Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
File: u-Sqx31jiC90NiBwTCTb7bGIDXo.mft (raw, json)
Hash identifier: sbvg88fz8frTT5puTeBfBVz8BDnz4at3qKbx1gpP/34=
Subject key identifier: 6D:22:8D:D7:EC:78:A4:CD:FC:A1:F1:3C:78:A2:C4:2F:ED:B6:7A:D6
Authority key identifier: BB:E4:AA:C7:7D:63:88:2F:74:36:20:70:4C:24:DB:ED:B1:88:0D:7A
Certificate issuer: /CN=bbe4aac77d63882f743620704c24dbedb1880d7a
Certificate serial: 019CAB6BCE7C45505D6E68B62BC14209DCB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
Manifest number: 07A0
Signing time: Sun 01 Mar 2026 22:01:34 +0000
Manifest this update: Sun 01 Mar 2026 22:01:34 +0000
Manifest next update: Mon 02 Mar 2026 22:01:34 +0000
Files and hashes: 1: u-Sqx31jiC90NiBwTCTb7bGIDXo.crl (hash: UTDKwER/35RoEmHKFNmtbpR9b6QZYxV7WxvKbRpUjg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ce:7c:45:50:5d:6e:68:b6:2b:c1:42:09:dc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe4aac77d63882f743620704c24dbedb1880d7a
Validity
Not Before: Mar 1 22:01:34 2026 GMT
Not After : Mar 2 22:01:34 2026 GMT
Subject: CN=6d228dd7ec78a4cdfca1f13c78a2c42fedb67ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4d:e3:44:77:a1:b0:0b:7f:37:ad:ad:e2:68:
84:35:63:18:28:27:49:87:97:8d:f3:ce:2d:86:42:
f9:59:78:b6:23:6d:8c:76:46:a4:76:0c:a6:5d:ee:
1b:73:fb:2d:01:cf:ea:ef:d6:9c:16:eb:2b:e9:d1:
f2:d3:e5:bc:a1:19:8b:0a:bd:a5:33:03:ac:bc:7c:
a2:84:4f:53:7c:fe:d5:9a:e4:b4:3e:67:77:b7:12:
a8:54:d8:ac:8b:73:c5:cc:1f:a5:ab:4d:f6:19:4a:
86:a4:1a:0e:03:c6:1e:ca:a4:43:ce:41:4c:2e:d7:
73:28:79:24:31:11:ee:ac:67:12:9b:2f:e5:55:2b:
7c:69:38:41:05:8f:6e:e9:97:50:7a:94:05:44:31:
c6:a2:d6:7f:23:50:9b:4f:6d:fa:33:94:03:d0:4f:
a6:13:39:aa:f4:de:a9:86:65:78:49:02:f7:df:91:
7b:06:23:68:39:2c:23:69:26:9a:f4:92:31:4f:97:
a7:c7:42:3a:4f:0e:a2:fd:6e:29:bb:26:73:71:20:
ce:a0:df:b3:53:2f:39:17:6c:80:8d:70:d1:67:96:
17:9d:d6:3e:14:c4:55:8c:d9:05:d9:f4:14:51:74:
68:ab:91:18:91:81:0f:69:06:2e:97:17:83:32:14:
c1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:22:8D:D7:EC:78:A4:CD:FC:A1:F1:3C:78:A2:C4:2F:ED:B6:7A:D6
X509v3 Authority Key Identifier:
keyid:BB:E4:AA:C7:7D:63:88:2F:74:36:20:70:4C:24:DB:ED:B1:88:0D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:58:e6:c0:c1:80:1a:68:ce:2c:be:08:25:62:68:f5:6b:df:
b7:36:ec:1b:8b:23:ac:dc:f3:a1:8f:f1:4e:2b:93:29:18:8a:
04:4d:1f:94:f2:cb:1e:5d:e6:18:0b:ee:33:67:23:85:37:d6:
0d:f0:07:12:57:57:07:3f:a7:2a:72:dc:bb:4c:8f:c4:75:85:
2e:fc:07:7c:d6:fe:4b:62:8b:d4:54:09:63:59:43:83:be:92:
33:cc:a7:d8:fc:f5:5b:44:55:de:2e:58:99:4d:ff:d4:91:f6:
59:f7:5a:45:1e:1c:5e:41:10:b9:ef:8c:04:2e:9a:a9:78:0b:
26:34:a4:a7:ba:17:63:2b:5c:d9:28:d2:cf:bc:83:70:c2:40:
17:3a:4a:59:c2:22:d9:f0:8c:a3:91:75:b8:ff:ce:37:19:3e:
c2:cf:79:c4:50:ff:ad:28:ab:e1:b5:11:00:2c:85:a4:d0:02:
d5:45:be:74:6a:7e:3d:da:8a:b4:27:65:3c:46:cc:30:25:bc:
2a:2c:46:e6:5e:8d:d0:53:56:26:2a:ab:c6:5c:6b:6a:ca:7b:
42:94:93:cb:de:54:7e:9c:03:b7:c5:8a:f7:c6:30:79:83:ec:
ff:4e:e4:76:21:81:0d:f5:10:4d:5d:f5:d0:d3:e6:a9:53:18:
9e:94:9f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:47 2026 by rpki-client