Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: jM5olkJS+ZqRyFneRY2jkV2fksgyFiKCcQIyKmi7ROo=
Subject key identifier: 18:B0:C9:EF:A5:81:DE:D8:6D:E4:2E:47:31:C5:C3:70:95:80:48:3C
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 01A08A559B1C4B99E4DE1CF8289E01FF7929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 08:01:01 +0000
Manifest this update: Thu 10 Sep 2026 08:01:01 +0000
Manifest next update: Fri 11 Sep 2026 08:01:01 +0000
Files and hashes: 1: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: XjufIZjq3b4roH2TC2YwlHtS7QSBftQXwesZTES9zxU=)
2: fyETRmi1CxGmkmyYB5hpA2HK0oo.roa (hash: OLIACt8lWv9FGHOyoiKj40pE3fk980WGJvOR+CZr7Q0=)
3: sGoNKu-l1gztUu2GqMmntwl0pCA.roa (hash: OhFOwa5pVHrJsZulyfQ+KO9kGSEhqaNeINk4y7wW5WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:9b:1c:4b:99:e4:de:1c:f8:28:9e:01:ff:79:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Sep 10 08:01:01 2026 GMT
Not After : Sep 11 08:01:01 2026 GMT
Subject: CN=18b0c9efa581ded86de42e4731c5c3709580483c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:a3:7e:0c:eb:02:bf:2e:30:87:35:be:b2:
da:87:f9:df:28:45:77:81:36:ca:3d:c0:2b:c2:85:
9c:c4:9c:f0:4d:43:e6:56:3f:40:a0:d6:d5:35:5f:
31:b9:70:99:6a:46:fc:24:ea:3f:4b:07:a7:c4:71:
06:06:0c:9a:84:48:68:d9:9d:f8:ab:5a:d8:e5:db:
6f:90:fc:b3:f5:7a:d8:68:10:b0:e1:ee:7e:22:b7:
f3:99:73:59:bc:68:69:84:b9:72:6f:2e:2b:21:1e:
d6:05:4a:fd:40:f8:d9:0b:54:32:88:7b:a1:ff:71:
b5:0f:24:96:54:01:2c:04:c6:ca:23:92:3a:71:d2:
ca:b0:a0:9d:f9:43:14:27:83:3a:79:da:50:3a:c8:
5e:2c:78:9d:c5:5c:8f:3b:e7:63:62:5a:dc:6e:28:
f7:91:28:8a:70:08:65:f1:d7:b1:ec:7b:f6:e4:f6:
f7:51:84:61:cc:79:60:7f:e1:1a:fa:7c:6d:71:d3:
11:bf:03:45:00:72:4b:3c:e3:9d:d9:c6:f6:20:ee:
7b:a2:34:be:3b:8e:3b:cb:f9:86:b4:28:32:df:a0:
f5:89:f1:04:cb:db:11:ef:31:45:72:2f:c8:9a:51:
6b:ca:e7:d3:f7:94:a0:2b:5c:da:e5:34:74:81:ce:
f3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B0:C9:EF:A5:81:DE:D8:6D:E4:2E:47:31:C5:C3:70:95:80:48:3C
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ee:96:02:6b:3c:fe:55:df:9b:db:eb:b2:60:f9:3f:a7:51:
50:a1:24:bd:fd:61:31:ef:e6:81:17:35:7f:4e:83:ac:5b:15:
85:dd:71:1e:54:47:b9:5f:23:e6:54:40:61:d8:82:5d:8c:30:
a1:32:97:87:80:68:16:2e:f7:84:33:a1:53:04:c0:bc:12:09:
e7:e4:fb:05:11:9f:28:9d:83:12:fb:74:2c:b9:61:0d:d9:71:
9f:e7:0b:c5:84:a9:5d:7f:d2:59:26:a7:e0:3c:1a:c7:d6:ee:
f9:f5:e2:dd:5e:df:98:aa:38:c4:14:03:04:ba:c4:4e:63:75:
da:96:b0:ff:97:fe:a1:05:dc:ee:27:24:a5:1a:40:14:68:da:
91:47:4c:11:4d:f6:13:54:6e:9f:2c:ea:75:a0:de:9e:cc:c5:
d3:8e:4f:ad:53:1a:57:01:fd:da:a1:01:39:3d:31:7e:d2:6b:
c8:c6:54:eb:33:91:9e:1c:71:22:5d:35:c9:de:55:bd:f7:a2:
52:21:52:8b:2e:a5:fb:13:28:d0:36:c6:af:43:c5:00:5a:a8:
cb:b3:55:a4:81:62:53:ae:d5:b2:9f:15:f5:75:72:d3:76:65:
0a:43:8b:5e:67:8b:bb:80:6b:e6:7d:fb:16:25:54:c5:9f:f2:
ae:a4:8b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:47 2026 by rpki-client