Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
File: SQsh95ueovPQQjdHFIZ9EkAZlds.mft (raw, json)
Hash identifier: sgJLTcRyvlcLYJrSZLJ22/Ak6PoOlUjWz6LLxEJSkIA=
Subject key identifier: DD:F2:C5:20:19:66:D8:B1:AD:32:60:E0:C9:3C:F0:EB:8C:68:30:57
Authority key identifier: 49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
Certificate issuer: /CN=490b21f79b9ea2f3d042374714867d12401995db
Certificate serial: 019CA8D85061A9558CC6BC2CF33E182F21F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
Manifest number: 184B
Signing time: Sun 01 Mar 2026 10:01:14 +0000
Manifest this update: Sun 01 Mar 2026 10:01:14 +0000
Manifest next update: Mon 02 Mar 2026 10:01:14 +0000
Files and hashes: 1: OsHfm5IcRp6wCajw-NE1iWNH7Z8.roa (hash: oS3FUlduEB7YSg+361aWK05LocqnWlc3lIUtH4BZyko=)
2: QQeZJrwl_4NJIISgArACAVq6L0o.roa (hash: uh1KpLqwgaZj2AcvOxxyx2dRcs//e4c0XtE2TUfZonY=)
3: SQsh95ueovPQQjdHFIZ9EkAZlds.crl (hash: 2FgK9C9c+lcbGq9E8jyp9mc7X8DeKr+XMvOkrdYkjaw=)
4: Z4RE0ETdC4xhk1FbbundGTGGRB8.roa (hash: qQ3AizCsruyzTMQNiKoa4LuCo6aARO1PFZyPx/nGISA=)
5: ZmfnOd4CDL5CJbgzX0IFfaCpn_I.roa (hash: r+ACJr/bLBpfF1nAJ7m58XKQpbM78W0wGzauIYTi2V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:50:61:a9:55:8c:c6:bc:2c:f3:3e:18:2f:21:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490b21f79b9ea2f3d042374714867d12401995db
Validity
Not Before: Mar 1 10:01:14 2026 GMT
Not After : Mar 2 10:01:14 2026 GMT
Subject: CN=ddf2c5201966d8b1ad3260e0c93cf0eb8c683057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e1:52:ab:7f:ef:31:95:3d:8d:e7:1e:48:18:
1b:1c:f6:47:67:d9:6a:5e:4a:e3:c5:d2:9f:ed:33:
02:01:3e:d0:5b:97:84:6e:74:36:c0:a6:5c:6b:93:
03:42:b9:e8:00:d2:e1:d9:6c:01:67:7b:df:8b:14:
37:33:b2:e1:54:66:b9:45:10:9c:55:5d:46:7f:c8:
5f:33:9a:15:2a:94:ec:92:c1:40:49:9e:c5:db:be:
8e:e3:72:da:65:f6:19:7c:88:b8:e4:aa:40:6f:07:
20:f3:6a:d0:ed:28:c1:ec:b8:a8:c9:28:12:b7:2c:
cb:65:b6:fb:61:5e:03:0f:20:e3:99:4c:af:bd:32:
3d:86:8f:cf:2a:83:c9:dc:f0:35:11:fe:4f:b4:42:
03:86:c0:b3:38:21:69:8f:2c:c2:1d:8f:3b:a0:1f:
a3:c1:83:f1:09:fd:6e:85:94:cc:b2:ec:2b:06:97:
bc:24:01:90:5c:9e:16:3e:96:5f:35:ed:81:fd:ac:
25:32:58:c1:63:48:ec:27:4d:7c:0f:8c:17:26:35:
4c:d5:c5:7a:e9:8a:60:ed:79:0d:1a:6b:14:b3:b5:
c8:28:27:3a:3c:86:83:74:5b:57:19:bd:71:25:21:
96:f3:6a:64:09:24:51:10:e7:d5:fd:43:4c:6e:32:
21:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F2:C5:20:19:66:D8:B1:AD:32:60:E0:C9:3C:F0:EB:8C:68:30:57
X509v3 Authority Key Identifier:
keyid:49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:7a:47:3d:1c:55:39:20:d5:ef:22:77:48:41:e5:40:9d:d5:
7c:3e:71:bf:99:e9:65:33:51:bd:85:96:18:cd:b9:87:d0:1b:
59:8f:17:08:e5:18:5c:c6:84:51:64:23:bb:66:56:2e:a7:f9:
1a:17:f3:ca:b4:ae:99:d4:7b:92:2f:c6:3b:a3:a2:a7:a2:d3:
40:10:ac:99:6c:26:9e:1d:37:80:f9:7a:cb:f0:79:81:ef:fd:
b9:71:f1:e8:6e:e4:c4:dc:a0:3b:3b:f3:ae:43:0e:45:3e:c1:
44:15:ac:b3:52:00:f1:16:c9:cb:a6:25:58:37:cb:02:36:3c:
4a:5e:e2:1b:f0:5b:e6:7d:bd:28:4d:a0:f2:a2:84:40:bb:af:
c9:16:59:0c:2f:25:ac:c1:a4:2d:9c:c8:df:43:d5:3e:60:8f:
d2:90:b3:db:ef:a2:1f:1a:3c:36:66:9b:d4:06:74:a8:aa:2a:
b8:bf:11:d9:77:eb:4b:99:80:bd:7f:7e:31:7e:7c:d1:b8:fa:
3a:b5:e7:f6:04:19:ea:0e:5d:c8:5f:f7:d5:0b:5c:c1:4e:5c:
93:f7:a9:b5:70:ff:46:8e:5a:3f:59:b3:8d:2d:f4:cc:39:e9:
07:84:29:2f:b5:57:48:89:34:8e:4d:84:ae:05:4a:9c:2e:02:
7d:c4:33:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:48 2026 by rpki-client