Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
File: DSXP1Saq1ypMj0cz-soPTbf592c.mft (raw, json)
Hash identifier: hly1dGGt+qlAUIL9hdPpvRVVFZOSRQCNVXaAmh2Ji9Q=
Subject key identifier: 1B:B9:CD:A4:69:C1:90:8C:14:C3:DB:52:09:D0:9B:F4:10:5F:E2:D0
Authority key identifier: 0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
Certificate issuer: /CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Certificate serial: 01A03F04733EC294B3DB0D5A5F9B64014888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
Manifest number: 03DE
Signing time: Wed 26 Aug 2026 17:00:51 +0000
Manifest this update: Wed 26 Aug 2026 17:00:51 +0000
Manifest next update: Thu 27 Aug 2026 17:00:51 +0000
Files and hashes: 1: Al7UlQjrzC_B0KidPO1VngOHAZs.roa (hash: RboRF3P/11e8NVLi7uKrgu86UzYAOCgIgjZIHHYh4Fo=)
2: DSXP1Saq1ypMj0cz-soPTbf592c.crl (hash: LPu0RaJ8864IygqdFYrxdqZaaqJr10uWHSWFhPGbVhE=)
3: n955CVYvlAKixn1hqcFKCWeYt50.asa (hash: 3uwOWuUdIm/+uiTw7T1VdxLKMGj1oCN8wyjprwsIQ8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:04:73:3e:c2:94:b3:db:0d:5a:5f:9b:64:01:48:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Validity
Not Before: Aug 26 17:00:51 2026 GMT
Not After : Aug 27 17:00:51 2026 GMT
Subject: CN=1bb9cda469c1908c14c3db5209d09bf4105fe2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:59:f9:e3:39:ad:4a:7d:8a:a5:3d:9b:d9:
28:2a:25:48:7a:ea:a6:43:65:61:1b:da:54:2c:f6:
15:63:8e:4a:18:7b:70:42:27:2a:62:c6:38:60:a5:
d1:e0:4c:30:d7:c2:d9:59:26:9a:49:82:77:40:4a:
8b:c7:65:8f:4c:82:ac:aa:09:3c:95:cb:87:bb:8c:
eb:2d:fd:26:b6:06:0a:7a:28:1c:2e:1e:3f:f2:f3:
3e:86:c8:23:29:06:10:ee:a5:3c:18:d0:90:98:59:
1c:ef:df:09:c4:1e:95:3e:c0:1c:7f:44:a5:96:e4:
f4:c1:12:d1:7f:a6:e0:a5:06:8d:51:02:fc:8e:86:
5d:58:ea:59:01:01:e6:f0:f9:9f:67:a8:3a:62:ea:
d6:50:8f:69:d9:da:ba:9e:55:b2:b4:cf:c1:36:8c:
2d:0b:ce:9c:b8:38:b3:94:f8:b1:7f:c4:dd:9d:df:
1d:fd:0d:04:a2:de:b7:bc:bd:ed:e9:e7:1b:54:2b:
07:3a:9a:a0:b1:9b:bb:d0:66:3d:00:71:45:1d:fc:
70:cb:0e:9c:03:6f:2e:d2:40:f3:b5:9c:ed:2b:df:
f2:dc:c0:74:51:b4:ba:e3:64:1d:78:ed:4f:1c:06:
c0:c5:08:a4:ec:2f:dc:5f:22:1b:56:21:8c:17:e3:
3e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B9:CD:A4:69:C1:90:8C:14:C3:DB:52:09:D0:9B:F4:10:5F:E2:D0
X509v3 Authority Key Identifier:
keyid:0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:34:c2:a3:10:bc:cd:6d:4e:4f:53:61:4c:7b:ce:11:28:96:
0b:d5:9b:7b:f0:21:00:27:9f:37:ad:64:27:99:dd:ee:9c:4e:
81:cb:57:ea:92:14:c4:66:e3:ab:61:9f:96:b6:d2:6a:e9:d6:
97:19:16:1f:14:13:1b:01:cd:2e:0a:a8:79:0c:ca:f2:ac:81:
1f:1b:f9:5f:be:5e:98:cf:28:22:af:a8:39:77:db:59:e5:75:
ff:f0:c7:ab:17:21:b5:02:b8:66:cb:0f:6e:ac:d3:f7:b7:a0:
86:ee:5e:27:79:0a:99:b9:06:43:52:b5:38:0a:b6:a3:93:95:
81:c6:a6:b5:55:76:65:4d:39:75:d3:56:33:5a:36:59:53:f8:
60:af:16:8f:0a:43:c7:bf:2f:a0:bd:dd:54:0f:b5:7e:aa:eb:
b0:40:34:db:6a:57:bd:19:4c:0c:4e:5b:98:aa:8a:82:e3:2c:
b1:36:bb:36:6f:45:57:3e:f2:3f:4c:3f:fc:c9:bf:d6:91:cb:
7b:cb:41:a4:fc:d7:fc:6b:1f:64:3a:05:c8:fb:c7:5a:55:c7:
3e:28:70:37:9f:a1:60:98:1c:c8:1f:7b:89:b3:2d:b9:94:57:
14:c6:d8:96:af:5e:9a:43:37:af:ee:26:ee:d0:7c:27:e7:88:
57:af:17:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:36:43 2026 by rpki-client