Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: m8dha1iDA24b5GD/xz7fcbYsK7F526hkVV4jijucut8=
Subject key identifier: E1:72:A4:83:C9:41:66:45:CD:0D:68:2B:60:0D:F4:94:7B:A1:71:EE
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 019EB6FC59342B02BAFEEEAE7EB53734EE9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 14:00:51 +0000
Manifest this update: Thu 11 Jun 2026 14:00:51 +0000
Manifest next update: Fri 12 Jun 2026 14:00:51 +0000
Files and hashes: 1: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: UksI3YjOumuLqxWcJPCjkA9pKZRn4xLTHK899F/auZs=)
2: fyETRmi1CxGmkmyYB5hpA2HK0oo.roa (hash: OLIACt8lWv9FGHOyoiKj40pE3fk980WGJvOR+CZr7Q0=)
3: sGoNKu-l1gztUu2GqMmntwl0pCA.roa (hash: OhFOwa5pVHrJsZulyfQ+KO9kGSEhqaNeINk4y7wW5WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fc:59:34:2b:02:ba:fe:ee:ae:7e:b5:37:34:ee:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Jun 11 14:00:51 2026 GMT
Not After : Jun 12 14:00:51 2026 GMT
Subject: CN=e172a483c9416645cd0d682b600df4947ba171ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:92:37:9d:13:38:49:a5:9c:b8:07:8d:7d:
40:4c:a4:ad:65:5b:24:24:5e:8e:32:00:72:da:b5:
02:4b:9a:d8:5b:60:a3:2f:88:86:f3:d9:4d:49:99:
05:98:8f:3a:7f:f1:08:87:cb:a0:6d:26:34:5e:f7:
b6:18:0d:b5:b0:1b:78:bd:aa:3a:53:01:4a:7c:3d:
ca:87:9a:5d:69:b6:b5:ac:af:0e:37:a7:b2:78:78:
14:dd:17:e9:84:d4:ee:1e:4b:05:8f:6d:f8:25:c9:
af:ce:81:5c:79:94:1f:25:82:fd:04:b1:7c:b3:94:
08:fc:16:ce:00:48:8c:a0:4e:a6:65:c1:40:7e:83:
cd:98:d3:b5:8e:76:ab:27:6c:c3:12:79:75:cb:c1:
ea:3b:a9:9c:c5:92:60:71:0c:2b:0c:56:21:0f:e6:
40:5e:32:84:48:f8:45:22:e1:7e:41:bd:71:9b:ae:
0a:48:7a:df:08:9e:9c:9a:18:51:79:cd:02:ca:b3:
5f:86:78:c8:1e:b3:59:84:1f:b3:09:6a:a4:cb:b9:
4f:32:0f:5e:a2:4e:ba:d7:08:f6:79:eb:79:ce:e4:
c3:78:d8:34:19:01:78:98:89:43:d8:a4:1f:9b:03:
6d:64:6b:c0:17:45:bf:d2:8c:84:b8:f6:3f:89:11:
d7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:72:A4:83:C9:41:66:45:CD:0D:68:2B:60:0D:F4:94:7B:A1:71:EE
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d1:e5:7b:2a:b0:48:ef:2a:c4:c3:3f:f6:0b:72:14:25:d8:
61:ac:a3:e6:24:87:4e:22:90:57:ce:d2:dc:61:de:46:77:83:
cb:c6:fd:5c:36:75:49:2f:21:46:bc:83:b0:19:37:47:d0:d4:
54:4a:f4:b2:33:7c:64:d9:5a:52:00:1a:91:4e:74:d8:b3:96:
ef:29:8a:ce:e5:ac:a0:ce:2c:a5:d6:49:39:f9:fb:53:f4:ad:
bf:98:31:c2:f1:51:66:51:86:06:92:c4:d3:83:53:23:da:06:
d9:ac:3f:9b:f6:03:fe:51:c7:3c:06:48:89:67:18:23:fd:c7:
f8:46:c1:b5:31:ab:a7:19:b4:57:02:36:09:00:f9:ab:b7:62:
64:f6:e9:ab:0a:e2:7c:01:cf:3a:ae:03:b1:0b:af:a1:79:91:
60:d1:0f:ed:97:87:a2:21:97:ec:a0:6c:72:b0:ba:84:36:0d:
e5:17:5c:4b:71:52:df:c6:ae:72:fa:e2:3b:21:33:66:d0:3e:
91:fe:0d:39:a9:ff:e0:e1:82:7b:11:ea:1a:91:8a:c3:c0:2c:
57:6d:a3:85:ea:53:7f:a2:b1:1e:0f:46:6b:ab:80:9d:ff:61:
33:b1:f7:df:84:09:a5:88:1d:70:7e:be:0c:f5:85:8c:ac:d8:
ce:8a:5e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:24:30 2026 by rpki-client