Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
File: SQsh95ueovPQQjdHFIZ9EkAZlds.mft (raw, json)
Hash identifier: CVsUtWDe+NbgbOoR61Lm4K3Cg13Vcz/QZAoduDKha7A=
Subject key identifier: 81:35:C7:99:FB:C2:F5:62:96:BB:00:45:2D:91:40:83:F2:60:A1:05
Authority key identifier: 49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
Certificate issuer: /CN=490b21f79b9ea2f3d042374714867d12401995db
Certificate serial: 019D992B6FD2CE5E45E2CC0AF95474DD563A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 02:00:53 +0000
Manifest this update: Fri 17 Apr 2026 02:00:53 +0000
Manifest next update: Sat 18 Apr 2026 02:00:53 +0000
Files and hashes: 1: OsHfm5IcRp6wCajw-NE1iWNH7Z8.roa (hash: oS3FUlduEB7YSg+361aWK05LocqnWlc3lIUtH4BZyko=)
2: QQeZJrwl_4NJIISgArACAVq6L0o.roa (hash: uh1KpLqwgaZj2AcvOxxyx2dRcs//e4c0XtE2TUfZonY=)
3: SQsh95ueovPQQjdHFIZ9EkAZlds.crl (hash: tl7JG3nLJwyUxXqOZ3h2tWBnwsVyuAMzDwT5zo6XU8k=)
4: Z4RE0ETdC4xhk1FbbundGTGGRB8.roa (hash: qQ3AizCsruyzTMQNiKoa4LuCo6aARO1PFZyPx/nGISA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:6f:d2:ce:5e:45:e2:cc:0a:f9:54:74:dd:56:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490b21f79b9ea2f3d042374714867d12401995db
Validity
Not Before: Apr 17 02:00:53 2026 GMT
Not After : Apr 18 02:00:53 2026 GMT
Subject: CN=8135c799fbc2f56296bb00452d914083f260a105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:a7:1d:5a:70:a9:67:0e:e2:20:22:78:88:
87:74:e8:85:7f:f8:fd:21:e0:55:f6:e3:38:10:cf:
d9:1f:24:4a:2c:3c:ed:52:2c:a0:e1:79:29:ec:7b:
ef:71:b0:c0:fe:61:4c:d9:3d:62:3f:98:76:ea:33:
50:9f:a8:83:bf:6f:8b:e8:cc:b4:d3:79:41:d6:d1:
95:0a:d6:82:cb:e8:2f:57:9d:97:4c:dd:89:0b:4e:
64:4e:12:cd:f8:bb:f8:14:f0:71:45:bf:7f:57:ce:
4d:ef:81:16:dd:bb:df:18:b0:6a:c8:46:a9:6d:52:
8b:3c:5e:7b:12:3e:ff:c1:21:c9:e5:f6:f4:32:6f:
b2:a2:59:55:74:7e:fe:fa:0f:43:a7:9b:78:6a:8e:
59:91:2b:1e:bd:89:36:3c:4f:24:4a:93:81:e7:9c:
ac:60:21:72:ce:6e:be:7a:3a:78:5b:db:e2:3d:d5:
68:e1:e1:da:e0:9e:f3:98:5a:7d:97:87:e5:2f:44:
ea:76:93:1e:53:b6:d2:5f:e9:98:2d:36:f9:e8:b6:
47:b8:ae:61:d6:04:45:85:94:0e:24:85:43:85:70:
0b:64:77:20:45:bb:19:50:8e:96:c4:ce:1d:6d:07:
e6:ab:31:2d:ad:83:41:17:42:bf:1a:61:2a:60:f4:
41:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:35:C7:99:FB:C2:F5:62:96:BB:00:45:2D:91:40:83:F2:60:A1:05
X509v3 Authority Key Identifier:
keyid:49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:82:64:b4:94:d0:be:be:3b:1e:55:c5:b2:46:cc:a7:18:10:
c4:44:dd:b6:29:06:90:9f:45:d0:d5:09:e7:16:c9:95:54:94:
63:4e:50:b5:ac:19:32:e9:cf:99:c7:d1:1f:de:f1:21:8b:82:
58:5d:74:c9:b6:b2:f2:19:78:74:ee:99:31:b1:6f:da:3c:10:
10:43:ee:7a:b7:0d:6d:46:60:b0:c8:80:da:fc:aa:80:57:29:
60:56:06:a2:e0:d5:c3:af:38:5d:ce:3c:78:a5:13:5c:3d:8c:
8f:01:fa:a6:44:2a:23:74:be:13:37:fe:68:b4:95:7d:8c:86:
a0:f0:ab:7c:ac:17:48:fa:b1:4a:31:d2:4d:6a:8c:d3:72:82:
ed:a0:fe:0b:95:2e:b0:2a:06:14:b0:05:7d:e7:46:c7:c7:64:
f7:f4:f4:af:27:65:93:6a:c9:f4:56:a4:e0:34:d3:dd:a1:28:
c8:7a:8f:76:94:70:f9:88:2b:76:26:f6:bb:4c:cc:2d:12:9b:
bd:e1:7d:8f:1a:08:f2:0c:7f:60:ce:5f:e9:94:9e:90:85:92:
fa:3a:3a:c7:02:e9:1d:5f:52:8e:05:6e:1d:c6:6e:3f:a7:ef:
e3:6e:5c:0a:4e:e9:2d:2a:d8:0b:68:92:84:31:f0:9e:46:52:
cb:d8:18:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:41:14 2026 by rpki-client