Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
File: DSXP1Saq1ypMj0cz-soPTbf592c.mft (raw, json)
Hash identifier: jhYxIKyYemA3BL7ayvb4WDBdi5ftc+awcGZn67x3p3I=
Subject key identifier: C9:13:FB:32:14:41:2D:5E:60:42:86:86:72:DD:30:D1:2D:6D:2B:0A
Authority key identifier: 0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
Certificate issuer: /CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Certificate serial: 019D3909DC8B7EB500ABDC0D9A818CEC29B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
Manifest number: 024C
Signing time: Sun 29 Mar 2026 10:00:40 +0000
Manifest this update: Sun 29 Mar 2026 10:00:40 +0000
Manifest next update: Mon 30 Mar 2026 10:00:40 +0000
Files and hashes: 1: 1-VF1HeLc0TVIs0YYW6YwoXZdo8c.asa (hash: KLFgdmKccdlHIAP3ZnS+JYnP7Rs5RZwMaM2WwUNBXZU=)
2: Al7UlQjrzC_B0KidPO1VngOHAZs.roa (hash: RboRF3P/11e8NVLi7uKrgu86UzYAOCgIgjZIHHYh4Fo=)
3: DSXP1Saq1ypMj0cz-soPTbf592c.crl (hash: QP8JdXfiPZaowcfuKjln4XifXPj2j4xQI5ZzyKQfP20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:dc:8b:7e:b5:00:ab:dc:0d:9a:81:8c:ec:29:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Validity
Not Before: Mar 29 10:00:40 2026 GMT
Not After : Mar 30 10:00:40 2026 GMT
Subject: CN=c913fb3214412d5e6042868672dd30d12d6d2b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:79:01:92:5a:ad:28:fa:9c:c7:7f:02:fc:c7:
bf:9e:93:62:d2:40:cf:57:b2:02:2b:8b:f6:94:f2:
5b:22:66:c1:50:21:ba:ba:0a:03:28:36:d3:3e:32:
c8:a2:a2:86:08:e3:a0:af:f5:30:d6:e0:f9:37:b7:
fb:bc:1f:2f:a1:8f:0b:73:b2:fb:af:85:ef:99:3f:
ff:7d:ef:49:8b:21:e9:04:96:cd:cc:1f:4e:cf:c4:
6d:d3:ab:9a:9d:6a:e4:ee:19:82:d0:56:dd:9d:45:
59:88:88:b0:9f:80:26:c6:28:20:96:c1:85:c9:6f:
c7:8d:cc:d0:ac:bd:b3:60:e1:43:ea:2d:72:14:07:
76:ff:60:91:a3:33:96:18:87:09:c0:0b:19:5f:d7:
62:f8:34:15:a4:c5:44:41:01:fb:44:5d:67:eb:96:
f7:ea:b4:71:54:8d:45:d2:bc:6b:32:7f:6a:56:24:
22:99:d4:e3:bd:98:75:12:dc:58:59:20:4f:43:85:
ff:3c:f8:97:cd:cb:e3:82:a7:22:7e:bf:b9:4a:3f:
88:80:6e:bc:91:f3:96:94:b7:ad:71:16:37:26:08:
00:11:21:61:fb:5b:83:d1:9d:36:06:fa:06:22:8b:
fd:17:d6:f2:93:c5:1f:a5:f5:5c:2b:17:13:1a:cf:
6f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:13:FB:32:14:41:2D:5E:60:42:86:86:72:DD:30:D1:2D:6D:2B:0A
X509v3 Authority Key Identifier:
keyid:0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:81:ba:f1:9a:6f:54:4d:b2:3b:af:0c:2d:d6:72:1c:21:2b:
cf:08:32:34:e3:6c:50:4a:76:19:43:02:cd:bd:6d:03:40:26:
1d:92:bd:5d:2f:3f:b7:98:a5:a7:79:0b:d3:69:0b:45:c0:60:
7e:00:16:5b:32:b3:68:de:07:89:04:28:db:df:89:be:78:79:
bb:17:82:75:5e:24:30:d4:26:83:05:77:6a:80:02:62:9d:55:
d3:d1:c5:80:b2:4b:6a:2c:14:ed:86:d1:1c:96:4a:01:a2:00:
40:83:23:9d:8d:51:01:e6:55:18:48:73:d4:2d:b6:60:2f:ab:
fe:67:c9:12:cc:2a:92:1f:16:99:53:08:02:e8:24:45:99:1d:
10:a7:9f:1f:a5:84:64:20:4f:3c:b2:e8:37:cb:6a:37:1e:2c:
51:70:5f:80:b7:d2:cf:90:1e:55:5c:7c:4c:c4:13:55:da:ae:
b9:db:bd:e9:97:d9:a1:cc:b2:44:45:5f:dd:91:ef:7e:bc:85:
f6:07:a8:be:d7:63:9b:dd:90:d4:b7:ed:01:e7:cc:9e:b0:2e:
fd:19:4d:75:9a:13:76:62:01:84:6e:4e:72:f7:f1:f6:01:ce:
c3:72:cb:df:ab:a6:d5:de:84:9e:9b:c4:93:6c:81:0f:59:b3:
57:fc:5f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:38 2026 by rpki-client