Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: Wvf61vzHlsrIOsux8q8M87lAfGYfPoMZ818PWvq60S8=
Subject key identifier: DC:75:45:87:A4:5D:A8:8B:7F:84:21:37:EB:C6:2F:B8:91:62:44:11
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 019CE5919264852488D3B58A79F0ECF62826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 1866
Signing time: Fri 13 Mar 2026 05:00:48 +0000
Manifest this update: Fri 13 Mar 2026 05:00:48 +0000
Manifest next update: Sat 14 Mar 2026 05:00:48 +0000
Files and hashes: 1: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: e/Shbag38de3+HnEO6qWBcqGf2dMx0Pep3Tmij+G6Yo=)
2: fyETRmi1CxGmkmyYB5hpA2HK0oo.roa (hash: OLIACt8lWv9FGHOyoiKj40pE3fk980WGJvOR+CZr7Q0=)
3: sGoNKu-l1gztUu2GqMmntwl0pCA.roa (hash: OhFOwa5pVHrJsZulyfQ+KO9kGSEhqaNeINk4y7wW5WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:92:64:85:24:88:d3:b5:8a:79:f0:ec:f6:28:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Mar 13 05:00:48 2026 GMT
Not After : Mar 14 05:00:48 2026 GMT
Subject: CN=dc754587a45da88b7f842137ebc62fb891624411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:82:ff:be:94:4b:77:76:b1:a8:26:66:dc:0d:
59:fd:e8:32:8d:3d:9a:0b:b8:56:2a:28:5a:f7:6c:
62:bb:0b:5c:e0:eb:fe:f1:e4:1f:d0:7f:1d:cf:33:
2c:e3:c7:5c:ef:0f:9a:de:19:88:13:b5:2c:e7:25:
dc:39:29:4b:af:c0:aa:3e:8c:f4:92:3b:4d:e8:51:
79:6d:8d:7f:88:78:bb:48:34:3a:b4:5a:75:cd:00:
82:d3:44:7a:88:af:4f:9a:16:87:38:c7:5c:e2:9a:
66:0c:99:6b:cc:6d:b6:fa:18:2b:7a:a8:6d:e7:4a:
7c:d3:ef:0a:47:10:77:39:5d:ae:3e:c1:e3:8c:3a:
27:c0:78:2a:62:65:6e:57:b3:62:3c:72:b6:e3:7a:
74:e7:de:68:7d:95:ee:0c:57:69:53:f0:18:e0:8d:
78:ae:d0:90:b2:ea:4b:70:aa:22:f5:43:7e:40:e7:
2d:15:b9:bf:9a:e5:df:3a:88:8b:13:72:50:89:ec:
38:99:f0:aa:9d:ab:20:c0:fb:d9:c8:70:a6:79:8f:
0f:d3:39:87:76:44:a4:7b:69:06:02:17:89:32:a9:
a5:68:56:1b:da:13:7d:e0:d0:40:3f:83:83:8e:de:
04:a0:e3:6e:dc:d1:f0:76:db:82:b2:35:b2:39:4b:
03:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:75:45:87:A4:5D:A8:8B:7F:84:21:37:EB:C6:2F:B8:91:62:44:11
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:04:3f:83:3d:7f:85:5a:06:f1:b0:f1:24:f3:92:48:f9:60:
59:d0:51:9b:bc:aa:ac:83:f3:02:c7:20:b9:c9:00:15:a1:a9:
b7:33:c9:61:cf:55:3f:06:76:4f:1c:31:55:53:da:cd:4a:34:
ca:ae:31:8a:75:d8:5d:34:31:2e:2f:22:3c:93:b9:02:85:4a:
90:e6:93:2b:3a:12:5d:81:93:56:be:df:bc:2e:a9:4d:80:7f:
2a:17:69:f8:24:71:4a:11:a4:49:de:25:7a:90:32:5b:56:e2:
2c:e8:d3:6d:85:14:da:fc:39:b9:f6:7f:0c:a0:8a:cb:c5:85:
f9:4a:e2:7f:5f:4d:87:a0:6e:83:35:c3:04:ab:c3:65:8c:af:
53:43:22:69:b9:82:26:10:2c:69:bc:93:e8:74:a7:35:e7:f7:
59:d8:bb:ae:73:70:bf:98:b7:e1:b9:c2:ff:69:77:19:a6:d0:
e4:0b:02:07:65:5f:51:8e:fe:22:e8:b3:16:b9:85:d7:33:19:
65:1a:90:95:d6:4e:5d:28:e0:15:87:5c:16:0a:ef:47:d7:b8:
83:dd:0d:2c:cf:11:d7:8b:71:35:bc:e1:81:3f:27:82:b6:16:
ca:44:f8:a1:91:99:30:23:1a:a1:f3:de:37:f4:19:bb:3d:d9:
d9:a3:11:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:25:53 2026 by rpki-client