Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
File: DQMTeXANNd0Akr0GHGA-bLJWGnU.mft (raw, json)
Hash identifier: kXySw08hL4U8VKllGYJR77iRqm+YbJjAFDaYd/UiVJw=
Subject key identifier: 7D:1D:E2:53:31:C1:6C:0E:8C:EC:9C:D8:21:BC:7C:95:4C:82:28:E2
Authority key identifier: 0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
Certificate issuer: /CN=0d031379700d35dd0092bd061c603e6cb2561a75
Certificate serial: 019D96CF238CC4FB7A7DBEB92F66EF15A74A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
Manifest number: 034E
Signing time: Thu 16 Apr 2026 15:00:50 +0000
Manifest this update: Thu 16 Apr 2026 15:00:50 +0000
Manifest next update: Fri 17 Apr 2026 15:00:50 +0000
Files and hashes: 1: 0pkuqzvhduSck3Ha7xOc7WG-8JA.roa (hash: o9t9fokSPRDcMcuSn/HePatJg9nqZBhL9E5qotJE2cw=)
2: DQMTeXANNd0Akr0GHGA-bLJWGnU.crl (hash: BYgcEBT96ibw1PHd4+ZDgW6VCaymGNnwUToFXnxWjNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:cf:23:8c:c4:fb:7a:7d:be:b9:2f:66:ef:15:a7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d031379700d35dd0092bd061c603e6cb2561a75
Validity
Not Before: Apr 16 15:00:50 2026 GMT
Not After : Apr 17 15:00:50 2026 GMT
Subject: CN=7d1de25331c16c0e8cec9cd821bc7c954c8228e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:e1:e9:7f:c4:1e:3a:25:a7:e8:64:4c:bb:
d4:eb:9d:ec:cd:57:3b:4a:cb:fd:5c:55:ee:6d:43:
19:3e:c0:5e:f6:77:61:98:76:8a:78:84:33:2e:db:
a4:4c:65:49:d5:e3:70:48:67:34:76:6e:d9:80:ff:
6a:95:48:43:d7:45:3e:44:42:a4:df:02:de:79:96:
e9:dc:fa:39:a5:2e:d4:fa:c2:3a:6d:d4:32:94:2e:
5b:96:c1:28:ab:df:ef:d7:f5:46:d6:bc:b3:72:3e:
38:c3:3e:33:14:8e:9e:4a:77:5f:08:5d:b5:3a:f1:
5d:35:e7:47:2f:f2:eb:32:8c:fb:ff:26:f0:b1:f9:
bf:83:bd:c1:62:c8:34:85:a3:c5:19:3f:2b:4a:f0:
8a:a3:00:77:d1:86:39:01:77:6a:81:08:ec:a1:6c:
9f:4b:4d:b8:33:96:a8:68:f1:a3:3e:c5:58:91:ba:
ed:06:91:9c:35:aa:0f:e4:8c:76:bd:a7:fa:61:c1:
86:da:03:be:86:5a:85:f7:dd:37:92:d4:8a:9c:76:
73:f0:17:af:19:b7:c3:3a:b8:30:96:66:84:8f:02:
2d:1b:ce:6a:cc:87:38:19:f5:c4:2a:40:5d:11:13:
e0:b3:11:42:2c:a2:0c:7e:c1:da:47:21:f8:10:e9:
f5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1D:E2:53:31:C1:6C:0E:8C:EC:9C:D8:21:BC:7C:95:4C:82:28:E2
X509v3 Authority Key Identifier:
keyid:0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:41:55:1c:be:71:6d:95:cb:29:a0:f0:3f:75:c8:cd:db:76:
60:3a:70:91:26:5c:79:4a:e7:36:65:8e:31:e7:5a:12:7e:2d:
78:30:97:6a:7b:6a:a6:4b:99:a6:c5:54:a1:9b:2d:21:f9:c9:
1e:42:e9:3c:92:4b:6f:04:16:26:38:e0:c2:ac:1a:3b:2f:16:
83:8a:6c:75:a8:32:d1:f4:51:76:ce:0b:29:1e:bb:6c:4e:7d:
99:60:3b:c4:2d:f7:fd:7f:97:fd:24:18:06:b2:59:23:7f:84:
35:ef:1f:38:45:6f:2b:ec:f3:7c:a8:cd:30:03:9a:26:b6:0b:
fa:4b:71:7a:e8:83:8c:66:35:d3:69:7d:47:8d:63:36:7d:fd:
6c:3d:f4:ba:81:6f:7f:6b:1b:a9:8d:6e:48:aa:fc:95:5c:f7:
fd:31:9b:2f:09:de:33:0b:a3:9a:9c:03:fc:1e:1c:0d:8f:77:
c0:bc:f2:c5:1a:b9:bb:20:8d:ce:98:07:94:1b:11:b6:97:ba:
57:3a:12:00:8e:7d:aa:99:38:9f:ff:f8:e1:47:f2:6d:6d:08:
d3:19:9a:c2:c0:1a:35:c9:2d:12:48:b4:e8:64:1f:e2:2d:87:
e5:42:0b:ff:f3:80:22:93:0a:60:6c:b0:05:f9:50:7e:86:0e:
95:ff:65:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:03:01 2026 by rpki-client