Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
File: Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft (raw, json)
Hash identifier: UvHmAGYWC2i3DHs8jxkfyctsjXmhlMgT477P7RPexu0=
Subject key identifier: CB:F4:27:7A:62:BA:4E:4D:80:78:0D:9C:D8:67:31:E8:6B:99:FD:4C
Authority key identifier: 0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
Certificate issuer: /CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Certificate serial: 01A001A6733E6C91B7451E172BBDF07B18F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
Manifest number: 0F4E
Signing time: Fri 14 Aug 2026 19:01:20 +0000
Manifest this update: Fri 14 Aug 2026 19:01:20 +0000
Manifest next update: Sat 15 Aug 2026 19:01:20 +0000
Files and hashes: 1: Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl (hash: +yW7jaM0be7OOTf/38rK6qMAYKuJS2OpZCBYfX0y8Xs=)
2: e8A6sXBGduUCZGJ5-6Y7kMDswOw.roa (hash: FM6aG3gkOk8roOMZ1iwyahhjRPg2yzj4NPtQ7Gqvp50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:73:3e:6c:91:b7:45:1e:17:2b:bd:f0:7b:18:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Validity
Not Before: Aug 14 19:01:20 2026 GMT
Not After : Aug 15 19:01:20 2026 GMT
Subject: CN=cbf4277a62ba4e4d80780d9cd86731e86b99fd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:ea:4e:50:54:c0:e9:d7:07:07:28:3e:6d:
0e:9c:b5:bf:5e:56:96:9c:d0:c4:43:86:be:5f:69:
58:07:57:fb:d4:51:7f:39:ff:a0:f7:96:23:be:27:
39:59:d6:97:eb:03:54:3f:58:51:2a:6f:78:07:eb:
94:ad:ea:51:b3:02:32:98:33:86:eb:09:3f:7d:08:
80:1c:a5:20:61:91:75:b7:3f:74:fe:85:25:f1:4b:
58:69:8b:24:84:56:22:0c:8e:5d:9d:a2:56:1d:24:
20:f9:85:ea:6a:79:9c:a2:9a:1a:34:00:39:b5:af:
21:c2:ee:8e:8c:92:64:45:49:d6:c5:63:64:31:96:
1a:bf:36:e9:aa:37:de:23:fc:59:b1:c3:1a:f0:26:
16:be:7c:d7:19:5d:e3:32:c3:77:b3:71:8d:bc:ef:
fb:ac:de:90:3b:2c:7a:64:bf:62:dd:e6:47:b4:0d:
a5:02:b8:2b:fa:38:2b:37:2a:3c:5c:23:94:9e:08:
71:b8:b6:d1:1f:cf:33:9b:6a:4e:c7:72:d4:8a:6f:
97:23:54:f9:89:2a:ee:93:b7:07:dd:f4:8a:28:b6:
7a:c8:92:78:26:a4:95:c0:f8:94:2c:98:3e:f2:b9:
a4:42:31:3c:8a:11:df:b7:f6:e5:38:d0:96:61:1d:
3b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F4:27:7A:62:BA:4E:4D:80:78:0D:9C:D8:67:31:E8:6B:99:FD:4C
X509v3 Authority Key Identifier:
keyid:0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e0:6c:b6:43:e9:16:53:2a:6d:54:4c:80:ff:6d:fc:52:05:
f7:38:4d:4b:4b:39:9c:26:9a:1c:ed:07:a6:49:86:10:46:cf:
2d:f3:f0:85:ea:31:74:e0:c2:4e:0c:b9:e8:0e:91:de:1a:58:
85:7d:ef:e1:40:31:1d:17:1b:d5:bc:f7:8d:b9:8f:db:95:ae:
53:41:69:f2:d6:2e:fa:95:d7:1c:b0:ed:01:d1:14:af:8f:5d:
24:4a:1f:b7:91:3c:fd:55:d7:5e:df:5f:49:de:48:ed:3c:9e:
a1:04:a2:aa:3b:b8:67:eb:7a:74:36:09:11:4d:fb:9b:d5:02:
c6:6d:fe:9c:cc:1e:80:68:02:0b:82:7c:83:57:5d:27:6b:f4:
96:3d:c0:b4:88:fb:e4:ff:59:8e:2b:c1:fb:f6:6a:3e:99:48:
f7:b6:15:f1:ec:bc:2f:73:07:5b:fa:28:df:9f:e0:a4:70:c2:
5e:56:ce:ab:d4:7d:51:40:6a:d9:d3:f2:82:08:50:4f:be:ad:
74:7f:a0:1b:55:b9:06:f3:0a:80:f7:ec:66:63:26:6d:2c:9f:
6c:87:5b:4d:3a:9d:f0:ca:5f:ff:e2:7d:e1:fd:48:df:79:32:
6d:00:e6:75:6f:c5:fd:07:92:47:77:32:14:4a:84:ea:ac:ea:
8d:7a:43:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:52 2026 by rpki-client