Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: 8aQlf6/YkdlOwgp4QeuElfmmPfNyvS4ba8GquWz7Tew=
Subject key identifier: 02:DF:72:DF:58:6C:3C:12:32:88:71:CA:C1:10:09:96:C5:F0:19:6A
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 01A17DAA027CADA93DD5E86885337125387C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 14:00:55 +0000
Manifest this update: Tue 27 Oct 2026 14:00:55 +0000
Manifest next update: Wed 28 Oct 2026 14:00:55 +0000
Files and hashes: 1: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: +zDCAQqOh1NfvsATtP+TCgwxL0ALrFgrCYdhnndUtzs=)
2: fyETRmi1CxGmkmyYB5hpA2HK0oo.roa (hash: OLIACt8lWv9FGHOyoiKj40pE3fk980WGJvOR+CZr7Q0=)
3: sGoNKu-l1gztUu2GqMmntwl0pCA.roa (hash: OhFOwa5pVHrJsZulyfQ+KO9kGSEhqaNeINk4y7wW5WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:02:7c:ad:a9:3d:d5:e8:68:85:33:71:25:38:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Oct 27 14:00:55 2026 GMT
Not After : Oct 28 14:00:55 2026 GMT
Subject: CN=02df72df586c3c12328871cac1100996c5f0196a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:91:6d:e6:e6:99:b8:d5:08:10:79:07:06:b3:
81:82:c3:31:04:31:ee:67:7c:54:05:ae:3b:8e:1f:
8f:93:bb:a8:48:03:c7:5f:c4:a6:d3:27:ae:db:b5:
7d:6d:a6:0f:3e:25:3e:2a:9d:ac:f7:6e:2f:30:c1:
e2:a1:df:db:57:c9:16:a1:3e:c7:da:79:57:3d:b6:
79:c2:31:16:36:aa:b3:51:ef:05:fa:b9:01:ee:5e:
61:c3:d4:65:03:63:11:f8:56:87:58:02:cb:fd:e4:
66:e7:ee:8b:6e:0e:2b:3f:f9:f8:af:79:b8:7e:1d:
9f:50:c8:a1:71:34:0c:66:40:62:db:3a:4e:46:78:
2c:b4:a1:df:66:c1:7c:d9:e9:71:dc:3e:70:15:b9:
2c:20:53:f9:fb:4c:9d:0e:fa:5c:bb:65:ba:55:e3:
0a:1b:66:2b:ce:6d:09:be:84:69:92:d3:93:70:68:
54:26:79:14:45:c9:1d:14:91:ab:d8:6d:83:d3:d4:
29:06:f7:ae:6b:11:f9:54:73:f3:58:30:fb:8d:0c:
67:1f:42:5b:d3:51:bb:ad:d6:fe:10:04:a6:c7:5e:
88:45:64:36:e5:82:c6:c6:cf:be:e9:d4:f4:66:23:
72:51:32:3b:9d:d7:61:a4:f0:4b:db:3c:f2:7f:4f:
bc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DF:72:DF:58:6C:3C:12:32:88:71:CA:C1:10:09:96:C5:F0:19:6A
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a1:76:d7:5c:e1:e4:80:1e:bf:37:86:e1:1a:f1:c6:6f:66:
88:b8:37:90:b5:d3:99:9e:3c:9e:cf:52:bc:f9:a7:7f:87:0a:
5b:22:cd:39:89:36:70:fd:c2:e0:78:80:a5:ad:53:dd:3c:83:
8b:42:29:7f:f4:bf:d7:40:3e:e6:14:5c:d6:a1:f8:55:9f:21:
88:f9:50:dd:9b:06:38:30:16:0a:f2:36:f0:74:ef:78:19:01:
54:d5:9f:80:c5:c4:6d:88:01:ef:c7:57:e5:89:e5:02:fa:10:
11:c1:25:0e:60:1a:66:cb:ef:09:b6:da:b6:f8:fd:4a:a7:77:
87:d3:ff:10:5f:d1:2c:30:be:94:9f:2d:67:cf:44:df:66:17:
b8:46:5e:f1:4e:22:23:38:51:04:e2:94:00:91:a3:54:68:e5:
ad:7e:c0:00:4a:d1:da:18:76:ec:47:7b:34:c0:d4:e0:27:52:
b9:7b:f0:67:5f:a6:5b:cd:20:1f:90:91:00:61:23:ad:47:af:
11:0d:d7:2f:0d:bc:40:e6:14:9c:df:eb:e5:4f:6f:33:72:cc:
45:6a:cf:90:7e:23:63:9e:b0:01:91:79:28:49:d8:74:f8:df:
58:1e:b6:82:39:eb:87:63:28:25:f2:4d:dc:75:cc:15:01:0d:
70:c6:a3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:36:20 2026 by rpki-client