Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
File: DSXP1Saq1ypMj0cz-soPTbf592c.mft (raw, json)
Hash identifier: m3vs7J7cvxlCX7XoBzkoHpp3WOHTStxazkUA/lWmUSk=
Subject key identifier: AC:90:5A:F4:73:59:43:C0:AB:A3:25:D7:26:F3:B4:C7:76:4C:5E:47
Authority key identifier: 0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
Certificate issuer: /CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Certificate serial: 019F122EED06EB39BEB97869CD94C6FAA35F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
Manifest number: 0341
Signing time: Mon 29 Jun 2026 07:01:32 +0000
Manifest this update: Mon 29 Jun 2026 07:01:32 +0000
Manifest next update: Tue 30 Jun 2026 07:01:32 +0000
Files and hashes: 1: 1-VF1HeLc0TVIs0YYW6YwoXZdo8c.asa (hash: KLFgdmKccdlHIAP3ZnS+JYnP7Rs5RZwMaM2WwUNBXZU=)
2: Al7UlQjrzC_B0KidPO1VngOHAZs.roa (hash: RboRF3P/11e8NVLi7uKrgu86UzYAOCgIgjZIHHYh4Fo=)
3: DSXP1Saq1ypMj0cz-soPTbf592c.crl (hash: Sa9a8C79kpszTjxuC5Ty/NbqH0/QC4Ia8xAF0TUPCmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:ed:06:eb:39:be:b9:78:69:cd:94:c6:fa:a3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Validity
Not Before: Jun 29 07:01:32 2026 GMT
Not After : Jun 30 07:01:32 2026 GMT
Subject: CN=ac905af4735943c0aba325d726f3b4c7764c5e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:69:4a:8e:f4:00:34:05:56:6a:12:1c:e5:
a0:66:61:4b:80:75:b9:52:16:57:bb:74:85:b1:92:
69:4a:24:65:d5:7c:1c:25:93:5b:78:40:e5:f9:c6:
78:9f:65:dc:73:4a:7e:e4:c8:60:99:48:7d:14:db:
ee:63:1d:fd:c8:b9:e4:ea:0f:04:fd:b5:0a:f0:de:
3f:28:d3:df:99:3b:d3:6a:6d:35:ff:87:43:6c:c0:
a8:b0:f9:06:83:90:38:4d:59:95:12:96:a3:6d:b1:
b1:cf:d0:8b:88:c0:c5:e8:f9:3a:4b:98:a0:26:01:
35:a8:d7:f2:e9:2a:05:77:6c:81:2e:98:d9:f6:cf:
ce:13:c1:26:0b:a8:8d:83:f6:4b:fb:6b:c7:e5:18:
5c:bd:34:bf:52:9d:6a:92:a3:95:dd:0d:e8:c7:d1:
c4:c5:22:83:16:65:2e:f1:2b:95:d8:6f:7e:78:7f:
7d:a9:3a:58:81:bd:43:6e:d2:c4:15:72:c8:c3:c0:
59:ed:95:2f:6c:3b:e9:05:8f:30:81:96:4b:31:32:
16:88:7c:95:7b:a1:ca:2a:e5:ed:e6:77:45:02:09:
34:3a:32:29:b0:3f:8a:ac:f9:be:78:35:b1:c5:f3:
c9:fa:b5:14:d1:eb:06:c1:df:cf:41:4f:da:1b:fd:
70:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:90:5A:F4:73:59:43:C0:AB:A3:25:D7:26:F3:B4:C7:76:4C:5E:47
X509v3 Authority Key Identifier:
keyid:0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e6:d3:1b:b2:be:16:35:83:d0:d9:a1:ea:4b:78:93:54:d4:
e4:8d:49:cc:d4:e8:d0:6d:72:be:f7:15:6f:44:ad:ff:bd:d8:
b7:b3:3b:ef:f3:0c:5e:84:3f:e7:64:9a:c9:40:62:3e:f3:66:
3a:91:77:cc:98:55:27:61:30:49:e1:57:d7:cd:7b:e8:c9:fc:
50:eb:be:96:d7:f5:e1:ef:03:cd:ca:17:83:6e:16:6d:60:d9:
00:25:00:27:19:18:72:7a:81:49:ce:e4:80:33:63:a4:77:aa:
1a:1c:9d:26:b5:e4:d3:04:5d:28:46:2e:42:44:73:cc:db:c1:
76:89:91:f5:d6:3a:63:32:c9:79:16:ae:6b:79:69:a8:ac:7d:
c4:ff:83:90:7d:14:f9:6f:b9:80:43:6d:11:06:37:b5:2c:47:
67:26:53:84:b7:a4:70:a6:58:f0:de:d6:3f:33:6d:57:70:48:
ab:49:b5:77:54:cc:2c:45:ab:97:0b:41:b5:79:e4:3c:84:7b:
31:56:7c:48:cb:ca:89:56:6f:58:4f:a7:85:b4:f8:6d:b1:7f:
9c:bd:5a:b5:5e:93:1f:d8:ee:ab:76:bc:5e:9c:89:71:71:1f:
b4:aa:f0:88:45:b9:13:28:4d:94:c9:4d:37:84:0c:40:6d:79:
b7:1a:25:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:37 2026 by rpki-client