Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: ZXoTJmKFgy6rxC+Zj7J6r4nTUTL4YCqKwaekJt98NlY=
Subject key identifier: 85:03:18:0B:AE:E8:CE:E5:1A:34:DC:E3:7A:20:ED:87:CE:62:4F:91
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 01A0C4449CCF402DDE6BDF68A71A3EA13836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 14:00:25 +0000
Manifest this update: Mon 21 Sep 2026 14:00:25 +0000
Manifest next update: Tue 22 Sep 2026 14:00:25 +0000
Files and hashes: 1: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: uw30sFI3Ak1Lu/DtzsSmkKEDnGkVWoQ6XxKuCKE3G3o=)
2: fyETRmi1CxGmkmyYB5hpA2HK0oo.roa (hash: OLIACt8lWv9FGHOyoiKj40pE3fk980WGJvOR+CZr7Q0=)
3: sGoNKu-l1gztUu2GqMmntwl0pCA.roa (hash: OhFOwa5pVHrJsZulyfQ+KO9kGSEhqaNeINk4y7wW5WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:9c:cf:40:2d:de:6b:df:68:a7:1a:3e:a1:38:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Sep 21 14:00:25 2026 GMT
Not After : Sep 22 14:00:25 2026 GMT
Subject: CN=8503180baee8cee51a34dce37a20ed87ce624f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:87:9b:67:bd:40:e9:cf:fa:6a:9e:39:6a:54:
2e:d0:0f:ca:da:0d:5c:ab:5b:83:29:f2:5d:72:fc:
ba:a6:bf:27:86:ba:94:15:e6:81:db:00:31:45:8a:
ab:33:2f:b7:a7:b0:3c:e5:03:14:bd:85:72:c0:9e:
16:5a:54:93:62:ea:40:4b:83:ac:f7:95:b3:d7:57:
04:1c:4f:da:ad:be:08:a2:3d:76:18:66:22:d3:12:
04:4e:1d:b1:2e:ce:fd:6b:8a:84:a4:04:d9:18:5b:
c0:ec:f2:5e:ab:75:0a:2e:68:d2:76:75:7c:0f:da:
9d:8a:d9:fc:6c:20:12:d8:cc:85:a4:ef:8b:d8:af:
90:b7:07:1f:77:9c:99:0c:9f:e9:18:bf:b8:8e:b2:
cf:34:de:d5:56:f8:e2:6d:ef:87:34:b7:d1:ae:79:
76:0b:c9:b0:ac:fe:61:04:36:82:70:6d:9e:ad:60:
23:ae:75:6b:5b:50:cb:fc:27:c7:17:96:05:f1:02:
42:e2:53:14:41:28:63:17:eb:89:f9:fe:00:17:23:
c7:60:a4:70:05:20:31:ac:9c:e4:fe:d5:e7:1a:7d:
3b:fe:2e:c8:2a:e1:f6:c2:60:37:db:a8:4c:d3:be:
c1:b5:02:bd:c4:1c:9d:df:dd:35:0c:ef:4a:f8:5a:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:03:18:0B:AE:E8:CE:E5:1A:34:DC:E3:7A:20:ED:87:CE:62:4F:91
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ec:09:89:53:37:08:19:49:64:da:61:3d:5d:a8:e9:75:93:
53:70:dc:f9:90:91:c3:67:df:7c:57:90:71:39:cf:47:8b:d2:
22:cf:63:c2:13:ca:78:74:71:70:49:ca:1a:f6:2c:9d:0d:7d:
48:20:bc:2f:a2:18:50:09:b4:c4:60:c0:4b:42:de:5c:ba:2c:
ea:29:f3:f9:be:29:c2:3d:55:55:4c:95:13:0b:94:b7:29:85:
23:6b:86:d4:16:c7:16:5c:a4:5d:5c:8e:f4:52:03:eb:f4:9a:
09:7e:55:01:e2:17:3e:1a:0e:c8:ca:90:90:cb:5d:7f:66:4d:
4e:00:10:99:10:3e:0c:83:41:cc:fa:1c:92:ba:f9:ef:40:60:
68:0e:9e:2e:df:a8:9b:3a:5c:f5:2f:56:0e:fa:89:3c:20:80:
1e:c1:62:1e:a6:be:84:29:9e:00:45:90:5b:1c:3a:64:5e:41:
35:90:c3:1d:35:25:42:72:87:e0:31:3d:76:18:0e:cb:3b:ee:
4f:93:64:29:57:d3:f0:95:c1:b2:23:a8:72:5b:cf:d3:38:a3:
0f:55:43:7e:a7:eb:59:21:49:ca:b2:0a:34:31:22:1e:af:0d:
06:57:b4:ff:f9:a6:a3:5f:0d:33:09:61:f2:7f:ac:f7:f5:64:
4a:c3:86:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:18:13 2026 by rpki-client