Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: dZ5vY3Ehnw/TMZ4w52B4TtCNfYmHTzo1vUuP7Dw7WXY=
Subject key identifier: D4:26:EA:3B:75:98:55:B8:C0:91:7B:6A:B1:D9:9C:D3:23:FF:DB:DD
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 019F93244BA0A8E9048D5B365415E8F49375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 08:00:56 +0000
Manifest this update: Fri 24 Jul 2026 08:00:56 +0000
Manifest next update: Sat 25 Jul 2026 08:00:56 +0000
Files and hashes: 1: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: iBB+j0d88KBfES0YooH/wElsaKHZoEzATpaKTnJVtF0=)
2: fyETRmi1CxGmkmyYB5hpA2HK0oo.roa (hash: OLIACt8lWv9FGHOyoiKj40pE3fk980WGJvOR+CZr7Q0=)
3: sGoNKu-l1gztUu2GqMmntwl0pCA.roa (hash: OhFOwa5pVHrJsZulyfQ+KO9kGSEhqaNeINk4y7wW5WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:4b:a0:a8:e9:04:8d:5b:36:54:15:e8:f4:93:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Jul 24 08:00:56 2026 GMT
Not After : Jul 25 08:00:56 2026 GMT
Subject: CN=d426ea3b759855b8c0917b6ab1d99cd323ffdbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:07:3e:9a:87:dc:75:57:c1:e1:e9:94:9d:
5f:b1:28:6b:d2:07:1c:00:78:11:ac:46:ff:85:b7:
cd:26:dc:95:93:5c:32:80:e8:56:52:95:51:63:07:
2c:ac:f1:58:78:d4:d5:5b:61:6f:fa:ca:7d:eb:36:
90:98:fb:d9:20:5b:e2:a9:70:8b:32:34:4c:7d:d9:
af:5f:d8:3b:9f:5d:bf:f2:fe:04:14:8b:ac:d1:8d:
1f:6d:89:47:a1:87:f6:d3:2f:e7:a8:f0:c6:b1:ad:
55:1a:1d:c9:b7:96:cf:62:5c:fe:c2:45:45:a2:62:
0b:56:67:60:5a:8a:86:7c:fa:8e:08:12:c5:7e:47:
e8:6d:6d:e2:89:d2:3f:cb:cc:40:f0:45:bb:c1:08:
89:6f:94:f1:ee:f2:c9:c3:4a:c9:bb:7f:90:09:e7:
b7:48:53:00:ad:d1:92:e5:31:1d:71:ae:1d:c4:be:
8f:c4:52:dd:f4:37:fc:b7:3a:5c:3a:28:17:9c:c0:
8d:9e:70:fc:c3:bf:7e:85:ff:cb:e5:f5:69:6f:7b:
8d:49:d2:d9:d8:b7:24:97:ea:12:08:d3:5b:79:7d:
be:ad:dc:af:c2:c4:00:91:56:e6:dd:6f:37:98:1c:
f5:fc:61:22:4f:c3:2a:4f:a3:01:3e:94:15:5e:97:
7e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:26:EA:3B:75:98:55:B8:C0:91:7B:6A:B1:D9:9C:D3:23:FF:DB:DD
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:1e:08:67:cc:ec:67:fe:a2:31:dd:95:8a:fc:b9:f7:fc:2c:
2b:33:ac:38:f0:fe:a7:18:c5:be:5a:20:93:b5:3a:ef:88:73:
13:43:b9:22:88:e1:e5:9b:d0:04:2b:50:67:b2:46:91:97:35:
3f:04:7b:2e:bc:e5:7a:4a:0e:0e:77:6e:5f:d8:5c:37:0d:5e:
44:55:e5:a4:5a:01:98:30:b7:b3:bf:ba:d4:1e:a9:98:8e:4d:
a5:89:ab:52:10:11:63:93:53:d8:53:3a:c8:6f:cc:a0:8f:54:
b6:3f:98:57:74:6a:d6:28:ec:9d:9e:e6:dd:46:7a:4a:1e:cd:
78:93:8d:01:11:f9:48:dc:f6:ac:5c:bf:28:9e:da:6b:be:e9:
d3:9e:cd:fa:7b:da:7a:25:e6:b9:c8:73:15:9a:f8:b6:b2:62:
90:fb:12:b8:72:ba:f8:d1:3b:78:94:81:1d:39:f7:d6:5e:82:
4c:1e:10:b6:7d:63:55:46:72:1a:5a:16:27:e2:ae:4d:17:6e:
4e:b0:30:af:f0:ac:25:e6:e2:04:06:ee:51:d4:1c:85:64:ed:
a3:d7:8d:34:a4:6b:b2:94:69:e8:30:63:fd:de:39:e8:02:24:
70:93:c2:d4:4e:a5:c7:1e:81:77:3c:7e:60:5f:77:48:e7:49:
2c:7f:a3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:33:59 2026 by rpki-client