Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
File: Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft (raw, json)
Hash identifier: AedYleuB8IlTXmWZHpO29EORA1H9BnUtF/ndTE+tn9I=
Subject key identifier: D0:AC:2A:02:FD:F1:37:20:2E:F8:48:06:87:CA:B3:C6:02:FE:0F:3F
Authority key identifier: 0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
Certificate issuer: /CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Certificate serial: 019D2996EB282B6BF6AF97319E3838DB7891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
Manifest number: 0DD5
Signing time: Thu 26 Mar 2026 10:00:49 +0000
Manifest this update: Thu 26 Mar 2026 10:00:49 +0000
Manifest next update: Fri 27 Mar 2026 10:00:49 +0000
Files and hashes: 1: Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl (hash: lAdqbBvPyt/KTyfRgwAHkGTfYV8gAs9BjnI8ee1n1Ac=)
2: e8A6sXBGduUCZGJ5-6Y7kMDswOw.roa (hash: FM6aG3gkOk8roOMZ1iwyahhjRPg2yzj4NPtQ7Gqvp50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:eb:28:2b:6b:f6:af:97:31:9e:38:38:db:78:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222
Validity
Not Before: Mar 26 10:00:49 2026 GMT
Not After : Mar 27 10:00:49 2026 GMT
Subject: CN=d0ac2a02fdf137202ef8480687cab3c602fe0f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:44:f1:e3:7f:96:39:ef:d7:30:0c:5b:e9:
d2:8c:ce:99:6c:21:91:6e:1a:01:08:4c:c3:96:ce:
35:a9:56:9d:c9:5c:ef:be:fb:c5:c8:8b:93:6f:af:
f1:a9:b9:3b:78:62:cc:90:ef:93:ed:fe:5d:69:66:
23:aa:9d:9d:78:64:02:0d:43:be:21:51:24:7a:50:
bd:3c:74:be:78:81:6f:26:b3:33:8f:17:1d:5a:04:
65:d8:79:b4:38:36:87:2f:1a:3f:ed:a1:28:3d:50:
93:73:5a:67:d6:57:79:e7:32:8b:db:02:ca:f4:ed:
10:68:b2:18:d2:4a:ab:93:ae:25:27:a4:50:9f:20:
36:67:6b:0f:f0:de:5b:3a:7a:6d:3c:a7:b4:6c:ce:
21:bf:57:30:53:fe:24:de:81:7e:f9:7b:91:ad:62:
ed:bc:f5:3c:fa:2a:5f:5a:1c:bf:56:e3:1d:dc:cf:
ca:67:d8:da:11:11:90:66:f0:1c:22:34:38:ab:54:
06:34:93:d3:5e:2e:5f:b0:1c:e6:71:24:90:79:94:
2d:d5:98:d3:f9:eb:d4:01:db:34:4b:fa:ab:2e:a8:
46:06:82:dd:c8:76:9a:e4:52:4b:ef:a1:af:4b:c7:
d4:d4:29:41:70:59:d6:3d:23:03:73:8e:86:00:16:
1f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AC:2A:02:FD:F1:37:20:2E:F8:48:06:87:CA:B3:C6:02:FE:0F:3F
X509v3 Authority Key Identifier:
keyid:0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:92:2a:b7:09:bb:52:62:f2:da:74:6e:f0:fa:b6:ca:e5:e7:
b4:66:74:88:3c:f8:d0:db:10:e2:05:57:e4:b8:e2:c9:01:87:
f6:64:33:cd:b0:bc:52:76:67:7b:73:16:28:60:fa:29:d1:85:
b8:ec:a3:68:3e:1c:60:77:b3:65:7b:b3:6d:52:bc:2f:94:10:
99:a4:cf:26:44:1f:90:5f:96:16:90:50:b6:92:71:8b:ce:90:
d5:be:3e:ac:d5:85:b7:75:b2:87:76:96:5e:0a:0b:91:90:44:
b6:05:7f:8c:88:ac:bf:99:93:a8:7f:91:a4:fc:08:c4:7d:2d:
fb:a5:cc:37:a0:4e:2d:49:49:43:06:7b:ea:68:26:09:ec:e1:
ec:7e:16:ff:07:bc:99:b9:0b:3d:fd:0e:e6:cf:44:ec:f0:3e:
40:9a:14:c1:98:19:71:6e:51:c5:71:dd:85:43:9c:c1:8d:ad:
cb:cb:d9:55:28:d1:44:5b:b6:0b:ce:2b:b2:76:bd:64:a5:52:
1a:02:2c:0a:71:8c:9f:e9:eb:79:db:a8:0b:d5:ef:ff:c8:f1:
c0:b3:56:73:4b:bd:f3:cf:b8:74:91:65:3e:55:80:bf:a2:d7:
7d:4d:a2:d4:d9:13:42:52:78:85:16:30:57:7a:7f:69:3a:1b:
d5:c8:27:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:47:05 2026 by rpki-client