Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
File: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft (raw, json)
Hash identifier: KKclG/i5hpBBA6/OPgkC7osWcHdWO7GVONI7IN0+w3o=
Subject key identifier: A5:82:CB:86:05:47:B7:07:94:84:B2:19:7B:FE:8C:BC:41:BA:D8:85
Authority key identifier: B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14
Certificate issuer: /CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
Certificate serial: 019CAF1157E653601FC72F2366CF7A4775D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
Manifest number: 127B
Signing time: Mon 02 Mar 2026 15:01:15 +0000
Manifest this update: Mon 02 Mar 2026 15:01:15 +0000
Manifest next update: Tue 03 Mar 2026 15:01:15 +0000
Files and hashes: 1: gDMK6bL4SN2yFigRTp_-VpvBGkI.roa (hash: rI6Nu8YONQKTOxDhp9yJL+hYObuArCNmN7bddusmuuY=)
2: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl (hash: tdpC/MfaV9t3za98oloBHCP8Ed1BMR4Yyy4VsgFc2l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:57:e6:53:60:1f:c7:2f:23:66:cf:7a:47:75:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
Validity
Not Before: Mar 2 15:01:15 2026 GMT
Not After : Mar 3 15:01:15 2026 GMT
Subject: CN=a582cb860547b7079484b2197bfe8cbc41bad885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:27:9b:1b:f7:c6:30:3b:14:40:98:e4:8a:
b4:ff:f2:da:2e:68:5d:57:b9:35:c5:4c:ba:73:b0:
19:ab:37:68:8c:89:30:11:34:4f:39:6b:e2:7b:06:
19:7c:d7:1a:98:89:9f:ca:5c:9a:46:02:f4:4e:45:
56:13:d8:70:25:22:7b:ab:de:7a:5b:e6:75:0f:aa:
6d:ee:05:58:43:d5:e1:41:5c:40:ac:fa:b3:0d:36:
9d:1d:ec:0c:bf:22:37:4d:10:dd:71:6d:a5:8a:35:
1f:51:46:3b:23:b1:60:a2:25:59:77:13:80:c9:86:
47:36:02:e1:7d:6b:66:87:5f:86:5a:ac:e1:22:47:
f6:28:32:83:71:60:30:87:06:20:85:5e:fb:a4:3a:
b1:fa:8d:2c:ec:6a:c9:9a:b4:99:41:84:76:2f:b8:
9b:ce:0c:47:13:00:73:58:1c:8c:83:42:56:c0:23:
2d:01:02:80:35:b7:f0:1c:f0:0b:17:2b:67:7e:f0:
0b:eb:a2:e5:ed:48:71:1e:6c:c9:19:2b:9d:92:b2:
c1:3c:01:2c:ea:7f:18:de:30:db:af:9a:ae:56:e7:
0a:f5:2d:27:b4:d6:aa:01:15:ed:c9:5a:57:3e:01:
fe:17:75:30:bd:26:08:20:b1:04:f1:ea:a9:6b:7b:
fa:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:82:CB:86:05:47:B7:07:94:84:B2:19:7B:FE:8C:BC:41:BA:D8:85
X509v3 Authority Key Identifier:
keyid:B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8a:ad:41:55:dd:2d:02:18:cc:03:e9:93:26:61:63:a7:b1:
af:ba:c3:70:2a:e9:fb:cc:06:9c:bf:b5:26:4b:2d:d3:a6:a9:
8b:f3:14:fa:95:8e:f2:f8:41:2b:31:06:aa:63:63:5b:8d:6e:
9a:f0:53:b9:5a:1d:89:0d:3f:8e:50:6f:a4:7e:0e:c8:b7:35:
c8:6d:e8:c4:69:a8:4a:32:01:e2:85:6b:29:1b:44:7b:f5:9e:
66:2d:f8:3d:52:32:f8:15:3f:de:f3:fd:55:d6:65:18:67:b3:
67:1e:be:82:af:ae:b4:7f:a8:5b:f4:c7:b3:8c:8b:bf:3d:a9:
cd:31:e9:da:dd:19:d6:57:38:52:31:cc:36:01:69:f5:5b:0e:
58:9b:3f:5f:5c:8e:55:4c:94:d2:83:b1:77:66:be:28:2f:1c:
bb:4f:39:9a:23:e3:7d:d2:72:1b:16:aa:6e:7f:91:97:cc:8a:
98:e5:52:33:32:05:c5:b0:2f:ea:de:b2:66:39:a7:bd:d5:f9:
00:fd:19:2a:be:60:f0:36:7c:00:c9:5b:14:da:49:f6:d1:58:
01:37:d5:26:7c:4f:a9:f0:83:8f:f0:df:e8:7c:5a:61:12:4f:
fb:a8:67:37:6c:ab:8f:ce:7e:27:60:8d:1a:1d:f4:1e:0a:d6:
f1:4e:c1:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvEVfmU2Afxy8jZs96R3XZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYTQ4YWYzZDk2OTMxYmQ5MGMzYmZkNTVmMWZhMzA0N2Iz
NTYwMTQwHhcNMjYwMzAyMTUwMTE1WhcNMjYwMzAzMTUwMTE1WjAzMTEwLwYDVQQD
EyhhNTgyY2I4NjA1NDdiNzA3OTQ4NGIyMTk3YmZlOGNiYzQxYmFkODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNonmxv3xjA7FECY5Iq0//LaLmhd
V7k1xUy6c7AZqzdojIkwETRPOWviewYZfNcamImfylyaRgL0TkVWE9hwJSJ7q956
W+Z1D6pt7gVYQ9XhQVxArPqzDTadHewMvyI3TRDdcW2lijUfUUY7I7FgoiVZdxOA
yYZHNgLhfWtmh1+GWqzhIkf2KDKDcWAwhwYghV77pDqx+o0s7GrJmrSZQYR2L7ib
zgxHEwBzWByMg0JWwCMtAQKANbfwHPALFytnfvAL66Ll7UhxHmzJGSudkrLBPAEs
6n8Y3jDbr5quVucK9S0ntNaqARXtyVpXPgH+F3UwvSYIILEE8eqpa3v6BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWCy4YFR7cHlISyGXv+jLxButiFMB8GA1UdIwQY
MBaAFLKkivPZaTG9kMO/1V8fowR7NWAUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3FTSzg5bHBNYjJRdzdfVlh4LWpCSHMxWUJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kNTFhZGYtMTQ5Mi00YzE0LTg4MjEt
YjliZDA2NTk0ODNhLzEvc3FTSzg5bHBNYjJRdzdfVlh4LWpCSHMxWUJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kNTFhZGYtMTQ5Mi00YzE0LTg4MjEtYjliZDA2NTk0ODNh
LzEvc3FTSzg5bHBNYjJRdzdfVlh4LWpCSHMxWUJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYoqtQVXd
LQIYzAPpkyZhY6exr7rDcCrp+8wGnL+1Jkst06api/MU+pWO8vhBKzEGqmNjW41u
mvBTuVodiQ0/jlBvpH4OyLc1yG3oxGmoSjIB4oVrKRtEe/WeZi34PVIy+BU/3vP9
VdZlGGezZx6+gq+utH+oW/THs4yLvz2pzTHp2t0Z1lc4UjHMNgFp9VsOWJs/X1yO
VUyU0oOxd2a+KC8cu085miPjfdJyGxaqbn+Rl8yKmOVSMzIFxbAv6t6yZjmnvdX5
AP0ZKr5g8DZ8AMlbFNpJ9tFYATfVJnxPqfCDj/Df6HxaYRJP+6hnN2yrj85+J2CN
Gh30HgrW8U7Bxw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:28:27 2026 by rpki-client