Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
File: SqXjXAXCq1S-dYtshnGGzuFZvWM.mft (raw, json)
Hash identifier: GW/ZTvJ1g8rkiKkF5wXUHEe/NVYomrNCg45NtCTXeHc=
Subject key identifier: E6:72:10:A6:A4:96:98:86:00:93:37:4A:4A:0B:D0:C9:2F:20:73:0B
Authority key identifier: 4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
Certificate issuer: /CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Certificate serial: 019CAAC656EB18809AC4A09FB97DC8B0EC89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
Manifest number: 1241
Signing time: Sun 01 Mar 2026 19:00:50 +0000
Manifest this update: Sun 01 Mar 2026 19:00:50 +0000
Manifest next update: Mon 02 Mar 2026 19:00:50 +0000
Files and hashes: 1: Gf-9RToHV8wPDoXU7Oara5nxIUM.roa (hash: VsHDJwIPTlkkP+eDBuFbkPtE/oNd7HaXUP1nGykcuDA=)
2: SqXjXAXCq1S-dYtshnGGzuFZvWM.crl (hash: dpuBLyuWy6Joo+7RrAonpgf1gUuJc3p3iXPV1DSYt3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:56:eb:18:80:9a:c4:a0:9f:b9:7d:c8:b0:ec:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Validity
Not Before: Mar 1 19:00:50 2026 GMT
Not After : Mar 2 19:00:50 2026 GMT
Subject: CN=e67210a6a49698860093374a4a0bd0c92f20730b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:91:08:1a:28:46:80:db:fd:89:05:52:ee:dd:
9a:05:9e:dd:10:9a:f5:22:cd:fb:d2:98:b3:cf:cc:
55:da:f6:bc:6e:b9:36:10:98:8f:c7:37:a5:4c:84:
98:43:5b:8b:9c:2b:a0:e7:56:5a:93:a1:23:fb:0d:
5b:e9:6d:35:42:06:a8:04:35:19:54:d0:66:a4:aa:
75:db:d2:91:9e:2a:e8:14:2a:17:d5:e3:fd:65:99:
4a:0d:b9:4e:07:9d:00:81:79:a3:d3:f3:67:45:25:
03:97:80:42:cf:75:ca:ec:08:e9:31:41:6b:29:d9:
74:bf:80:ef:bd:75:e4:0b:37:d4:6a:3f:c3:97:41:
90:f2:1d:e2:82:d5:14:23:24:ee:5b:0c:c6:eb:7d:
d5:1d:0f:ad:cc:2f:ba:ed:f1:8c:7d:79:0d:e8:ca:
2f:7e:3a:b1:75:4e:08:d2:64:6a:b7:6d:99:66:49:
73:66:12:7a:38:00:e2:70:ed:72:49:e2:89:85:d9:
e1:bf:84:a4:1f:1d:96:d9:70:bf:24:0d:c4:03:c1:
fd:f3:9a:1e:f5:82:9d:8f:26:ed:b7:9e:e6:63:79:
b2:ea:7f:df:90:de:43:fb:25:70:05:ca:2a:11:01:
0b:ce:fc:9e:f0:fc:44:cc:fa:d4:b8:75:17:2a:b1:
c7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:72:10:A6:A4:96:98:86:00:93:37:4A:4A:0B:D0:C9:2F:20:73:0B
X509v3 Authority Key Identifier:
keyid:4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:45:85:e9:af:e6:9c:2b:b4:89:73:1e:b1:79:99:7d:d9:95:
3d:32:ac:15:e5:46:ff:ad:61:c2:c9:25:d7:50:99:c9:d2:a5:
d3:1a:8f:48:72:ff:dc:42:fa:ef:f1:06:a8:ca:43:0d:a6:61:
c1:0b:d8:cf:d1:83:3b:95:5f:46:31:a0:42:13:0e:9b:57:01:
a4:49:6c:b2:37:24:5f:a7:b5:a1:44:7f:34:7e:dc:1f:b8:ce:
ab:5e:e4:04:1f:e2:eb:73:54:40:1d:f8:b7:77:f9:91:dc:92:
35:fc:83:ca:3b:b3:44:38:98:8e:80:44:8c:af:22:d4:82:5e:
61:2f:a1:86:9c:4d:d9:c1:a8:76:77:50:67:c4:a4:fa:37:e7:
6b:7c:2f:34:ce:ef:dc:f4:a6:86:88:8a:57:f3:b0:f0:14:d9:
1c:00:98:ca:ec:55:43:2d:58:b1:cb:69:37:06:fc:99:88:dc:
24:5d:1b:89:e2:15:1c:f1:fa:10:7d:97:0d:49:8d:37:21:7d:
23:d5:70:80:d7:d9:41:c8:f1:ec:b5:02:d1:45:ff:73:53:29:
8f:e2:9a:f4:5f:b7:22:9b:d6:f7:7b:ec:55:c2:06:7f:53:4f:
de:ee:f2:c0:47:d8:ea:a4:c9:90:10:22:c4:a5:ac:d5:fe:ee:
18:56:d6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:40 2026 by rpki-client