Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: lW6ji+w0WrQewY3n3pNqoBN//4Y5lfK3J+HCBv0JwQk=
Subject key identifier: 9C:5C:4A:F7:38:DD:A4:8C:E8:78:5F:83:AC:D5:7E:66:59:89:B4:31
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 019E1E6C401F816A31429569B2831D5A2DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 23:01:11 +0000
Manifest this update: Tue 12 May 2026 23:01:11 +0000
Manifest next update: Wed 13 May 2026 23:01:11 +0000
Files and hashes: 1: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: B7moXdjAusv9MaN/TOIwT8e9NrQhGCs5MtjbULCIE3w=)
2: fyETRmi1CxGmkmyYB5hpA2HK0oo.roa (hash: OLIACt8lWv9FGHOyoiKj40pE3fk980WGJvOR+CZr7Q0=)
3: sGoNKu-l1gztUu2GqMmntwl0pCA.roa (hash: OhFOwa5pVHrJsZulyfQ+KO9kGSEhqaNeINk4y7wW5WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:40:1f:81:6a:31:42:95:69:b2:83:1d:5a:2d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: May 12 23:01:11 2026 GMT
Not After : May 13 23:01:11 2026 GMT
Subject: CN=9c5c4af738dda48ce8785f83acd57e665989b431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d0:ba:a2:79:08:fe:86:4b:9b:50:b4:3e:36:
56:27:d7:08:a9:24:8d:33:e9:eb:3b:8e:d7:e5:5e:
a0:80:27:d7:11:40:9c:71:aa:f4:a2:d7:00:16:ba:
58:be:7a:6f:8e:ef:f6:1d:d2:55:47:9a:c6:92:f7:
a3:8c:1a:4d:58:dd:e2:bd:a5:85:4c:65:34:1a:1f:
90:0d:71:0a:df:11:7c:6f:5f:7b:f5:94:05:11:b8:
19:4d:57:81:e1:98:3f:4d:a0:28:10:5a:0f:26:4f:
73:ad:23:b1:11:a3:f7:09:a5:4d:31:47:f4:69:21:
72:2b:90:a6:04:11:98:ce:ed:2f:2c:01:fc:34:ff:
a3:8c:d3:fe:52:74:23:08:66:73:7b:54:52:16:1f:
ed:7a:f3:90:1b:7c:fe:72:df:6d:d8:88:65:af:86:
34:d8:47:98:77:e9:6d:1e:20:f2:62:01:93:56:93:
d1:ab:9e:8e:dd:ac:d0:70:73:cf:f3:f4:6c:da:dc:
34:4a:a6:c7:5d:ba:8b:66:10:48:98:20:66:f9:71:
b1:fe:50:e2:cb:ff:a8:2b:fc:0d:53:3c:37:3a:44:
7b:7f:14:dd:81:d4:84:54:2a:a8:5b:90:86:80:08:
b5:76:ae:b8:72:a6:1a:3b:a7:1d:11:fc:98:f0:d9:
67:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:5C:4A:F7:38:DD:A4:8C:E8:78:5F:83:AC:D5:7E:66:59:89:B4:31
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:56:bc:9e:49:92:ea:e5:5f:26:62:9f:61:fa:09:e8:38:78:
55:cb:58:45:7b:28:53:6b:0f:29:9b:aa:47:13:04:4c:16:91:
e3:c3:c7:a2:52:90:8d:c2:11:0c:39:9b:24:7b:7f:5c:39:26:
3c:e4:02:88:6a:a0:87:9b:ff:b1:6c:92:d5:a5:49:b9:73:5b:
a5:d4:3d:b1:50:01:f8:03:cd:a3:3b:c9:5e:34:8f:09:bf:00:
77:24:e5:7a:d6:a5:96:80:d8:b6:c8:c1:d6:38:55:72:50:bd:
e1:43:31:28:77:8c:eb:1c:de:15:25:5d:36:03:87:b1:a0:75:
51:f8:d3:eb:a8:23:61:03:71:31:2a:90:9b:2b:b2:56:15:9d:
4d:ee:90:7d:bb:1b:fe:d2:48:2e:4e:59:46:3d:f1:2c:90:9d:
fb:27:2f:d6:2a:2c:af:26:98:15:42:a4:97:1a:5a:e7:79:5b:
e4:42:28:24:9a:a6:86:01:a2:f6:d9:60:67:ad:e8:f4:1c:81:
27:05:8a:dc:c9:8a:e7:c3:c5:76:c5:59:2e:8f:25:74:6b:67:
86:ab:7b:89:6d:c4:d1:e7:ff:e0:21:cd:79:79:8a:0d:6a:52:
31:de:ee:0e:a7:5f:28:ce:7f:bd:3a:f5:cc:48:cf:f4:46:ce:
c2:1a:9c:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebEAfgWoxQpVpsoMdWi3NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMDQ5MTNkMDQzZGJiMTE3Y2Y2YjkzMjNjOGFiMjQ3Y2I1
MmUyNTEwHhcNMjYwNTEyMjMwMTExWhcNMjYwNTEzMjMwMTExWjAzMTEwLwYDVQQD
Eyg5YzVjNGFmNzM4ZGRhNDhjZTg3ODVmODNhY2Q1N2U2NjU5ODliNDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9C6onkI/oZLm1C0PjZWJ9cIqSSN
M+nrO47X5V6ggCfXEUCccar0otcAFrpYvnpvju/2HdJVR5rGkvejjBpNWN3ivaWF
TGU0Gh+QDXEK3xF8b1979ZQFEbgZTVeB4Zg/TaAoEFoPJk9zrSOxEaP3CaVNMUf0
aSFyK5CmBBGYzu0vLAH8NP+jjNP+UnQjCGZze1RSFh/tevOQG3z+ct9t2Ihlr4Y0
2EeYd+ltHiDyYgGTVpPRq56O3azQcHPP8/Rs2tw0SqbHXbqLZhBImCBm+XGx/lDi
y/+oK/wNUzw3OkR7fxTdgdSEVCqoW5CGgAi1dq64cqYaO6cdEfyY8NlnQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxcSvc43aSM6Hhfg6zVfmZZibQxMB8GA1UdIwQY
MBaAFA0EkT0EPbsRfPa5MjyKskfLUuJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFFTUlBRUTl1eEY4OXJreVBJcXlSOHRTNGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80N2RmZjAtMmIxMS00NGJjLWI3MjEt
OTZjODFmYjY1MWEwLzEvRFFTUlBRUTl1eEY4OXJreVBJcXlSOHRTNGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS80N2RmZjAtMmIxMS00NGJjLWI3MjEtOTZjODFmYjY1MWEw
LzEvRFFTUlBRUTl1eEY4OXJreVBJcXlSOHRTNGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoFa8nkmS
6uVfJmKfYfoJ6Dh4VctYRXsoU2sPKZuqRxMETBaR48PHolKQjcIRDDmbJHt/XDkm
POQCiGqgh5v/sWyS1aVJuXNbpdQ9sVAB+APNozvJXjSPCb8AdyTletalloDYtsjB
1jhVclC94UMxKHeM6xzeFSVdNgOHsaB1UfjT66gjYQNxMSqQmyuyVhWdTe6Qfbsb
/tJILk5ZRj3xLJCd+ycv1iosryaYFUKklxpa53lb5EIoJJqmhgGi9tlgZ63o9ByB
JwWK3MmK58PFdsVZLo8ldGtnhqt7iW3E0ef/4CHNeXmKDWpSMd7uDqdfKM5/vTr1
zEjP9EbOwhqcHQ==
-----END CERTIFICATE-----
Generated at Wed May 13 08:17:38 2026 by rpki-client