Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
File: Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft (raw, json)
Hash identifier: /PRusxA+dlHJdXGrqCbhhwXIEhy0NAZDOrqSp3lw3S8=
Subject key identifier: 04:2F:BF:F7:C3:FB:74:43:3B:A5:49:28:FB:B9:10:52:AE:23:27:4A
Authority key identifier: 0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
Certificate issuer: /CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Certificate serial: 019E303B27B92DC95C733774E4D0913E62A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
Manifest number: 0E5D
Signing time: Sat 16 May 2026 10:00:43 +0000
Manifest this update: Sat 16 May 2026 10:00:43 +0000
Manifest next update: Sun 17 May 2026 10:00:43 +0000
Files and hashes: 1: Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl (hash: 1Cw1fBBzAGosvT2AAR+S46YokfZ6fZlyKEBegHHy0Cw=)
2: e8A6sXBGduUCZGJ5-6Y7kMDswOw.roa (hash: FM6aG3gkOk8roOMZ1iwyahhjRPg2yzj4NPtQ7Gqvp50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:27:b9:2d:c9:5c:73:37:74:e4:d0:91:3e:62:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Validity
Not Before: May 16 10:00:43 2026 GMT
Not After : May 17 10:00:43 2026 GMT
Subject: CN=042fbff7c3fb74433ba54928fbb91052ae23274a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4b:3e:d2:de:3e:45:6c:67:b5:e8:1e:8a:4f:
42:52:44:76:d8:c4:5e:8e:2b:1c:b1:ce:33:a4:1a:
f8:f2:90:4f:46:89:ff:75:2b:69:e2:a9:3b:81:eb:
58:5c:88:2a:2d:3d:c7:80:37:c8:2a:47:69:b2:ef:
db:b4:2f:29:14:8d:3f:96:a6:e6:ed:ed:38:61:d9:
af:27:04:37:a2:62:fc:79:8e:b8:f5:e5:2d:43:d2:
e6:30:ec:f6:d1:61:24:f9:3e:ac:12:71:b7:84:90:
8c:ef:1f:20:b1:4f:51:7a:5f:50:11:87:11:49:af:
bc:f5:c5:61:1a:c8:b6:b9:c4:33:e0:cc:c4:fb:6b:
23:d4:d6:83:7f:7a:f9:62:a3:3b:2e:47:b9:53:ab:
85:6b:31:30:3e:05:9e:8e:84:cc:70:81:15:96:ad:
9e:98:95:11:25:92:ca:c7:75:b0:0c:f1:c9:bf:84:
36:20:4a:8f:57:cb:12:0b:57:52:9b:d0:14:4b:a4:
5d:8a:ed:ba:b1:3d:ba:27:85:92:d0:7e:94:6f:6e:
a6:eb:ff:69:78:08:44:b5:b5:6d:54:7e:20:c2:35:
c0:d9:4a:5d:6a:c9:e2:16:0a:58:7a:21:92:cf:7f:
9f:cb:45:c2:e9:11:24:93:e2:42:8f:2e:38:1d:7f:
f9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2F:BF:F7:C3:FB:74:43:3B:A5:49:28:FB:B9:10:52:AE:23:27:4A
X509v3 Authority Key Identifier:
keyid:0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1f:4f:09:e1:c6:6c:ec:9e:62:02:df:2e:b0:f6:d4:37:00:
a6:cc:44:62:40:3e:3e:80:0d:34:eb:4d:9a:44:37:c9:73:85:
f8:a4:62:99:1c:57:f9:55:5c:8a:97:b9:f5:2f:c7:56:73:80:
a2:4d:b4:70:73:aa:bf:96:26:71:43:03:1b:ce:ba:0a:91:6f:
42:dd:56:2f:c3:8c:8f:f0:e8:59:1a:96:9d:fe:37:39:4e:00:
84:38:c5:9f:51:e0:9c:52:3f:84:17:97:2f:9d:d9:7b:32:9a:
28:d6:ad:e6:1d:34:67:90:e6:05:bb:36:24:a4:56:be:c5:34:
5c:97:39:a6:df:91:19:1e:5f:b7:2f:26:24:7c:8f:bb:c2:b3:
d4:99:ac:37:4b:1f:72:54:6f:b4:1f:e1:d1:40:39:9c:47:bf:
ac:98:0c:f8:2a:c7:5c:7a:f5:5a:2c:57:36:56:a2:59:b1:9e:
56:c7:13:16:96:fe:c7:70:51:77:92:b6:47:a5:e4:57:f2:7c:
c2:b1:48:cb:c1:15:b9:56:1d:7b:d5:1c:8f:83:76:55:2c:da:
98:78:3b:58:d2:56:57:2f:a3:95:ad:18:2d:52:99:ac:9d:8e:
d1:01:73:b1:81:9f:07:89:5a:11:06:d1:4c:4b:31:9d:68:09:
6b:4d:16:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:32 2026 by rpki-client