Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
File: SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft (raw, json)
Hash identifier: r31VO1dzrBz8LpDtUBx1zGykovYQ7M5Jirh/BrWlHmY=
Subject key identifier: FF:FE:27:E2:28:A3:44:8D:D0:7C:6F:56:C9:C5:08:B7:C2:72:63:97
Authority key identifier: 49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
Certificate issuer: /CN=490db999ca4ce287c5c92ab167a500902259bb05
Certificate serial: 01A13748ECA87C971D3BCE41727CB2A70072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
Manifest number: 1AA3
Signing time: Tue 13 Oct 2026 22:01:28 +0000
Manifest this update: Tue 13 Oct 2026 22:01:28 +0000
Manifest next update: Wed 14 Oct 2026 22:01:28 +0000
Files and hashes: 1: SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl (hash: PKyDES6QDAYuapP59qeHzzuTN0EQVWRnMSaWHt+QJnc=)
2: hAZrKewTVxZT3GF5DqzKsU9bNKo.roa (hash: fsGaTWUHmLGtuoOa159GIKQVUnBG8uk4RWTcKenk10M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:48:ec:a8:7c:97:1d:3b:ce:41:72:7c:b2:a7:00:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490db999ca4ce287c5c92ab167a500902259bb05
Validity
Not Before: Oct 13 22:01:28 2026 GMT
Not After : Oct 14 22:01:28 2026 GMT
Subject: CN=fffe27e228a3448dd07c6f56c9c508b7c2726397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:4f:67:c9:0b:ff:64:96:25:5c:d3:33:b2:
ad:df:c2:50:7a:29:b3:10:96:28:48:27:66:7a:3a:
05:b4:b3:99:69:d0:df:72:a4:b8:e2:e4:a5:1d:24:
63:17:e9:3d:fc:37:f4:e2:9d:ef:bb:da:0d:03:3b:
6c:df:71:f8:75:8d:98:93:93:6d:06:66:2b:81:6c:
22:f9:fe:66:8a:50:ac:fe:22:a6:75:7e:33:cf:94:
07:36:79:c7:6e:97:e5:5b:25:8a:9b:81:cd:c7:76:
81:6a:96:26:28:8a:a2:5f:e2:72:75:65:3a:50:48:
82:85:35:34:9d:96:19:a1:89:6c:ee:08:a0:cd:db:
96:0f:2f:be:aa:94:d5:2e:68:b4:32:31:53:e5:53:
c4:f1:9d:57:e7:e0:5d:a8:d0:9c:0d:00:fc:a0:ba:
e4:af:f2:81:2a:15:70:0d:9a:d2:12:75:c5:de:fc:
e4:30:91:5c:73:60:6e:2f:0e:65:b1:c9:2d:fc:83:
0b:93:49:75:7f:38:0d:50:53:19:00:fb:cd:36:6f:
14:0f:e6:ae:3f:19:3e:14:5d:82:f6:71:a7:fa:e9:
8b:26:98:5c:f6:c1:8e:0c:ca:48:08:e2:f5:f7:07:
3c:ce:24:30:ea:a0:93:8a:2d:7c:93:0a:0e:ac:e0:
bc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FE:27:E2:28:A3:44:8D:D0:7C:6F:56:C9:C5:08:B7:C2:72:63:97
X509v3 Authority Key Identifier:
keyid:49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:70:54:af:38:4c:9b:bb:40:90:0b:94:92:2a:a5:ac:db:d9:
b6:4b:d3:66:86:da:05:68:eb:14:d1:31:5c:8d:73:11:8c:6a:
86:25:f7:69:16:05:0e:d8:fc:4f:53:da:ae:f8:7b:4d:60:00:
fa:82:42:7d:84:34:3a:2d:2e:93:3d:30:5c:81:0f:07:eb:07:
d9:9f:c4:56:3e:6c:cb:de:d1:72:94:dd:e3:5e:72:ba:99:1e:
4b:04:b5:e4:90:01:c4:2d:17:3b:82:bb:40:d9:aa:53:4c:78:
4c:1f:fd:40:49:e9:a4:01:94:63:2e:e8:5f:2c:61:dc:84:42:
c0:b7:cb:b9:a1:74:ff:46:7a:08:c1:48:81:1c:ce:26:3b:e7:
50:ac:01:b3:19:54:67:1d:3c:8a:cd:4e:41:91:e5:f4:7e:2a:
55:e5:12:f7:66:d1:72:a4:b4:71:7a:25:ea:6f:2b:82:bd:4e:
29:d4:66:29:87:cb:b4:5b:99:02:7f:73:a7:1f:77:56:57:1d:
83:2a:99:37:09:de:69:bb:25:c2:35:69:7a:8e:9e:e7:56:40:
01:c7:5b:eb:f2:11:02:84:3c:14:db:30:f7:57:3a:01:c6:5f:
85:08:dd:93:d7:78:d1:2f:28:76:cd:ff:b5:39:d9:85:e6:4f:
49:96:ef:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 02:15:11 2026 by rpki-client