Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
File: DSXP1Saq1ypMj0cz-soPTbf592c.mft (raw, json)
Hash identifier: Mje5eGbCNV9dkZ0WZV+8NKVKCmWpXirNDl4oD3oOqb8=
Subject key identifier: F6:75:98:92:A6:04:11:8D:4D:87:2B:A0:52:BA:30:FE:C1:82:C0:69
Authority key identifier: 0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
Certificate issuer: /CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Certificate serial: 01A03D15F9D83246B11645FA60B5729CEE92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
Manifest number: 03DD
Signing time: Wed 26 Aug 2026 08:00:45 +0000
Manifest this update: Wed 26 Aug 2026 08:00:45 +0000
Manifest next update: Thu 27 Aug 2026 08:00:45 +0000
Files and hashes: 1: Al7UlQjrzC_B0KidPO1VngOHAZs.roa (hash: RboRF3P/11e8NVLi7uKrgu86UzYAOCgIgjZIHHYh4Fo=)
2: DSXP1Saq1ypMj0cz-soPTbf592c.crl (hash: 5owIlijFCk7CPoYpu09e1UdtrnonVL9EBDZg0/PVVcM=)
3: n955CVYvlAKixn1hqcFKCWeYt50.asa (hash: 3uwOWuUdIm/+uiTw7T1VdxLKMGj1oCN8wyjprwsIQ8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 07:50:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:15:f9:d8:32:46:b1:16:45:fa:60:b5:72:9c:ee:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Validity
Not Before: Aug 26 08:00:45 2026 GMT
Not After : Aug 27 08:00:45 2026 GMT
Subject: CN=f6759892a604118d4d872ba052ba30fec182c069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:41:7a:8a:8d:51:32:6a:f3:25:6d:1f:bc:
3a:05:03:17:05:41:b5:c4:c4:e5:2b:36:1e:48:22:
62:46:03:4f:0d:95:9e:b5:9c:3f:7f:1c:73:3e:af:
1b:db:59:92:0c:3c:d0:30:f3:93:69:a2:13:78:bf:
c8:74:16:b6:f6:6d:92:9d:1d:75:68:b3:6d:a3:6a:
d8:3d:61:5a:e8:d0:d7:80:fb:bd:26:86:63:f7:ec:
57:bf:6b:99:80:33:3e:b8:d4:1e:28:10:ed:c3:15:
02:eb:f6:d0:80:18:29:53:ee:f3:bc:14:db:83:76:
a7:b8:68:81:f7:b6:ef:70:92:b9:a0:fe:52:68:ad:
2e:20:c6:f4:87:30:8f:ae:b8:e6:95:c9:53:01:b5:
e5:dd:f0:ac:11:69:55:9b:e1:4a:bc:42:cc:14:01:
26:2e:c6:6b:e7:85:f0:1e:a0:37:de:6e:ad:41:92:
99:3b:c1:4c:51:ff:89:fd:90:ef:b7:08:16:d4:ed:
be:b0:19:34:f0:71:e1:94:9f:d3:68:c4:28:90:35:
7c:a2:58:b0:da:85:f6:db:3d:19:78:0f:f2:23:bd:
7c:ab:e4:57:09:22:0c:33:a6:9b:8b:6e:1b:da:27:
0c:36:85:e1:51:6d:18:fb:16:0f:10:33:a9:04:fe:
55:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:75:98:92:A6:04:11:8D:4D:87:2B:A0:52:BA:30:FE:C1:82:C0:69
X509v3 Authority Key Identifier:
keyid:0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:bb:42:64:6c:36:db:ea:bc:35:99:3e:5a:d7:f2:5b:d2:5b:
ac:ae:d0:ae:8a:33:51:7f:69:50:ab:a6:8f:c5:19:1a:98:f3:
07:e9:5b:d0:7f:ac:82:cb:35:af:58:94:f9:d6:38:b9:5e:f1:
b5:4d:29:0e:38:19:10:8b:e4:0a:e0:b0:12:d7:cf:16:14:fa:
2b:0e:48:48:f5:9a:d6:36:5d:14:bc:62:82:4f:6e:8c:52:4a:
ee:9c:10:7e:c4:23:9e:40:1f:f2:43:76:01:d3:75:0a:39:01:
c3:27:c4:99:bc:f2:83:12:a4:d9:af:a3:8b:ea:21:08:5d:d5:
72:24:29:b8:df:39:bf:64:e9:3b:7d:42:9e:8b:d4:b8:a8:1a:
df:a1:9b:7c:46:88:38:86:30:39:3e:e2:bf:7e:26:f2:d6:a7:
e1:a3:84:b5:90:db:96:39:f6:ab:d7:e6:cf:ee:82:f9:c8:84:
95:51:1e:5e:75:ad:93:2c:1e:90:7a:dd:23:b2:22:e2:b7:a4:
fa:a5:d9:6e:f2:1e:d3:66:27:5f:ea:a5:ce:d0:1f:fd:a2:89:
4e:73:76:ab:e8:3b:1e:25:6a:cd:2c:e5:ff:c7:e0:a4:35:1b:
ef:8b:c8:70:89:c9:41:cb:47:c7:c0:51:6c:0e:19:72:4c:eb:
99:39:e0:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA9FfnYMkaxFkX6YLVynO6SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjVjZmQ1MjZhYWQ3MmE0YzhmNDczM2ZhY2EwZjRkYjdm
OWY3NjcwHhcNMjYwODI2MDgwMDQ1WhcNMjYwODI3MDgwMDQ1WjAzMTEwLwYDVQQD
EyhmNjc1OTg5MmE2MDQxMThkNGQ4NzJiYTA1MmJhMzBmZWMxODJjMDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweFBeoqNUTJq8yVtH7w6BQMXBUG1
xMTlKzYeSCJiRgNPDZWetZw/fxxzPq8b21mSDDzQMPOTaaITeL/IdBa29m2SnR11
aLNto2rYPWFa6NDXgPu9JoZj9+xXv2uZgDM+uNQeKBDtwxUC6/bQgBgpU+7zvBTb
g3anuGiB97bvcJK5oP5SaK0uIMb0hzCPrrjmlclTAbXl3fCsEWlVm+FKvELMFAEm
LsZr54XwHqA33m6tQZKZO8FMUf+J/ZDvtwgW1O2+sBk08HHhlJ/TaMQokDV8oliw
2oX22z0ZeA/yI718q+RXCSIMM6abi24b2icMNoXhUW0Y+xYPEDOpBP5VvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZ1mJKmBBGNTYcroFK6MP7BgsBpMB8GA1UdIwQY
MBaAFA0lz9UmqtcqTI9HM/rKD023+fdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNYUDFTYXExeXBNajBjei1zb1BUYmY1OTJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS85NjI4MmYtNWEyOS00ZmRkLWFkZjkt
ZDIxMDgzOGE0NmU2LzEvRFNYUDFTYXExeXBNajBjei1zb1BUYmY1OTJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS85NjI4MmYtNWEyOS00ZmRkLWFkZjktZDIxMDgzOGE0NmU2
LzEvRFNYUDFTYXExeXBNajBjei1zb1BUYmY1OTJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOrtCZGw2
2+q8NZk+WtfyW9JbrK7QroozUX9pUKumj8UZGpjzB+lb0H+sgss1r1iU+dY4uV7x
tU0pDjgZEIvkCuCwEtfPFhT6Kw5ISPWa1jZdFLxigk9ujFJK7pwQfsQjnkAf8kN2
AdN1CjkBwyfEmbzygxKk2a+ji+ohCF3VciQpuN85v2TpO31CnovUuKga36GbfEaI
OIYwOT7iv34m8tan4aOEtZDbljn2q9fmz+6C+ciElVEeXnWtkywekHrdI7Ii4rek
+qXZbvIe02YnX+qlztAf/aKJTnN2q+g7HiVqzSzl/8fgpDUb74vIcInJQctHx8BR
bA4ZckzrmTngVA==
-----END CERTIFICATE-----
Generated at Wed Aug 26 10:37:59 2026 by rpki-client