Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
File: Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft (raw, json)
Hash identifier: uDkKw0bnaTRr2j4hvzzYEBAp17fdCbm5ZHzopCZbL2w=
Subject key identifier: 01:8A:AF:4F:90:52:92:AD:CC:4B:10:D3:D6:A8:66:79:A5:11:7E:41
Authority key identifier: 0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
Certificate issuer: /CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Certificate serial: 019D3909EE61275D8A091684BFEF8EAF8E2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
Manifest number: 0DDD
Signing time: Sun 29 Mar 2026 10:00:45 +0000
Manifest this update: Sun 29 Mar 2026 10:00:45 +0000
Manifest next update: Mon 30 Mar 2026 10:00:45 +0000
Files and hashes: 1: Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl (hash: lYE9EDO0rCE4ne5Yw3nBeM699V50erh6iJPVrjcR9wA=)
2: e8A6sXBGduUCZGJ5-6Y7kMDswOw.roa (hash: FM6aG3gkOk8roOMZ1iwyahhjRPg2yzj4NPtQ7Gqvp50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ee:61:27:5d:8a:09:16:84:bf:ef:8e:af:8e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Validity
Not Before: Mar 29 10:00:45 2026 GMT
Not After : Mar 30 10:00:45 2026 GMT
Subject: CN=018aaf4f905292adcc4b10d3d6a86679a5117e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:64:40:80:c4:c9:b2:ae:0c:12:30:62:ee:
f1:38:66:e2:2e:99:43:1c:19:df:a5:4c:9f:de:b5:
a9:bc:3e:54:7b:a1:e2:9f:34:71:6c:1c:cc:c5:c0:
bd:42:8a:56:a3:9e:ee:e7:90:46:d0:f0:1e:bc:ce:
c5:61:a5:2e:8c:f3:97:76:f8:58:ce:77:34:1f:c5:
df:7f:b7:78:7f:f7:e8:26:0f:35:50:ed:c7:86:43:
e6:40:1a:91:eb:70:3f:9a:73:82:1c:07:6a:3a:fd:
3a:34:da:46:b4:4d:d0:48:4d:a8:86:60:57:5b:4f:
83:be:a8:4c:fe:a6:ec:c7:5d:72:fa:11:c8:b4:67:
ff:ae:16:63:2f:c4:1a:f5:6f:48:85:ad:29:d0:58:
f2:79:09:81:69:5d:06:29:03:c0:72:de:33:c9:58:
10:e4:4b:f4:78:80:96:b4:78:1f:ae:af:42:5d:3e:
7e:23:d1:bd:66:53:49:24:91:50:ae:df:dc:f1:4c:
67:5f:92:2c:62:53:c4:93:06:37:1d:8f:04:8c:ad:
c7:97:30:ae:71:57:c3:bd:02:7a:00:f2:64:0f:f8:
e3:e7:55:1c:39:eb:4e:67:63:6f:8e:6c:71:1a:c3:
76:43:9c:b6:32:77:62:2c:38:bc:7f:c5:67:72:99:
b1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8A:AF:4F:90:52:92:AD:CC:4B:10:D3:D6:A8:66:79:A5:11:7E:41
X509v3 Authority Key Identifier:
keyid:0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:1f:0d:75:54:38:3f:df:da:af:d7:91:9a:02:6f:a4:d3:9d:
e7:c1:ec:a7:7d:ab:c2:d3:55:97:09:0c:43:95:33:c9:f3:c9:
71:20:22:f7:b9:40:99:0e:e7:1a:10:24:ff:30:cf:87:03:4b:
85:9e:89:f3:f9:c3:af:3e:79:24:f4:d1:30:71:08:9d:71:18:
99:a6:61:7f:fb:14:45:db:d2:ab:0d:fa:e1:c4:9c:75:4f:84:
28:c0:5c:04:f7:cc:89:07:1d:d6:9a:70:b7:c1:81:3d:55:90:
cc:d7:95:83:f9:99:2a:7d:7c:7f:6d:bb:82:5e:ed:d5:8a:6e:
4a:e0:52:3f:a3:61:72:83:0a:b9:18:89:65:f6:4a:70:ec:72:
30:93:f1:f1:ba:aa:c4:7b:65:3d:47:01:4a:bc:ff:4b:f2:0b:
42:0d:e7:f1:49:46:00:cd:75:71:d6:6f:7f:5e:e9:c2:4b:0c:
a8:66:ca:05:ff:cb:1e:4d:20:25:fa:d5:38:e0:f0:a0:63:ef:
4d:2a:a7:5b:71:68:f2:3d:d9:1c:dc:23:58:5d:82:b4:80:44:
5a:1a:2c:9f:60:4c:72:fd:65:ff:60:4f:c5:4c:43:33:46:60:
f4:41:c5:c7:06:0c:d6:da:0b:8b:02:b5:b5:7c:84:c1:9a:d9:
a3:c3:57:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:37 2026 by rpki-client