Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: QohKI3kEhzvSdqP5k9DgeCLMiYc67rBoxJD/LoubOkI=
Subject key identifier: B7:35:3E:FA:C3:CB:3A:23:73:44:DA:6C:60:32:C1:9B:13:4F:5D:BC
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 01A0ECD33200C4358B8CFE130C16F9C0CCA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 1A7C
Signing time: Tue 29 Sep 2026 11:00:58 +0000
Manifest this update: Tue 29 Sep 2026 11:00:58 +0000
Manifest next update: Wed 30 Sep 2026 11:00:58 +0000
Files and hashes: 1: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: oYZD5Ack+xzlUuuG/hhSXeST0z3T6ytdDPfrys7sN20=)
2: fyETRmi1CxGmkmyYB5hpA2HK0oo.roa (hash: OLIACt8lWv9FGHOyoiKj40pE3fk980WGJvOR+CZr7Q0=)
3: sGoNKu-l1gztUu2GqMmntwl0pCA.roa (hash: OhFOwa5pVHrJsZulyfQ+KO9kGSEhqaNeINk4y7wW5WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d3:32:00:c4:35:8b:8c:fe:13:0c:16:f9:c0:cc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Sep 29 11:00:58 2026 GMT
Not After : Sep 30 11:00:58 2026 GMT
Subject: CN=b7353efac3cb3a237344da6c6032c19b134f5dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cf:07:5b:2d:29:b1:b4:9c:f4:9b:af:04:5e:
cd:01:54:0f:ff:2d:c0:a3:36:3e:9b:4c:b4:16:ca:
d8:4a:d6:e9:1f:ff:8f:4a:96:df:e9:7b:38:b8:ad:
e4:a3:a3:5a:5c:49:a8:9b:a7:c8:36:63:03:ac:23:
ed:16:d6:bc:15:fd:4a:79:df:b5:81:95:7d:29:d6:
04:ee:42:5b:49:53:3e:8e:75:ba:2d:a5:31:78:f4:
07:39:67:c7:27:9a:78:f2:04:68:31:78:86:49:02:
af:27:9e:c9:d5:fb:1b:ff:ea:8e:84:3f:06:3f:2e:
5b:21:2e:0c:9e:3c:ef:ac:55:99:4b:44:ff:ee:12:
e2:ab:a8:43:16:1c:d5:f0:4e:91:8a:d1:e3:7e:52:
a8:7c:7f:d1:08:1b:f4:be:a2:56:5d:14:ff:fd:d0:
11:a3:6a:86:25:39:83:08:4f:8b:71:d8:52:bd:3a:
c5:ff:cf:4e:e2:78:32:37:dd:81:10:68:0e:6f:7b:
e3:11:cf:90:cb:60:d8:f8:82:b9:08:94:18:8d:c4:
dc:ee:ca:39:46:02:3a:36:dd:8c:25:5e:03:85:ba:
1d:e9:59:ba:56:3c:ec:4f:01:d2:e0:6e:db:46:a2:
f1:16:8d:db:8a:f1:fd:6d:eb:20:d2:cc:43:1a:b5:
59:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:35:3E:FA:C3:CB:3A:23:73:44:DA:6C:60:32:C1:9B:13:4F:5D:BC
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8d:e9:e6:72:b0:67:90:87:bd:59:85:e4:38:95:2c:2f:c0:
50:5e:cd:9f:11:01:0f:82:81:4e:cf:d6:c0:02:bf:0f:51:7d:
46:8b:3c:c0:ec:4b:06:cf:37:b4:52:e0:a2:5f:2f:92:04:ac:
65:5f:14:88:2f:c2:66:fc:2f:69:b0:61:d6:be:7c:d4:29:8b:
05:f9:eb:43:e6:88:9b:48:50:82:22:c9:64:9d:8e:f2:36:ba:
54:8b:20:45:46:8a:41:d3:9c:75:69:87:7f:de:4c:27:1f:7b:
f9:64:5c:f2:6f:d0:87:06:5d:aa:b7:e1:36:b1:15:97:78:e6:
f1:9c:da:27:da:6d:5b:f3:73:f9:ed:b8:15:12:3a:8a:90:3e:
d4:4b:d2:12:47:2a:6b:f4:34:38:07:28:32:34:78:80:1d:7e:
f5:da:fc:a4:e6:ef:42:d2:50:fc:99:9b:8c:c6:81:83:39:6c:
ad:72:b8:76:3c:8d:b0:11:bb:52:8d:06:c2:bd:28:f9:c0:12:
1b:9b:eb:6b:0b:15:68:85:87:63:3d:b1:c2:13:53:48:be:89:
3d:ca:62:e4:58:8e:2b:64:06:0e:a1:9d:7e:9b:92:c9:ca:15:
ed:13:8a:0a:6d:da:e9:d4:22:52:c1:a4:f2:d1:02:32:e4:82:
8b:f6:3a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:21:24 2026 by rpki-client