Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
File: Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft (raw, json)
Hash identifier: NsRRRAeRft8K4ID2YYXcu6fNAJ7gJcA4v7Bw3Nu68Yo=
Subject key identifier: A3:4C:E3:66:98:7C:54:64:27:3B:02:CA:31:C7:C4:56:97:01:96:86
Authority key identifier: 0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
Certificate issuer: /CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Certificate serial: 01A151ACD14285C1A7A3E0FB41D3F3D98438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
Manifest number: 0FFC
Signing time: Mon 19 Oct 2026 01:00:42 +0000
Manifest this update: Mon 19 Oct 2026 01:00:42 +0000
Manifest next update: Tue 20 Oct 2026 01:00:42 +0000
Files and hashes: 1: Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl (hash: QJE8xQz3JWbe1B1LTJipHdoiA51z3vlkTIcnCiAjGYk=)
2: e8A6sXBGduUCZGJ5-6Y7kMDswOw.roa (hash: FM6aG3gkOk8roOMZ1iwyahhjRPg2yzj4NPtQ7Gqvp50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:ac:d1:42:85:c1:a7:a3:e0:fb:41:d3:f3:d9:84:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Validity
Not Before: Oct 19 01:00:42 2026 GMT
Not After : Oct 20 01:00:42 2026 GMT
Subject: CN=a34ce366987c5464273b02ca31c7c45697019686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1e:2e:2a:ad:62:12:70:22:d2:9a:49:fc:72:
f7:9d:88:dd:4b:17:b4:5d:d6:2e:bb:89:27:ba:b9:
cf:aa:c2:28:1b:87:a0:6b:4c:d3:f8:f4:11:1d:c6:
13:bd:c8:7a:2a:bd:1c:f1:0f:da:41:b1:9a:e2:9a:
ba:da:80:56:fb:7e:a8:43:9a:9c:a3:33:ce:60:37:
cf:34:16:d3:27:4f:09:8c:5f:fe:6b:31:97:44:bb:
12:9c:04:b1:7b:84:49:05:6c:e2:94:32:9e:50:7e:
45:90:a6:64:41:fb:df:4a:bb:cb:64:72:54:74:b9:
81:03:21:6d:77:5f:78:30:df:b2:77:4c:21:cf:78:
3b:8f:d8:19:f6:82:87:f3:d0:04:3f:22:83:13:2f:
e8:04:87:03:88:d2:91:f2:0c:25:87:02:d8:46:3f:
31:ae:bb:63:df:81:9a:f1:b4:63:ff:24:59:aa:87:
e9:81:51:e2:61:23:6e:cf:ff:e5:d5:a9:d0:23:88:
d4:c8:37:36:f3:2d:70:e2:56:1f:52:b5:63:0e:3d:
7f:28:5b:b8:d0:dd:cc:38:50:13:a7:78:ee:77:a0:
a7:3e:9f:6c:d1:5f:1e:e4:c2:8a:c6:fb:ba:42:28:
a3:de:2f:3f:c5:16:a9:8f:d5:e9:71:fe:63:2a:16:
73:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4C:E3:66:98:7C:54:64:27:3B:02:CA:31:C7:C4:56:97:01:96:86
X509v3 Authority Key Identifier:
keyid:0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b3:d5:57:6f:40:e6:9f:2b:d6:75:e1:41:1d:f4:46:2e:1d:
a4:2a:0c:51:ff:65:97:84:4b:dd:24:4e:73:b8:c5:0f:6e:18:
4b:c8:20:90:16:c0:8d:da:ac:13:29:a2:32:ec:41:69:98:84:
ba:28:61:ac:ab:78:93:46:d4:76:c7:d3:52:8f:76:c3:3b:1a:
c4:56:d7:66:91:0e:e5:06:95:35:90:ae:12:33:45:62:ba:1a:
8b:31:fc:73:d1:02:8f:71:20:e3:33:21:08:32:e2:13:21:88:
2a:9f:0d:53:8b:8d:b2:d9:5f:06:06:9f:6d:ea:44:ab:35:b2:
fd:54:50:85:99:22:7f:7c:12:7f:50:51:c0:de:e6:18:1a:2d:
ff:21:37:ce:d2:b1:5c:b5:eb:3f:d1:48:43:ae:7f:25:f7:30:
8e:dd:53:a4:fa:ef:2e:d6:aa:d1:63:cd:61:e1:6e:b0:80:e1:
ef:61:73:c6:96:de:9c:62:89:c2:84:6c:07:8e:98:7a:1d:9a:
e0:a4:03:e2:7a:75:9a:63:30:40:a9:cd:ef:12:cb:ce:4e:60:
92:be:41:b3:11:af:a3:67:fa:ac:03:8e:55:bb:d0:85:2c:06:
72:76:ce:ec:08:5e:11:d9:3c:7a:6b:0a:0a:7b:a3:9c:c1:5a:
ee:f3:b7:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFRrNFChcGno+D7QdPz2YQ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlY2FiZTA2MWYyZDg5MGE4YzhiNDE4MWFkYmNhNmNhOTQz
YmQyMjIwHhcNMjYxMDE5MDEwMDQyWhcNMjYxMDIwMDEwMDQyWjAzMTEwLwYDVQQD
EyhhMzRjZTM2Njk4N2M1NDY0MjczYjAyY2EzMWM3YzQ1Njk3MDE5Njg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2B4uKq1iEnAi0ppJ/HL3nYjdSxe0
XdYuu4knurnPqsIoG4ega0zT+PQRHcYTvch6Kr0c8Q/aQbGa4pq62oBW+36oQ5qc
ozPOYDfPNBbTJ08JjF/+azGXRLsSnASxe4RJBWzilDKeUH5FkKZkQfvfSrvLZHJU
dLmBAyFtd194MN+yd0whz3g7j9gZ9oKH89AEPyKDEy/oBIcDiNKR8gwlhwLYRj8x
rrtj34Ga8bRj/yRZqofpgVHiYSNuz//l1anQI4jUyDc28y1w4lYfUrVjDj1/KFu4
0N3MOFATp3jud6CnPp9s0V8e5MKKxvu6Qiij3i8/xRapj9Xpcf5jKhZz9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNM42aYfFRkJzsCyjHHxFaXAZaGMB8GA1UdIwQY
MBaAFA7KvgYfLYkKjItBga28psqUO9IiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHNxLUJoOHRpUXFNaTBHQnJieW15cFE3MGlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZmQwMTktNzczZC00Yzk5LWFjZjUt
MDRhMWY5NTQxM2Y3LzEvRHNxLUJoOHRpUXFNaTBHQnJieW15cFE3MGlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yZmQwMTktNzczZC00Yzk5LWFjZjUtMDRhMWY5NTQxM2Y3
LzEvRHNxLUJoOHRpUXFNaTBHQnJieW15cFE3MGlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr7PVV29A
5p8r1nXhQR30Ri4dpCoMUf9ll4RL3SROc7jFD24YS8ggkBbAjdqsEymiMuxBaZiE
uihhrKt4k0bUdsfTUo92wzsaxFbXZpEO5QaVNZCuEjNFYroaizH8c9ECj3Eg4zMh
CDLiEyGIKp8NU4uNstlfBgafbepEqzWy/VRQhZkif3wSf1BRwN7mGBot/yE3ztKx
XLXrP9FIQ65/Jfcwjt1TpPrvLtaq0WPNYeFusIDh72FzxpbenGKJwoRsB46Yeh2a
4KQD4np1mmMwQKnN7xLLzk5gkr5BsxGvo2f6rAOOVbvQhSwGcnbO7AheEdk8emsK
CnujnMFa7vO3cw==
-----END CERTIFICATE-----
Generated at Mon Oct 19 03:47:21 2026 by rpki-client