Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
File: Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft (raw, json)
Hash identifier: lWr9vj1ba24X5WrFx332wMUCyvUYL/Arl5aLhlT62GE=
Subject key identifier: 19:7B:4D:82:87:4C:46:27:FC:40:D2:5D:2F:EB:18:D6:17:C7:2A:5B
Authority key identifier: 0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
Certificate issuer: /CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Certificate serial: 019D9D765A11C0EBC7FEC6261E143B467A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
Manifest number: 0E11
Signing time: Fri 17 Apr 2026 22:01:12 +0000
Manifest this update: Fri 17 Apr 2026 22:01:12 +0000
Manifest next update: Sat 18 Apr 2026 22:01:12 +0000
Files and hashes: 1: Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl (hash: z0tknkVSAtGx/o0Z3SRDHH9I9YQIlpOYaibgLgHCYCU=)
2: e8A6sXBGduUCZGJ5-6Y7kMDswOw.roa (hash: FM6aG3gkOk8roOMZ1iwyahhjRPg2yzj4NPtQ7Gqvp50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:76:5a:11:c0:eb:c7:fe:c6:26:1e:14:3b:46:7a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Validity
Not Before: Apr 17 22:01:12 2026 GMT
Not After : Apr 18 22:01:12 2026 GMT
Subject: CN=197b4d82874c4627fc40d25d2feb18d617c72a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:d3:e2:ff:99:b9:fd:05:76:9b:b2:c8:22:c7:
d1:18:73:77:ee:76:62:b4:83:66:74:81:7b:c7:53:
0c:8a:e0:43:00:6a:81:6e:2d:dc:be:95:2b:10:a9:
27:c1:9c:3d:d2:46:ff:e1:89:4c:ba:9a:5c:e7:8f:
1f:69:42:a7:ab:11:58:de:eb:40:1e:35:1b:07:cd:
63:f1:31:7c:3b:2c:84:ac:dd:d8:b2:ba:6e:0f:f8:
bf:24:93:69:61:43:1a:cf:51:90:a4:0b:c8:fa:e7:
f3:57:7c:49:46:5d:11:35:71:e1:46:89:63:6a:8f:
c1:31:96:ca:4e:c8:04:95:b2:9e:7f:f0:79:1b:b1:
cd:d4:4f:55:bf:33:c5:15:42:c2:0a:d5:dc:43:eb:
ea:0f:56:3f:0d:de:06:83:03:d9:a6:c8:e1:54:f7:
6e:83:71:2d:ce:65:98:62:73:c6:72:9f:5a:a5:83:
eb:31:d6:56:b2:55:af:6d:76:57:2f:a8:c4:5f:2c:
eb:9f:ad:01:0f:0d:cf:61:3d:49:88:a1:47:06:fb:
11:fc:4e:2e:d4:0f:6f:0e:db:8c:1f:1e:fe:0b:c9:
cd:8c:12:af:e3:b9:c7:c6:2a:21:ac:0f:6e:21:b2:
f2:94:89:67:8e:eb:be:34:ac:57:ad:75:89:f9:b0:
89:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7B:4D:82:87:4C:46:27:FC:40:D2:5D:2F:EB:18:D6:17:C7:2A:5B
X509v3 Authority Key Identifier:
keyid:0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a7:e9:91:86:f3:24:f1:af:a6:5e:1d:36:a1:2b:4f:0a:a9:
33:4b:91:85:a5:b3:db:a9:8a:73:68:94:0d:d3:82:6d:f9:cd:
64:f8:87:05:e6:41:dc:00:fa:6f:80:ac:4e:7c:b1:42:f0:d3:
3e:59:49:74:86:e5:ae:77:72:6b:47:5c:cd:bd:2e:d5:ec:d3:
9f:4a:fd:23:73:a2:f9:aa:0a:aa:28:88:e2:7c:16:9a:62:d4:
30:20:aa:30:57:85:d1:c3:99:2f:fc:cd:84:c3:e0:7c:8f:d2:
66:bb:6b:59:86:39:43:8c:ea:bc:59:42:bc:1c:39:ec:54:8a:
50:68:12:5a:fb:52:9d:cd:12:33:0e:08:fc:05:b7:c6:ea:d3:
1e:79:7f:3f:53:37:a6:6f:08:f5:fd:a0:61:2b:ce:d4:d9:36:
fb:d0:c5:14:b6:2e:50:e7:22:7c:19:40:7f:4f:89:ca:6d:bf:
de:73:fd:8b:c4:b4:f2:8f:de:e5:5e:41:56:7e:21:29:29:f2:
57:e7:4e:f1:20:28:93:2d:50:9e:78:07:5a:db:a5:d3:5b:d7:
45:aa:f7:0a:2b:9f:4e:4b:32:6d:55:c3:da:c2:22:e0:6d:9f:
30:64:f9:fc:96:9c:79:1f:2f:56:07:42:d8:00:c3:04:ca:66:
93:c8:61:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:52:11 2026 by rpki-client