Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
File: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft (raw, json)
Hash identifier: Eocvnpmtfefd3wyIkbhA8pzMjooHrrFgZ4aATWEhA4k=
Subject key identifier: DF:85:24:05:78:BF:86:6C:DD:EB:55:49:BC:2B:29:73:58:4C:3C:24
Authority key identifier: 49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E
Certificate issuer: /CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
Certificate serial: 019CACB5254074A0140DF9077473B6B2B962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
Manifest number: 155D
Signing time: Mon 02 Mar 2026 04:01:18 +0000
Manifest this update: Mon 02 Mar 2026 04:01:18 +0000
Manifest next update: Tue 03 Mar 2026 04:01:18 +0000
Files and hashes: 1: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl (hash: oT24kC4zkgS+nzhbC2KJL8gZfKPv1MOPoOgKSQ44Zfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:25:40:74:a0:14:0d:f9:07:74:73:b6:b2:b9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
Validity
Not Before: Mar 2 04:01:18 2026 GMT
Not After : Mar 3 04:01:18 2026 GMT
Subject: CN=df85240578bf866cddeb5549bc2b2973584c3c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4b:37:42:8c:3b:fd:91:a0:fb:a7:ba:b4:c5:
24:80:f2:70:86:b4:17:46:a3:27:83:75:d7:57:83:
64:5f:bd:43:b9:48:6a:ad:2e:ea:c7:22:10:eb:b3:
26:a8:eb:fe:18:af:75:5f:64:27:bd:54:51:01:5e:
66:4b:e6:36:12:69:0c:eb:df:0b:b5:15:ab:05:e3:
07:f9:04:f1:36:c6:4f:72:14:a2:40:4a:c0:d4:e5:
cf:bc:32:e1:00:41:64:ce:21:ff:d5:c2:1b:d1:cb:
5d:80:58:72:72:e0:e1:11:2b:78:2a:3c:17:39:cc:
95:a6:ba:4a:86:f4:8c:67:78:26:23:c7:46:c2:11:
7a:8d:4b:5c:95:fa:9a:36:2d:47:f0:26:14:45:3c:
2c:c4:59:54:bb:9f:a7:63:27:58:86:b3:f7:ce:8c:
10:62:ce:fc:8c:42:ac:80:53:46:26:60:e2:1a:6e:
38:39:45:54:1d:79:ec:3e:9f:bf:33:4a:3b:11:21:
ca:0e:9c:50:e8:9b:29:b7:d3:23:60:b9:cf:d6:1a:
9a:46:1e:a5:67:5a:f1:98:ca:23:44:c0:6e:15:17:
b7:44:f1:e5:ac:cb:38:a1:65:2a:13:42:0c:de:ec:
ca:b0:3b:1a:20:c3:67:28:91:fc:98:3d:59:c5:3c:
5c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:85:24:05:78:BF:86:6C:DD:EB:55:49:BC:2B:29:73:58:4C:3C:24
X509v3 Authority Key Identifier:
keyid:49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:bd:63:8e:09:53:7f:2b:1e:11:c0:7d:b2:18:a5:bc:b6:07:
bc:df:30:b4:61:8a:ef:24:ed:68:d1:4c:45:23:0c:4d:e5:b8:
64:97:1b:87:5c:aa:ea:18:33:8d:34:0f:f3:ae:82:bf:66:1f:
4a:b5:00:19:32:1d:95:f8:57:c6:8b:a0:ad:fa:fb:b1:f1:e8:
a5:46:ee:b5:51:de:22:fa:53:83:6f:45:9c:7d:5f:a1:ab:25:
b0:3a:59:d0:b8:43:31:77:3a:b5:1f:88:74:e4:13:73:d6:2f:
73:ca:b1:47:69:4d:04:f4:2c:8d:94:b2:d5:0b:08:b3:34:85:
b7:e2:b6:d4:20:10:67:c1:ed:6b:c0:9b:73:39:11:69:b3:98:
37:6f:f9:e8:de:16:7b:cd:b3:78:9f:07:90:b9:26:07:df:ce:
87:af:a2:34:1a:ff:0e:bb:c1:3b:22:0e:ef:9d:58:21:7f:9e:
be:98:7d:cb:40:b3:ec:5d:13:b0:fc:f1:c3:71:03:41:84:c2:
62:5b:fe:cb:c3:da:5a:e6:0b:95:b5:ff:01:bb:0b:f9:69:24:
22:72:78:9f:b7:8a:e4:22:7c:b7:ea:f2:a4:dc:01:47:63:15:
6e:9a:a2:59:6f:2c:fe:ed:4b:2a:90:43:63:ef:1c:db:a7:12:
3e:c6:cd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:19 2026 by rpki-client