Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
File: Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft (raw, json)
Hash identifier: IK36uOL34gqgCHgqyMaoxzoPKndsafSB2cN9innGJdM=
Subject key identifier: 2E:10:F7:DD:5F:E9:2F:C0:06:96:1D:2A:B0:97:66:38:2B:E4:77:58
Authority key identifier: 0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
Certificate issuer: /CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Certificate serial: 019CADFEAB57CF9E852D3A11C5B070D603D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
Manifest number: 0D95
Signing time: Mon 02 Mar 2026 10:01:14 +0000
Manifest this update: Mon 02 Mar 2026 10:01:14 +0000
Manifest next update: Tue 03 Mar 2026 10:01:14 +0000
Files and hashes: 1: Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl (hash: YC/o5R6w6VFAbK7OcSuwqVey2blqAF4dpHgyDmUUxu8=)
2: e8A6sXBGduUCZGJ5-6Y7kMDswOw.roa (hash: FM6aG3gkOk8roOMZ1iwyahhjRPg2yzj4NPtQ7Gqvp50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:ab:57:cf:9e:85:2d:3a:11:c5:b0:70:d6:03:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Validity
Not Before: Mar 2 10:01:14 2026 GMT
Not After : Mar 3 10:01:14 2026 GMT
Subject: CN=2e10f7dd5fe92fc006961d2ab09766382be47758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b4:0c:6a:4d:8e:85:33:5e:79:43:31:b1:d5:
4f:98:6e:c2:c8:be:23:bf:1e:c6:18:b9:a1:4e:70:
42:fb:ca:99:9d:fc:6a:e4:69:2a:74:96:64:8d:6e:
ba:7b:24:7c:46:51:e0:a3:04:46:89:9c:89:77:28:
37:81:c8:d5:1f:81:30:fa:f6:19:08:bb:17:b9:f1:
a7:1f:3b:75:d7:56:3a:ed:13:5d:cf:17:dc:84:bc:
b9:f0:07:55:2a:5b:96:e0:85:80:cc:d8:9d:12:71:
b3:5b:75:29:2a:a3:1f:3e:4d:62:c3:0c:04:17:af:
cf:54:16:d8:9a:6e:5a:78:b5:2b:73:b8:de:9a:6a:
c8:68:0e:36:ee:96:f9:96:37:33:45:32:73:9b:c9:
d4:3c:86:f1:af:f9:3e:cd:51:e1:71:18:5d:97:80:
ae:9d:51:a3:35:88:31:65:f7:76:0d:64:d8:72:f7:
22:db:93:ca:5c:d5:00:92:b0:58:ea:da:63:7c:b5:
41:37:66:28:4f:7f:a1:14:1d:6d:32:21:c2:02:0a:
05:d2:2e:6d:a4:f1:7d:27:24:6f:43:b6:9f:09:63:
56:f1:9c:4d:3c:5e:e9:f5:98:fc:49:e2:47:23:34:
d6:36:42:8b:dd:57:8f:88:e1:ac:21:5d:c1:ba:ee:
c3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:10:F7:DD:5F:E9:2F:C0:06:96:1D:2A:B0:97:66:38:2B:E4:77:58
X509v3 Authority Key Identifier:
keyid:0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:8c:80:db:9c:88:d2:19:03:61:52:3f:e4:42:c8:a8:fe:26:
64:cb:be:61:61:00:36:7a:95:29:a5:d0:6c:20:7b:56:b4:82:
9f:6b:84:e9:47:fe:93:a0:6c:b6:04:f3:ab:67:4a:12:c1:39:
3a:4a:05:cb:7c:52:3c:81:62:28:08:e5:5f:ce:d4:52:e0:53:
ec:83:5c:3b:90:69:f0:9b:14:8e:87:5a:40:be:e2:e2:2f:9a:
24:6c:66:2e:f2:0c:0e:9a:35:0c:91:12:12:0e:f6:a0:7c:7e:
32:3f:48:93:8c:aa:55:0b:b3:6b:d1:0e:40:9d:94:48:21:fe:
5d:ac:50:57:4c:ee:14:e3:40:cd:a3:3b:e3:f7:d4:96:13:ff:
4a:61:97:93:6b:fa:cd:12:fc:7b:a4:09:68:f1:9a:f2:c8:f8:
c5:1a:b9:b2:35:85:c3:e1:8b:2d:a9:4c:ad:25:31:7b:98:19:
34:10:da:d9:36:5f:f1:eb:13:a0:30:c6:69:cf:55:d9:7a:6b:
3d:15:5e:86:58:fa:ad:f6:ab:97:49:e4:75:91:f3:43:7b:a9:
2d:95:8b:3f:0b:49:a0:39:dc:26:a5:b8:be:bc:d8:f1:88:0b:
29:dc:3a:24:a0:83:5f:70:56:b4:d9:e2:64:d8:a3:54:5c:a6:
f8:e3:1f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:15:59 2026 by rpki-client