Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: DNaag2Pffj3devq4mFLxiGLZOJ8dIV7BSqGf9ucnLO4=
Subject key identifier: F5:F8:30:2A:E3:76:AC:DC:FB:01:B9:F7:A0:9A:67:50:36:D2:7C:4E
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 019DCD502A1DFF2F4BA029EAAEE82CFC5B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 05:01:16 +0000
Manifest this update: Mon 27 Apr 2026 05:01:16 +0000
Manifest next update: Tue 28 Apr 2026 05:01:16 +0000
Files and hashes: 1: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: 3G1qu3rVnr6GYjOYdt3K8U7ldeLfEBPgb92k4PaMVRY=)
2: fyETRmi1CxGmkmyYB5hpA2HK0oo.roa (hash: OLIACt8lWv9FGHOyoiKj40pE3fk980WGJvOR+CZr7Q0=)
3: sGoNKu-l1gztUu2GqMmntwl0pCA.roa (hash: OhFOwa5pVHrJsZulyfQ+KO9kGSEhqaNeINk4y7wW5WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:50:2a:1d:ff:2f:4b:a0:29:ea:ae:e8:2c:fc:5b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Apr 27 05:01:16 2026 GMT
Not After : Apr 28 05:01:16 2026 GMT
Subject: CN=f5f8302ae376acdcfb01b9f7a09a675036d27c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:b9:44:73:fb:bb:86:a7:7e:34:42:f0:cb:
00:39:c8:29:c9:ea:a5:fc:43:70:22:61:0d:1a:62:
7b:cd:25:23:eb:04:16:dc:9d:1c:0f:d2:93:89:88:
92:f7:bb:7c:3b:c6:33:29:f3:76:e1:6d:04:b3:7e:
45:11:3b:ef:d0:0d:a2:9e:41:fb:61:6e:48:34:70:
3d:01:37:1f:2f:9c:f5:ac:64:72:a2:fc:b2:7c:0e:
4f:e9:5e:e4:d8:3f:24:39:fe:1a:b5:be:fc:28:33:
7c:d0:59:77:d7:6d:e6:9f:51:ce:6f:0c:2b:7f:f4:
61:2b:53:76:a0:09:79:ab:36:0c:c4:4b:68:75:03:
ac:4e:a0:df:d8:14:d1:ea:85:69:78:dc:3c:82:61:
bb:95:1f:c9:4a:c5:84:d1:33:5b:83:1a:ab:a2:98:
8b:1c:4c:20:15:2c:7d:85:8b:e0:ac:19:d5:8c:ea:
5b:b1:9d:b9:64:de:66:dd:be:b6:77:dd:76:98:c4:
72:0d:27:76:2e:58:48:c8:55:3d:83:c7:95:f7:f9:
5c:06:5b:6c:8b:db:41:f1:7c:85:0f:86:7d:67:ba:
80:74:c6:c2:3c:22:ab:6b:8f:19:ea:dc:b1:6f:76:
43:eb:45:38:3e:54:a5:a1:3a:47:b3:2b:f7:6f:f9:
a6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F8:30:2A:E3:76:AC:DC:FB:01:B9:F7:A0:9A:67:50:36:D2:7C:4E
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:80:fe:18:d4:94:ca:ca:6d:0a:48:80:42:72:ee:e1:88:15:
91:11:8f:97:46:9d:83:b3:b1:68:80:e1:f3:c5:63:69:23:df:
83:8f:f8:07:71:52:00:b1:c7:5e:72:de:94:91:ab:6b:a7:42:
2b:12:a0:d9:a6:aa:19:eb:72:33:d7:5c:4a:86:ca:01:b0:cf:
ac:89:c0:76:7c:fc:36:20:28:66:2e:65:ce:0a:73:84:35:4f:
c9:fe:f2:b2:a1:06:05:00:b4:9a:53:be:af:d2:44:14:77:b1:
37:43:79:ac:bf:b7:3b:fa:3f:2d:b5:b4:ba:a7:8f:93:0e:bc:
a1:32:c4:9c:63:40:51:f4:02:e5:be:48:ea:21:e6:7b:21:44:
5c:46:b9:85:17:2f:54:5d:1c:c0:b2:5d:c1:1e:b0:62:bf:bd:
c2:7d:97:68:b1:d1:26:cb:1a:01:dc:70:89:a3:75:6d:99:b5:
8f:41:41:ab:34:be:43:63:a4:01:b0:a3:c9:1a:ac:27:18:f5:
3b:1c:5a:20:4b:9f:58:74:db:2e:d6:c7:17:09:06:ce:aa:c5:
3f:56:ac:f2:a0:37:93:da:ac:0e:d3:17:94:34:3d:27:17:44:
ae:07:29:7f:6a:d5:fa:49:98:c2:7f:4d:e9:08:bd:b1:d0:40:
3d:c3:97:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NUCod/y9LoCnqrugs/FsTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMDQ5MTNkMDQzZGJiMTE3Y2Y2YjkzMjNjOGFiMjQ3Y2I1
MmUyNTEwHhcNMjYwNDI3MDUwMTE2WhcNMjYwNDI4MDUwMTE2WjAzMTEwLwYDVQQD
EyhmNWY4MzAyYWUzNzZhY2RjZmIwMWI5ZjdhMDlhNjc1MDM2ZDI3YzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT+5RHP7u4anfjRC8MsAOcgpyeql
/ENwImENGmJ7zSUj6wQW3J0cD9KTiYiS97t8O8YzKfN24W0Es35FETvv0A2inkH7
YW5INHA9ATcfL5z1rGRyovyyfA5P6V7k2D8kOf4atb78KDN80Fl3123mn1HObwwr
f/RhK1N2oAl5qzYMxEtodQOsTqDf2BTR6oVpeNw8gmG7lR/JSsWE0TNbgxqropiL
HEwgFSx9hYvgrBnVjOpbsZ25ZN5m3b62d912mMRyDSd2LlhIyFU9g8eV9/lcBlts
i9tB8XyFD4Z9Z7qAdMbCPCKra48Z6tyxb3ZD60U4PlSloTpHsyv3b/mmhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPX4MCrjdqzc+wG596CaZ1A20nxOMB8GA1UdIwQY
MBaAFA0EkT0EPbsRfPa5MjyKskfLUuJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFFTUlBRUTl1eEY4OXJreVBJcXlSOHRTNGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80N2RmZjAtMmIxMS00NGJjLWI3MjEt
OTZjODFmYjY1MWEwLzEvRFFTUlBRUTl1eEY4OXJreVBJcXlSOHRTNGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS80N2RmZjAtMmIxMS00NGJjLWI3MjEtOTZjODFmYjY1MWEw
LzEvRFFTUlBRUTl1eEY4OXJreVBJcXlSOHRTNGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqYD+GNSU
ysptCkiAQnLu4YgVkRGPl0adg7OxaIDh88VjaSPfg4/4B3FSALHHXnLelJGra6dC
KxKg2aaqGetyM9dcSobKAbDPrInAdnz8NiAoZi5lzgpzhDVPyf7ysqEGBQC0mlO+
r9JEFHexN0N5rL+3O/o/LbW0uqePkw68oTLEnGNAUfQC5b5I6iHmeyFEXEa5hRcv
VF0cwLJdwR6wYr+9wn2XaLHRJssaAdxwiaN1bZm1j0FBqzS+Q2OkAbCjyRqsJxj1
OxxaIEufWHTbLtbHFwkGzqrFP1as8qA3k9qsDtMXlDQ9JxdErgcpf2rV+kmYwn9N
6Qi9sdBAPcOXCA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:23 2026 by rpki-client