Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: HohbOaGhUN+vWrsTaQZrqVDkJ5sN2fqINS4jjnAHiKg=
Subject key identifier: D0:8B:EB:FC:CB:2B:1D:D0:79:09:65:8F:E8:10:80:86:C3:07:66:90
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 019EBEB5D8F4C9C5460535FB240B1AA2F06A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 02:00:49 +0000
Manifest this update: Sat 13 Jun 2026 02:00:49 +0000
Manifest next update: Sun 14 Jun 2026 02:00:49 +0000
Files and hashes: 1: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: ImUO4wRfrA1e1kn/F/4rt3NZCpQfcDzbmn5Yo/IG+/0=)
2: fyETRmi1CxGmkmyYB5hpA2HK0oo.roa (hash: OLIACt8lWv9FGHOyoiKj40pE3fk980WGJvOR+CZr7Q0=)
3: sGoNKu-l1gztUu2GqMmntwl0pCA.roa (hash: OhFOwa5pVHrJsZulyfQ+KO9kGSEhqaNeINk4y7wW5WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:d8:f4:c9:c5:46:05:35:fb:24:0b:1a:a2:f0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Jun 13 02:00:49 2026 GMT
Not After : Jun 14 02:00:49 2026 GMT
Subject: CN=d08bebfccb2b1dd07909658fe8108086c3076690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f7:6f:bc:c0:ad:1c:cb:4a:cb:66:a0:0d:53:
bb:31:2d:d0:1d:a2:15:18:3f:5a:cb:c6:b1:93:21:
85:4a:2a:6c:a8:85:fc:24:8b:40:10:25:62:37:e7:
00:ff:fa:a4:c1:26:bb:0f:b0:90:c6:79:31:24:71:
c4:cb:bf:15:9d:16:52:cd:db:80:b7:cc:f4:dc:2e:
7a:ba:6f:07:b3:b9:ed:52:95:c0:7e:0f:8b:de:f4:
68:eb:0d:ce:39:52:b9:8f:e0:98:0d:e3:74:99:0c:
c0:8a:6d:c9:1d:94:95:35:08:a7:43:42:f5:9f:38:
a7:58:bc:7b:78:98:86:bb:b7:91:0c:30:98:38:79:
0a:eb:78:70:64:1d:d6:a6:35:2e:7b:08:21:a3:95:
52:e0:17:34:d0:39:65:77:31:dc:fa:f4:67:dc:de:
eb:bc:80:a0:c0:21:71:af:45:0b:92:3c:01:78:7c:
58:bc:f2:e4:1b:25:1a:69:1e:6b:c8:d3:fe:bc:a7:
69:24:61:10:5c:04:30:fc:0c:0d:81:dc:a3:76:80:
88:ce:b2:dd:10:98:46:83:d0:ee:20:0a:52:5d:a0:
a6:5e:05:14:12:88:3b:ab:62:45:4b:54:e7:a1:f2:
59:31:83:14:92:2f:b6:c1:a2:4d:8a:76:aa:46:03:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8B:EB:FC:CB:2B:1D:D0:79:09:65:8F:E8:10:80:86:C3:07:66:90
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5d:30:04:db:cd:23:26:8d:2e:c3:c6:71:cc:0a:0d:66:f7:
02:87:d3:67:79:09:f9:55:f9:f3:e4:a6:9f:ba:66:05:ac:32:
f2:81:12:76:ba:4c:43:d3:bd:42:45:d9:00:b9:e3:87:07:b3:
5b:04:5e:07:ce:1b:b6:23:7e:14:97:3e:e9:9e:49:11:ee:26:
13:fd:94:69:fb:db:d5:6f:10:32:51:63:fd:1a:b8:b5:65:e1:
bf:63:d8:5b:fb:18:0e:f7:75:2a:91:ce:8c:ad:60:07:7e:e9:
3d:ff:62:57:81:6a:25:17:2d:10:8e:25:b3:27:06:68:24:fc:
ab:6f:82:66:37:26:d6:9a:69:5f:ca:81:48:97:5d:f8:6b:e8:
6f:06:ea:bc:2c:07:d7:36:97:47:7c:ce:13:4b:b6:b6:b8:27:
45:99:a3:bc:0d:a6:d9:83:74:b2:63:9c:14:96:58:0e:02:90:
49:db:f4:28:c7:82:c8:fc:d6:80:61:72:b2:56:ed:19:d7:21:
33:49:0a:de:13:ed:ff:16:b0:20:3d:bb:39:2b:66:0c:62:57:
b1:05:50:8e:3c:d7:61:55:12:ba:82:ad:cb:b1:5e:a7:3a:a0:
64:fc:43:bc:3a:07:f2:70:2f:2f:74:e3:d6:69:02:da:c2:6f:
de:df:a1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:24:20 2026 by rpki-client