Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
File: DSXP1Saq1ypMj0cz-soPTbf592c.mft (raw, json)
Hash identifier: VZt+2cDx47+cYfEhZmJii8sg/wGozEANz6Mv11znX+0=
Subject key identifier: F5:37:17:EF:93:36:89:84:FC:2F:24:62:87:A4:8B:D7:7A:40:2A:70
Authority key identifier: 0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
Certificate issuer: /CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Certificate serial: 019EBF24092B1B7C0E19936272F138060053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
Manifest number: 0316
Signing time: Sat 13 Jun 2026 04:01:10 +0000
Manifest this update: Sat 13 Jun 2026 04:01:10 +0000
Manifest next update: Sun 14 Jun 2026 04:01:10 +0000
Files and hashes: 1: 1-VF1HeLc0TVIs0YYW6YwoXZdo8c.asa (hash: KLFgdmKccdlHIAP3ZnS+JYnP7Rs5RZwMaM2WwUNBXZU=)
2: Al7UlQjrzC_B0KidPO1VngOHAZs.roa (hash: RboRF3P/11e8NVLi7uKrgu86UzYAOCgIgjZIHHYh4Fo=)
3: DSXP1Saq1ypMj0cz-soPTbf592c.crl (hash: O/XDzIzdSbNaohu4J3d5M+oR0g9/0TA72Hrs7HETZHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:24:09:2b:1b:7c:0e:19:93:62:72:f1:38:06:00:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d25cfd526aad72a4c8f4733faca0f4db7f9f767
Validity
Not Before: Jun 13 04:01:10 2026 GMT
Not After : Jun 14 04:01:10 2026 GMT
Subject: CN=f53717ef93368984fc2f246287a48bd77a402a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:e4:4e:3e:6e:5a:e2:db:6f:3d:10:85:27:
fd:83:a6:0e:7d:9d:a4:3b:a9:b6:41:02:24:f5:f4:
48:9a:18:28:43:42:4a:d1:37:67:19:14:1c:c5:5e:
47:b4:db:e5:66:ab:25:de:17:19:68:48:01:89:42:
65:8d:e5:c8:4d:11:4a:88:7a:d1:06:d7:1f:b0:0a:
74:38:2c:5a:94:03:c9:e1:d5:37:6d:82:57:d0:b6:
7d:1b:5a:f2:c3:2c:57:fa:94:42:20:12:65:8e:c1:
af:07:be:d3:96:e3:4c:d1:dc:42:bb:ff:e5:e5:4b:
1a:5c:24:af:16:de:6f:86:3b:87:b4:17:11:84:db:
26:4d:f0:87:64:04:ef:35:74:27:5c:57:c5:f8:bf:
ec:5b:62:0d:8a:be:69:45:46:95:3c:ce:d7:eb:f8:
61:cb:99:6b:81:02:69:07:e3:80:78:4d:4d:ce:da:
e6:0b:7d:b4:f5:aa:e1:ec:1d:cd:5d:92:8d:9a:3a:
7d:c7:14:d7:77:f7:73:13:5a:e8:53:cb:20:f6:d6:
e6:05:43:03:b1:0b:2d:fc:59:13:30:3e:34:1f:2e:
9f:d7:e5:b7:72:a3:17:83:b6:63:36:ab:5b:9e:e2:
44:a1:8d:ef:cc:0e:f4:2c:32:00:c0:80:1c:0d:c2:
a6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:37:17:EF:93:36:89:84:FC:2F:24:62:87:A4:8B:D7:7A:40:2A:70
X509v3 Authority Key Identifier:
keyid:0D:25:CF:D5:26:AA:D7:2A:4C:8F:47:33:FA:CA:0F:4D:B7:F9:F7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSXP1Saq1ypMj0cz-soPTbf592c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/96282f-5a29-4fdd-adf9-d210838a46e6/1/DSXP1Saq1ypMj0cz-soPTbf592c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:f6:bf:ce:72:d3:73:a0:27:1e:6d:cd:d4:79:8a:77:ec:de:
d4:93:bd:00:ce:c3:58:e1:63:55:7a:68:18:a8:ba:d1:24:35:
dc:29:0a:24:60:3c:c9:54:44:d7:6f:5e:a9:f7:73:7d:19:65:
44:31:3c:d7:a4:78:6b:2a:79:f9:47:4f:a4:0a:10:b3:f9:77:
6d:ec:15:5c:85:d8:96:c5:fb:b4:da:00:85:b7:b1:54:e4:eb:
5e:ab:44:e2:6d:41:6e:0f:b4:04:59:1f:1a:b1:16:59:56:9e:
f7:74:79:e0:67:47:b9:81:bf:85:b4:9a:93:ba:da:9a:06:ee:
fa:3f:23:18:9f:93:13:3e:0e:72:40:0a:88:f3:53:04:27:de:
f9:10:2e:9d:2c:f6:eb:f8:d8:e1:63:13:43:7b:ba:af:56:a7:
67:5e:65:9e:d2:76:a1:51:1b:e5:83:59:02:95:47:26:42:09:
49:07:0a:c3:d0:80:c7:80:23:1a:13:9e:df:5f:3d:48:67:12:
16:30:4a:3d:0e:b7:bd:16:cb:79:66:78:f9:d8:4e:e6:bd:e0:
d2:89:42:33:31:54:10:ac:e0:dc:5e:f8:b8:ec:11:94:5c:09:
87:fa:23:29:f2:29:74:18:c0:d8:d4:b0:80:66:a8:29:34:39:
be:8d:42:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:16:46 2026 by rpki-client