Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
File: DSXP1Saq1ypMj0cz-soPTbf592c.mft (raw, json)
Hash identifier: pOtRvnFXJBDeE4TPMcQAmnKKpC7Peku6ic6jLlOvXrE=
Subject key identifier: D5:E0:3A:D9:85:03:04:B5:D2:14:F4:FD:30:17:F7:42:40:B7:68:90
Authority key identifier: 0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
Certificate issuer: /CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Certificate serial: 019E288244638F96E784CAC87A33A9FD8BD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
Manifest number: 02C8
Signing time: Thu 14 May 2026 22:01:26 +0000
Manifest this update: Thu 14 May 2026 22:01:26 +0000
Manifest next update: Fri 15 May 2026 22:01:26 +0000
Files and hashes: 1: 1-VF1HeLc0TVIs0YYW6YwoXZdo8c.asa (hash: KLFgdmKccdlHIAP3ZnS+JYnP7Rs5RZwMaM2WwUNBXZU=)
2: Al7UlQjrzC_B0KidPO1VngOHAZs.roa (hash: RboRF3P/11e8NVLi7uKrgu86UzYAOCgIgjZIHHYh4Fo=)
3: DSXP1Saq1ypMj0cz-soPTbf592c.crl (hash: GQNYVZsxEMml0GF3LmGWi90l3JUdBhG/xCep4GD+CYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:82:44:63:8f:96:e7:84:ca:c8:7a:33:a9:fd:8b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Validity
Not Before: May 14 22:01:26 2026 GMT
Not After : May 15 22:01:26 2026 GMT
Subject: CN=d5e03ad9850304b5d214f4fd3017f74240b76890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:dd:aa:c0:3c:18:38:d1:e6:75:ef:4a:e0:
71:9d:90:22:16:74:d9:59:a8:95:1d:41:50:50:03:
50:8a:2d:44:38:87:99:4f:2b:73:00:d9:d8:77:c4:
86:47:79:c0:d1:4d:56:cf:00:c1:23:a4:3a:27:42:
e2:8d:d4:38:ac:d9:90:94:63:11:84:bc:bb:b6:d4:
99:e9:ff:92:92:a2:19:f3:2f:a7:64:27:e4:96:c7:
b7:7c:9c:6c:2f:3e:87:3d:0e:0e:67:24:57:79:d7:
13:03:97:0d:7f:eb:83:21:54:79:93:ff:6f:eb:2b:
5c:b2:93:36:aa:27:f1:fb:95:23:66:97:cc:31:7a:
30:e2:bf:9b:e4:d2:be:6d:19:22:bd:1d:fa:2e:78:
12:55:28:e4:e8:d2:ef:d0:29:a8:cd:f5:5e:08:8f:
c4:bb:86:28:f1:bd:b9:45:23:5e:5d:93:b5:1d:da:
7e:bd:d0:94:73:6d:26:cd:50:64:b0:71:41:d2:c6:
42:d2:3a:e9:d6:12:60:a5:8f:b2:1b:37:d9:0d:66:
a3:7c:e5:e4:98:ae:e9:fc:f9:41:ce:c2:0e:e0:41:
0e:70:e4:f3:3b:39:72:37:7f:0e:14:21:70:25:61:
e1:d5:73:e6:f0:e3:b7:19:a3:36:80:a3:9f:20:05:
db:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E0:3A:D9:85:03:04:B5:D2:14:F4:FD:30:17:F7:42:40:B7:68:90
X509v3 Authority Key Identifier:
keyid:0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:59:ee:7d:7b:a7:93:02:84:32:ee:1a:3e:19:d5:f7:fd:cf:
c5:9e:b7:b2:26:18:d3:0b:6f:ec:4f:4d:7a:de:b6:82:b2:53:
1d:32:6e:aa:73:e9:fe:9f:0f:d0:8d:a4:66:8f:54:e1:f9:91:
8e:3a:c2:98:7e:fa:89:54:8b:67:b6:49:0e:95:79:52:e8:bb:
65:92:23:bf:89:8d:8f:9b:b4:e9:8c:54:5c:ec:b6:c2:b0:da:
75:ea:ac:91:79:c6:b2:a5:b7:72:fe:5e:2e:78:fd:c3:16:4e:
f0:0e:71:4f:2d:3f:28:9d:ed:ae:51:12:2e:15:a3:ce:ec:19:
8f:d3:3d:67:36:c5:52:01:14:2a:78:23:57:e3:41:cb:0f:b2:
6f:ee:e1:e6:3e:48:ec:ca:ab:db:d9:72:10:23:45:6e:bd:ac:
50:77:ea:70:44:07:40:d5:51:d8:1f:40:af:c9:5a:7e:6e:87:
a1:f5:72:dc:af:cb:40:5d:7b:40:f0:29:6c:ae:66:bb:4e:f2:
94:ba:8d:38:62:2e:47:77:3a:90:cd:7a:69:0f:48:21:ec:20:
29:d8:89:36:89:80:82:4c:fc:1f:f3:ae:00:c4:77:04:43:6c:
9f:5b:56:14:b5:79:7b:2b:2f:1a:ae:f1:96:09:9a:95:58:1c:
92:7a:53:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:22 2026 by rpki-client