Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: mrPczOWWiyx4RQFbkgk4KWdLzJkn397u5d3coU8PoHY=
Subject key identifier: 8D:5F:FD:75:AE:A6:CE:8F:73:8A:C1:0A:A6:05:9C:4F:F7:5F:FC:87
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 019FA0A856E383BE6FD2C63C767F5F086282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 19D0
Signing time: Sun 26 Jul 2026 23:00:14 +0000
Manifest this update: Sun 26 Jul 2026 23:00:14 +0000
Manifest next update: Mon 27 Jul 2026 23:00:14 +0000
Files and hashes: 1: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: MhEbBNLBFnvOlE3n3xeEXoASsdsuXJEhCxwjPsyj91M=)
2: fyETRmi1CxGmkmyYB5hpA2HK0oo.roa (hash: OLIACt8lWv9FGHOyoiKj40pE3fk980WGJvOR+CZr7Q0=)
3: sGoNKu-l1gztUu2GqMmntwl0pCA.roa (hash: OhFOwa5pVHrJsZulyfQ+KO9kGSEhqaNeINk4y7wW5WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:56:e3:83:be:6f:d2:c6:3c:76:7f:5f:08:62:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Jul 26 23:00:14 2026 GMT
Not After : Jul 27 23:00:14 2026 GMT
Subject: CN=8d5ffd75aea6ce8f738ac10aa6059c4ff75ffc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e2:51:f8:85:ca:07:46:a7:3e:b7:60:a8:1b:
89:89:48:2d:31:9a:5b:9a:2f:11:5a:4e:dd:08:41:
54:88:64:aa:f3:d8:c2:89:94:8b:57:0b:d2:d4:d1:
64:76:6b:e8:7a:0d:39:4e:1d:a1:4f:c2:40:33:27:
1f:90:00:56:a7:82:15:d1:5c:6c:24:31:2f:ed:20:
71:f2:86:98:93:c2:25:85:15:31:54:33:70:59:26:
ce:bf:98:e3:c7:b7:ec:ca:bd:e4:33:58:0f:b4:9d:
e5:a9:64:59:e5:12:e1:d6:2e:b5:b8:f3:93:55:6e:
aa:42:37:75:cd:ca:70:91:18:3f:49:57:ee:56:68:
31:46:b4:3a:1e:45:90:b4:c3:b2:52:e6:c6:c7:f4:
50:2c:7d:12:8d:18:87:5e:55:1f:28:e1:74:b8:05:
a8:2e:9b:d1:d2:f7:85:e6:65:2d:05:b3:c8:9a:4f:
e2:b3:4f:46:99:f8:be:5a:3e:e7:16:c8:7e:33:ac:
6c:41:58:a4:a9:e9:82:fc:4c:7e:02:70:15:b7:e0:
b0:a0:9a:50:b2:93:84:69:56:19:38:91:e8:ea:f2:
45:8b:c8:00:66:ad:d8:a5:9a:b3:f2:99:44:1c:dc:
af:05:66:c4:26:c8:b8:25:76:17:95:03:ad:0a:41:
55:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5F:FD:75:AE:A6:CE:8F:73:8A:C1:0A:A6:05:9C:4F:F7:5F:FC:87
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9e:e9:d4:26:b2:e0:b4:ba:f1:8c:b8:22:5d:74:04:f8:8c:
6b:16:19:9f:06:01:d8:5f:a8:67:f3:31:28:79:10:10:e8:36:
17:6f:28:4d:16:2d:50:ea:af:cb:00:99:5e:b9:27:77:80:ad:
2d:bd:19:45:05:fb:3d:f1:87:0e:6b:58:c2:c7:6e:f7:ac:99:
46:88:c1:08:d0:24:1c:2f:0d:65:c3:fa:d3:f4:fb:83:45:2c:
15:68:ba:34:53:95:e8:2f:8a:4e:d5:fc:ab:ed:2e:55:9b:08:
87:1a:4b:c0:89:b7:85:d5:9d:dc:02:84:65:1c:c9:d4:49:40:
cd:83:05:cf:08:fe:c3:18:65:29:79:cc:4b:bd:76:0d:96:0b:
bb:84:c2:af:dd:1e:81:76:2b:c4:26:cd:cb:e7:47:04:12:7b:
1d:2c:06:50:37:8a:fe:94:8e:40:fe:31:9b:60:6a:f9:b9:ac:
d8:9c:c3:00:ca:ba:52:df:5c:96:ca:65:7a:5a:82:94:e7:48:
a5:9a:45:85:80:32:98:7f:2d:40:e5:d2:30:e8:2c:03:c8:3c:
ff:0a:f8:85:1e:f0:d6:0c:3f:df:aa:35:bd:ee:80:e2:d0:ea:
c3:7e:b2:d1:ec:96:4f:23:2d:c5:13:07:b3:08:fd:00:56:7e:
cc:a6:1d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:58:01 2026 by rpki-client