Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: MMrfdcLZ15/NiusdCQVfBZwU50BaSKnFJxRWOFm5OGc=
Subject key identifier: F5:F8:6F:61:84:BF:BF:CA:81:69:5B:68:A7:F8:44:44:62:D1:CF:E3
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 019D254C48C4E31B086CFC354CAE2CD65CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 14:00:49 +0000
Manifest this update: Wed 25 Mar 2026 14:00:49 +0000
Manifest next update: Thu 26 Mar 2026 14:00:49 +0000
Files and hashes: 1: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: CMsOyqqlym4JjqB1nXfVwbj8cnEJMefXRGzpQ879zcw=)
2: fyETRmi1CxGmkmyYB5hpA2HK0oo.roa (hash: OLIACt8lWv9FGHOyoiKj40pE3fk980WGJvOR+CZr7Q0=)
3: sGoNKu-l1gztUu2GqMmntwl0pCA.roa (hash: OhFOwa5pVHrJsZulyfQ+KO9kGSEhqaNeINk4y7wW5WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:48:c4:e3:1b:08:6c:fc:35:4c:ae:2c:d6:5c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Mar 25 14:00:49 2026 GMT
Not After : Mar 26 14:00:49 2026 GMT
Subject: CN=f5f86f6184bfbfca81695b68a7f8444462d1cfe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a0:e2:96:d2:39:b9:70:e7:f9:1f:92:ff:e5:
62:e3:f1:fc:64:77:16:fb:8c:4f:9c:e7:d1:dc:c6:
35:ed:b1:0a:5f:12:70:2b:fa:a6:98:95:5d:4b:4d:
62:b5:35:a5:d5:0e:6d:fe:5c:c5:6f:93:04:0c:2e:
48:0a:23:e9:fa:e5:7c:00:cf:7c:da:8f:ad:c0:b2:
d1:bf:10:12:6f:1d:cd:cf:a2:0b:10:94:d9:ac:29:
f8:1f:4a:7c:c9:84:52:5a:34:9c:4c:9d:dd:5f:82:
a9:b1:9c:a0:8a:45:26:49:e2:b6:09:59:13:68:1d:
d5:33:fc:54:62:26:9f:a3:62:55:d2:f7:26:1c:69:
18:fb:9c:51:0c:a7:c2:af:84:0e:2f:59:73:c3:00:
85:4d:e1:22:ee:31:7f:b1:af:f8:aa:76:93:d8:2e:
f7:7e:4c:5d:e1:81:03:32:52:96:fc:dd:1e:d7:15:
34:28:49:9c:5a:51:33:4b:e0:93:8d:84:95:4d:13:
b2:22:aa:1e:69:07:c2:4b:88:0b:e6:8b:69:8c:f6:
bd:4a:c8:ed:82:d8:35:d4:50:68:f3:f1:70:d7:6b:
e3:a3:52:25:32:99:d5:4d:8a:fc:ae:1a:29:1f:cf:
3e:12:f1:14:c8:37:c0:65:ff:0e:e6:8e:ac:fb:7b:
09:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F8:6F:61:84:BF:BF:CA:81:69:5B:68:A7:F8:44:44:62:D1:CF:E3
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ed:59:19:b5:e3:1c:63:0d:96:2d:f7:d9:15:f1:b2:07:13:
07:1e:26:bb:eb:f5:be:8e:17:d1:b2:90:77:03:30:fe:26:e0:
11:6d:2d:0c:df:a3:4f:ff:23:5c:2c:c2:2f:e4:5a:72:81:fb:
a1:5c:6b:7b:67:40:b0:06:d9:b8:87:b0:2f:6e:ff:80:6b:ae:
e7:b0:af:8a:e1:8d:8a:1e:17:db:97:4a:f9:81:f5:c2:86:59:
a4:c9:fb:c4:26:ec:50:b9:b7:a8:31:0f:15:0e:34:33:7d:3a:
f8:4d:c9:e9:32:7f:b7:09:81:66:8f:8e:92:7a:20:c2:fc:5c:
2a:91:1b:60:54:26:a1:27:14:b9:cc:88:03:55:2e:3a:6f:a6:
83:f2:04:5d:47:f6:26:21:80:f3:62:32:2c:07:a1:4d:26:89:
f6:bf:ff:83:da:e6:a7:62:18:94:62:ad:f0:fb:2d:63:73:28:
73:2b:ed:92:10:aa:b2:5a:00:47:ea:55:ef:8b:b1:71:22:88:
f3:83:5d:d7:e9:26:2a:09:74:7c:ed:2a:d6:87:eb:89:53:4f:
17:3b:4c:b2:11:e8:cd:17:48:97:46:ee:42:72:47:97:65:e2:
61:16:cc:e5:78:33:8e:3d:63:dd:e7:ba:50:0d:53:8c:e7:12:
23:19:56:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:47 2026 by rpki-client