:d3:c6:5b:52:08:2f:36:7b:b3:ab:37:d7:d6:e9:19:
0d:ef:b2:f1:60:bb:9f:9f:d3:e5:2a:5a:fe:69:d4:73:27:02:
4f:35:bb:03:f5:e6:1c:34:bb:35:21:8a:1b:36:6b:23:77:80:
5e:5e:b9:f2:a0:b5:d5:8f:b5:d1:06:15:fd:95:b9:39:9c:8b:
95:41:ec:66:9c:fe:2b:d3:ed:8e:80:8e:11:fa:73:10:82:34:
7b:9f:c3:51:8e:19:30:1a:42:6f:91:ff:2c:77:b8:54:04:be:
a2:77:2d:9f:4f:04:a6:85:12:b1:cc:1d:cb:a3:85:3c:73:16:
14:14:aa:1e:f6:9f:a9:35:ae:c1:9b:1a:5a:da:70:90:52:46:
34:14:84:11:ee:a2:ee:67:c3:c4:f5:99:bf:69:12:3c:a6:7f:
ba:09:c9:51:cd:83:e7:35:7d:4b:3d:15:5a:67:43:34:69:ce:
70:39:f3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:40 2026 by rpki-client