Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
File: Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft (raw, json)
Hash identifier: 1u0Y+asGycIJhBjDjhyXSz8GPYKcx4C1i3qdxcjqRK0=
Subject key identifier: C0:4B:38:77:A0:46:BF:C4:DB:E6:96:60:E5:7F:6E:64:70:E8:95:68
Authority key identifier: 4A:AF:E4:5B:30:FA:7F:59:49:25:DD:39:5B:A1:4C:EF:B6:73:E2:C0
Certificate issuer: /CN=4aafe45b30fa7f594925dd395ba14cefb673e2c0
Certificate serial: 019CAE357484EC4B3CCC918D561DE757BEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 11:01:04 +0000
Manifest this update: Mon 02 Mar 2026 11:01:04 +0000
Manifest next update: Tue 03 Mar 2026 11:01:04 +0000
Files and hashes: 1: Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl (hash: 9kSlGeZRMhZRUBjOP26m6q7Oubl5dKHVhbiM0KeOdCE=)
2: e-TXm60k7Kx6Oh6yvAUbKW27JU0.roa (hash: oDcorjp/ifU0UbolQ0ZKZMHDQwFU7Ev3i8BjyydcT+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:74:84:ec:4b:3c:cc:91:8d:56:1d:e7:57:be:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aafe45b30fa7f594925dd395ba14cefb673e2c0
Validity
Not Before: Mar 2 11:01:04 2026 GMT
Not After : Mar 3 11:01:04 2026 GMT
Subject: CN=c04b3877a046bfc4dbe69660e57f6e6470e89568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6b:83:31:73:29:70:de:ee:1c:0b:e9:e3:40:
d3:ff:ac:72:f7:d5:aa:17:f5:c3:71:ed:7f:59:71:
c1:45:62:70:b5:6d:75:0b:5a:e1:af:8e:c9:f3:db:
b6:6b:ff:da:43:2b:a9:c8:bb:07:15:71:1e:61:53:
d1:14:19:b0:9b:40:ca:10:cc:82:97:31:7a:8b:c4:
1d:c5:94:f0:ed:95:33:49:2e:3c:6f:91:8b:4f:1e:
07:fc:2a:86:61:10:4f:48:01:5e:48:14:9e:3a:67:
03:2f:77:04:f1:2c:dc:41:35:21:50:d9:de:11:aa:
aa:be:43:5e:c2:c3:25:27:cb:dc:e8:02:a6:45:b4:
7b:c3:f8:7a:3b:7b:31:36:7b:a8:cf:3e:0f:b5:14:
84:83:64:81:72:ac:6e:f1:ef:8d:90:ef:ed:32:78:
fa:19:b4:7c:bb:35:53:76:b3:c7:65:d7:02:f3:2d:
c1:1a:dc:fa:44:66:6c:9b:59:4c:bf:bd:a8:86:d7:
63:6f:32:f5:99:d6:3c:04:25:c5:0f:13:7e:78:96:
d3:bc:57:ad:17:2c:0e:1b:b2:57:90:f2:f9:73:8c:
52:62:ac:0a:d1:b8:90:7c:27:dd:6b:05:04:e5:87:
24:73:3e:e5:d0:57:f2:b2:4f:a9:ee:86:3b:28:64:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4B:38:77:A0:46:BF:C4:DB:E6:96:60:E5:7F:6E:64:70:E8:95:68
X509v3 Authority Key Identifier:
keyid:4A:AF:E4:5B:30:FA:7F:59:49:25:DD:39:5B:A1:4C:EF:B6:73:E2:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:68:89:ef:9a:bd:c2:65:8e:07:c0:28:c3:73:8a:c6:7c:c8:
0b:eb:ed:4b:c3:d4:9d:49:bd:0c:53:e4:76:7a:0f:28:d2:23:
64:fb:4d:d0:13:d6:26:b6:55:9c:a3:a5:a2:47:f2:06:67:24:
5c:1e:15:41:0b:45:98:4b:f4:89:c5:f0:19:1d:1a:b6:66:72:
db:3a:15:99:72:1c:14:a4:0c:89:bd:c6:d2:91:a9:d3:c0:02:
97:a7:f0:b7:f2:99:ec:3b:33:37:d0:d2:99:2c:37:91:c2:12:
5b:5c:d9:b4:c8:c2:48:b6:52:53:c9:40:99:d6:f3:15:1f:9b:
c4:b1:75:b7:f0:97:35:89:25:63:52:8a:a2:e3:f7:a6:cd:69:
fd:8d:d9:66:29:ce:35:f0:32:17:b1:c5:7d:b4:21:da:ab:b5:
85:d3:a0:d8:6f:19:cc:cf:f3:5b:c2:db:c3:63:d8:0e:79:01:
bb:ab:b1:7a:48:e3:23:bb:ee:6e:57:0d:28:1d:f9:8f:eb:b3:
f3:23:8f:ef:97:b6:38:d1:27:57:2b:fe:52:e5:b7:99:3c:5f:
77:ee:f1:f1:c5:b8:1b:50:33:9b:be:03:dd:2e:95:19:f1:47:
a1:cd:85:75:62:68:65:08:fa:54:c9:0c:ca:21:49:e3:43:e9:
54:1c:f1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:30:20 2026 by rpki-client