Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: i5wAqRGWq6qPW9vlaBuIUTjl7R7PE0VP/rypM9sk4y4=
Subject key identifier: F7:56:E1:CC:54:33:46:E5:CD:C4:D9:5F:BC:51:3B:C4:E9:3C:2D:A0
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 019FAA50589BD6131AA99C89637DCAF9AA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 20:00:19 +0000
Manifest this update: Tue 28 Jul 2026 20:00:19 +0000
Manifest next update: Wed 29 Jul 2026 20:00:19 +0000
Files and hashes: 1: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: KRK9Eg3dWru3zRRZD4hlBHoUeMAbH3MHMCrwKWTaQLc=)
2: fyETRmi1CxGmkmyYB5hpA2HK0oo.roa (hash: OLIACt8lWv9FGHOyoiKj40pE3fk980WGJvOR+CZr7Q0=)
3: sGoNKu-l1gztUu2GqMmntwl0pCA.roa (hash: OhFOwa5pVHrJsZulyfQ+KO9kGSEhqaNeINk4y7wW5WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:58:9b:d6:13:1a:a9:9c:89:63:7d:ca:f9:aa:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Jul 28 20:00:19 2026 GMT
Not After : Jul 29 20:00:19 2026 GMT
Subject: CN=f756e1cc543346e5cdc4d95fbc513bc4e93c2da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:03:99:ec:ba:10:34:e8:be:02:20:e2:5a:
3d:f6:3c:5b:c6:fa:b1:02:79:96:de:4a:d0:fb:5a:
b0:2a:2b:b3:be:dc:63:09:65:e9:14:57:ef:dd:6f:
46:5e:c9:71:f1:a7:00:06:2e:eb:51:82:23:c6:73:
85:b1:5c:74:02:7b:c6:30:01:c6:59:fd:94:17:fd:
5e:82:12:32:71:69:29:83:dd:82:0d:71:8c:d4:d3:
45:c8:c5:1f:92:b3:5c:a8:56:0d:cb:ee:18:a3:9f:
7d:b7:f0:13:79:5c:44:5b:b6:17:12:1c:39:c0:8d:
db:6c:3c:31:00:55:e1:a7:fe:14:cf:a3:e3:44:83:
c8:16:c7:75:6a:47:5c:f6:14:fc:ca:48:34:2d:37:
f9:ed:60:ca:e0:51:47:4e:47:cd:90:12:0f:d5:50:
b2:f3:23:32:c8:5c:6b:53:10:ff:cb:45:d4:40:7e:
e1:b9:9c:ba:64:d3:05:03:19:f6:97:07:f4:c0:ba:
75:b0:c3:61:05:63:48:d5:18:30:9f:45:05:46:fb:
5a:e4:94:60:bc:ce:1e:f3:6a:4d:73:52:39:c2:d6:
e9:50:21:54:0c:f3:6b:31:7b:fe:f2:af:fb:f6:fe:
e4:f4:d7:95:5f:32:5f:2e:70:ad:fd:bb:95:05:a3:
06:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:56:E1:CC:54:33:46:E5:CD:C4:D9:5F:BC:51:3B:C4:E9:3C:2D:A0
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:93:fb:c5:ee:68:bb:be:0e:30:52:ac:c1:5f:0a:a0:63:6d:
ce:7f:a2:41:8e:f6:a8:21:ea:87:27:3a:53:15:54:57:d4:fc:
75:04:d7:42:e4:24:f3:b8:7a:44:20:98:1b:a5:bc:df:ae:3d:
99:d6:e4:6b:3a:5e:6e:17:a8:fb:fc:f5:dc:9c:84:7c:e8:d8:
38:ef:ab:42:f6:8f:8b:3f:11:85:a6:c8:d0:b4:f2:81:a5:e9:
fd:d0:0e:56:7b:30:98:a4:a1:27:34:38:6e:78:7c:6d:8a:6c:
f4:19:d1:d7:c4:36:e4:0b:1a:c0:70:d0:da:ec:74:1d:47:d6:
83:4c:7b:39:0b:62:f7:8c:c8:ce:e8:55:f7:ff:4e:3e:57:e2:
38:24:f7:d7:57:1b:4e:5d:29:e2:f3:86:18:3f:06:5d:8d:77:
35:8a:8a:01:ea:b4:30:be:31:cd:ed:b4:b3:20:61:11:04:1c:
94:7f:32:84:c5:01:1c:16:28:96:53:13:a3:f8:c7:45:29:70:
63:81:92:4b:91:df:fb:d9:d0:c7:9a:be:10:05:bd:aa:59:0b:
51:0b:16:57:b1:1d:8f:83:b0:89:b1:58:41:da:10:86:c1:7a:
21:31:54:3c:f1:32:92:56:19:e1:93:ea:5c:cc:c6:97:f0:80:
2a:aa:ac:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:23:46 2026 by rpki-client