Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: BKU+LDOWNaj98C3pSPdY5RdCla6G3y+0ElYqBfQhDcU=
Subject key identifier: 08:34:F7:BC:71:3E:86:31:23:D7:A2:6A:B6:79:BE:A4:48:43:23:0F
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 019D9B19CC76263B56B8C0D8EBA912BA77E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 11:00:52 +0000
Manifest this update: Fri 17 Apr 2026 11:00:52 +0000
Manifest next update: Sat 18 Apr 2026 11:00:52 +0000
Files and hashes: 1: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: IUYq7tqHcZAAp2fvawlVeJLfb8gLMXkJjf65e3ZQn10=)
2: fyETRmi1CxGmkmyYB5hpA2HK0oo.roa (hash: OLIACt8lWv9FGHOyoiKj40pE3fk980WGJvOR+CZr7Q0=)
3: sGoNKu-l1gztUu2GqMmntwl0pCA.roa (hash: OhFOwa5pVHrJsZulyfQ+KO9kGSEhqaNeINk4y7wW5WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:cc:76:26:3b:56:b8:c0:d8:eb:a9:12:ba:77:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Apr 17 11:00:52 2026 GMT
Not After : Apr 18 11:00:52 2026 GMT
Subject: CN=0834f7bc713e863123d7a26ab679bea44843230f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:42:62:63:f9:46:e8:0d:93:e3:5e:3b:ba:78:
c6:58:ef:59:fb:dd:4e:92:9b:dc:ab:ff:53:6d:98:
c7:0a:83:af:b2:64:ae:69:e1:30:f3:16:2c:03:c4:
28:ec:e6:54:35:fe:d0:fd:64:85:23:2b:7c:9e:c3:
da:75:9b:b9:44:f6:e3:95:25:0c:85:b0:35:58:b4:
df:83:c4:e7:c9:d3:b9:29:cc:b1:e6:71:35:49:ef:
0a:de:4d:e1:60:8a:b4:61:86:6f:57:34:0a:7e:5e:
bc:45:e8:32:25:32:44:d1:73:74:f7:b3:af:27:5d:
80:06:47:0c:aa:17:9c:bc:4d:12:3e:87:b2:04:5a:
0c:e9:e7:f9:e2:1b:c2:c1:9b:9b:ba:6c:1e:e8:3e:
5d:68:4b:a1:ab:a1:5e:73:1d:34:17:46:22:de:0a:
55:ac:df:33:e5:60:67:ac:77:77:be:f8:7f:74:7b:
dd:ac:75:74:3e:1a:13:7c:7c:2c:8d:82:3a:49:ab:
fd:dd:77:c9:12:d2:98:00:d7:a1:ad:76:ac:a4:b8:
a4:45:d1:68:6b:66:31:f0:eb:a6:7a:db:8a:75:55:
ad:81:dd:c8:fd:31:58:c7:1e:72:9e:98:c0:9a:3e:
f5:7c:31:e4:7e:a0:e3:33:3c:20:c2:a8:22:50:73:
6c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:34:F7:BC:71:3E:86:31:23:D7:A2:6A:B6:79:BE:A4:48:43:23:0F
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:07:1a:29:12:1c:69:ce:0a:13:4a:ec:44:ba:0b:76:64:7f:
2d:8a:50:01:a8:bd:c3:62:0a:84:14:a8:fc:08:ca:88:ba:20:
72:4e:d6:d7:b6:c4:f5:5a:88:1f:18:2e:93:53:42:9b:90:b3:
3d:56:c3:0c:27:48:95:79:cf:13:44:66:ad:83:29:71:4a:3c:
ec:c3:6d:9a:8f:d4:d4:03:02:c5:d5:fa:da:6e:6a:20:36:c8:
ab:35:93:5a:9a:98:37:40:d8:5e:39:c9:28:0e:ed:ef:4e:af:
6b:69:01:e9:00:f8:cc:81:1e:49:22:fa:76:7e:f6:54:21:0a:
26:5a:15:76:e6:38:24:99:9e:12:de:d3:45:1f:c6:a3:ef:3b:
ac:69:ce:dc:13:8f:06:65:eb:99:6a:10:57:06:af:d5:bb:83:
94:14:4c:3e:74:5c:56:f3:fb:04:87:ac:80:a0:5c:d8:92:b9:
7f:45:7e:c7:f2:00:11:95:58:b1:d8:4f:9a:a7:75:35:47:d4:
c5:81:8c:21:3c:88:37:70:6f:b7:4f:19:09:68:4b:b4:e8:3f:
48:cc:a1:ed:c7:82:d3:b4:1f:4c:0b:74:68:89:a2:ae:5e:18:
50:78:5c:59:78:82:f8:aa:67:d7:ed:7b:73:8e:58:2a:ee:b9:
d5:0b:4c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:28:07 2026 by rpki-client