Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: tYJngPB1jLN9D63RrBU9/RFGD6MLSz+ituHw3hrxAIA=
Subject key identifier: 58:72:52:72:72:8A:49:F3:61:73:01:13:1D:9B:39:6C:0E:77:A1:81
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 01A103FFC50CF6622D44BAE175A0408C5DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 1A88
Signing time: Sat 03 Oct 2026 23:00:55 +0000
Manifest this update: Sat 03 Oct 2026 23:00:55 +0000
Manifest next update: Sun 04 Oct 2026 23:00:55 +0000
Files and hashes: 1: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: /3u4jBW1tBModSoxpr6b3Hg2ho64jvdezMA8VTJOzdk=)
2: fyETRmi1CxGmkmyYB5hpA2HK0oo.roa (hash: OLIACt8lWv9FGHOyoiKj40pE3fk980WGJvOR+CZr7Q0=)
3: sGoNKu-l1gztUu2GqMmntwl0pCA.roa (hash: OhFOwa5pVHrJsZulyfQ+KO9kGSEhqaNeINk4y7wW5WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:ff:c5:0c:f6:62:2d:44:ba:e1:75:a0:40:8c:5d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Oct 3 23:00:55 2026 GMT
Not After : Oct 4 23:00:55 2026 GMT
Subject: CN=58725272728a49f3617301131d9b396c0e77a181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:55:6e:46:8f:bf:45:62:e6:2d:a9:5f:d9:6b:
90:d0:f0:ff:84:ba:af:87:d8:ac:f6:85:1c:0d:a6:
93:42:fe:6a:0b:6f:66:8f:5b:7c:c1:75:ed:a9:17:
6c:0b:94:e8:42:db:2f:42:df:ad:6a:22:cf:7f:b3:
96:9d:6a:b0:fc:5b:c8:9b:bb:df:2a:3a:37:de:1d:
50:85:f6:e2:20:b7:92:78:f2:60:d9:c2:4e:79:cc:
29:7f:e1:69:c5:70:82:89:bc:39:08:64:4c:c2:ff:
b1:bb:8a:29:85:02:0e:bd:56:06:f2:5d:4d:cf:f0:
4b:47:1e:31:34:03:70:8c:84:f8:03:4b:18:5b:88:
75:9a:e8:f0:1c:80:f7:70:c6:0b:49:2e:8e:9b:e7:
c6:5d:c4:76:0f:1b:d1:62:d5:77:31:b6:15:d4:33:
19:38:03:a1:db:4a:9d:98:3b:d1:72:8a:b8:fb:8d:
de:24:e7:02:2c:e0:70:df:b0:4e:a1:8f:a1:5b:f0:
c4:9b:22:e3:0f:de:7b:e2:39:5c:aa:38:b6:3f:e9:
fe:45:7c:74:db:f4:46:9e:52:30:01:49:cd:a1:56:
ec:98:c6:c2:b7:8c:48:65:8c:3c:a1:c9:e5:c7:64:
3a:8d:6d:c0:20:e6:45:34:9e:c0:69:3f:40:9c:c1:
6c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:72:52:72:72:8A:49:F3:61:73:01:13:1D:9B:39:6C:0E:77:A1:81
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b0:a0:05:d9:14:af:e4:df:f7:42:d8:d7:84:0a:9d:0f:5c:
36:8d:71:ac:b6:3f:b8:5b:d0:88:14:b2:ce:9e:96:9b:88:1d:
80:02:78:8f:4c:aa:85:01:06:af:be:f4:5b:b2:f5:35:cc:68:
13:ed:1c:84:d9:39:b7:43:23:1a:29:f4:db:3c:ac:da:3b:a6:
10:f8:27:84:4c:34:55:ae:32:c5:82:e8:dd:40:d6:d9:ce:c0:
b6:22:68:a9:07:64:7e:78:07:81:92:65:b8:6b:08:7d:5c:eb:
77:14:59:ca:6d:77:4d:1c:46:8f:02:9e:0e:55:99:2c:f9:6a:
24:98:16:33:42:99:b2:95:7d:40:f8:2f:a2:f1:1c:f8:88:a0:
3d:4d:cf:14:74:5e:84:2d:2e:47:68:0c:4e:8f:ad:bc:81:c9:
96:9a:89:0a:32:39:f6:71:ac:83:87:53:e4:c3:03:06:c4:3e:
c1:c5:0c:63:1a:22:66:6d:f5:7a:8f:fc:8a:5f:1e:68:7e:40:
d7:39:e8:3e:57:8e:ab:4e:bc:93:78:a8:1e:64:68:68:19:10:
5f:ae:32:8e:a6:12:bd:7b:95:04:48:5d:5e:30:55:bf:ab:7d:
15:33:ab:f7:c3:50:cb:7c:7d:29:94:cb:cc:6b:e0:03:78:1f:
99:08:6b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:43:53 2026 by rpki-client