Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
File: SQsh95ueovPQQjdHFIZ9EkAZlds.mft (raw, json)
Hash identifier: ZvKbOmANvD5PyYHGCk1Q+T25xnWdjkN+F/pIm32oSGU=
Subject key identifier: 97:B2:B7:3A:FC:FA:47:BA:5D:DB:09:FB:46:5E:1D:56:95:31:35:F0
Authority key identifier: 49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
Certificate issuer: /CN=490b21f79b9ea2f3d042374714867d12401995db
Certificate serial: 01A0C6D805717294FE92A8A3C0B8C612BDFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
Manifest number: 1A6E
Signing time: Tue 22 Sep 2026 02:00:40 +0000
Manifest this update: Tue 22 Sep 2026 02:00:40 +0000
Manifest next update: Wed 23 Sep 2026 02:00:40 +0000
Files and hashes: 1: D2NDXon9tRzoL-Y41MeImDBzBX0.roa (hash: hhnm2U2ilCapnJ9WdrcPHqXlSDPxhBMVV2XskPsU2V4=)
2: OsHfm5IcRp6wCajw-NE1iWNH7Z8.roa (hash: oS3FUlduEB7YSg+361aWK05LocqnWlc3lIUtH4BZyko=)
3: SQsh95ueovPQQjdHFIZ9EkAZlds.crl (hash: XcZ90CP1iiUQ3S/ycrdhCuGjMPEqREp5to1RUxnpn80=)
4: Z4RE0ETdC4xhk1FbbundGTGGRB8.roa (hash: qQ3AizCsruyzTMQNiKoa4LuCo6aARO1PFZyPx/nGISA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:05:71:72:94:fe:92:a8:a3:c0:b8:c6:12:bd:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490b21f79b9ea2f3d042374714867d12401995db
Validity
Not Before: Sep 22 02:00:40 2026 GMT
Not After : Sep 23 02:00:40 2026 GMT
Subject: CN=97b2b73afcfa47ba5ddb09fb465e1d56953135f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:4c:c7:21:a8:42:59:7f:31:63:13:05:c7:
44:1c:62:c6:3b:8f:79:af:08:96:2b:d4:ba:23:1b:
95:3f:80:2e:ce:c7:7b:8a:f8:11:27:fb:43:49:c1:
df:e6:69:c0:d4:71:8a:55:90:c6:83:f3:80:80:5f:
8b:a3:47:79:dd:c5:79:c2:09:0c:bb:3a:b3:9b:96:
2a:a9:ec:1d:80:4a:d3:3a:1d:e1:31:71:5d:80:bc:
e2:9d:53:a6:b2:79:93:be:c4:48:05:0c:31:01:e8:
a1:41:8e:28:bd:6a:2e:64:9c:19:a3:f0:2d:b6:0f:
15:84:1d:b6:28:09:43:75:11:68:7e:06:f5:22:3b:
bf:5a:95:c6:65:64:0e:66:44:73:4a:52:9a:10:8e:
db:13:ec:a6:d3:72:8f:8b:e0:3b:ca:b8:f0:0b:c5:
c4:2d:1e:bf:2e:e4:65:02:eb:0c:1f:5c:ab:a3:fc:
d5:b3:74:1d:31:74:ad:0c:26:c1:14:4f:59:78:52:
0f:51:32:ea:c5:3a:45:b8:24:1c:a7:64:41:6b:1d:
a0:c3:a7:6c:36:90:72:9c:33:a4:d3:53:5f:b8:0c:
6a:72:11:3e:33:20:8f:05:70:55:dd:7f:1d:c1:60:
34:61:29:e9:1c:9b:aa:58:98:c8:db:27:44:f2:f1:
24:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B2:B7:3A:FC:FA:47:BA:5D:DB:09:FB:46:5E:1D:56:95:31:35:F0
X509v3 Authority Key Identifier:
keyid:49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ad:65:01:c6:a5:49:80:8f:0f:63:75:85:0d:3b:a8:db:fb:
55:0d:ae:09:f8:51:ac:aa:5b:b8:59:52:32:21:70:99:17:85:
0b:73:36:2a:ce:03:bb:14:a4:0f:d2:2c:80:92:00:ba:6d:05:
dd:13:fb:b3:49:3c:1a:f6:21:44:75:4b:24:17:0f:e7:8e:10:
2d:fd:c8:fb:d5:8e:9a:7e:28:76:b0:1e:2d:f8:4b:bf:12:69:
25:97:32:f5:da:a3:c7:52:8f:02:26:9d:ca:9b:ae:5b:5c:82:
05:b4:3c:5e:49:33:b8:9c:49:fe:52:78:3b:28:ac:b2:72:17:
da:ed:23:44:31:19:0d:c3:a8:41:ed:cc:b9:1b:49:82:b6:26:
b3:17:7c:e3:02:44:16:a4:32:cc:df:b3:f7:1e:55:79:28:e1:
a6:6e:ba:67:c7:d6:99:05:93:50:ae:6f:e1:45:bd:1b:7c:14:
8b:62:02:77:6b:1b:35:90:85:23:f8:fa:ca:1e:a7:27:2f:ed:
f7:1f:ee:53:27:de:d7:8e:1b:04:96:67:ee:df:c0:8f:fb:8e:
24:76:51:3a:97:17:65:af:7a:bb:8e:be:c9:ef:a0:4e:2e:f0:
92:09:75:68:ac:d0:c0:c9:47:db:69:33:6f:4e:58:3f:0f:43:
28:15:00:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDG2AVxcpT+kqijwLjGEr36MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MGIyMWY3OWI5ZWEyZjNkMDQyMzc0NzE0ODY3ZDEyNDAx
OTk1ZGIwHhcNMjYwOTIyMDIwMDQwWhcNMjYwOTIzMDIwMDQwWjAzMTEwLwYDVQQD
Eyg5N2IyYjczYWZjZmE0N2JhNWRkYjA5ZmI0NjVlMWQ1Njk1MzEzNWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseBMxyGoQll/MWMTBcdEHGLGO495
rwiWK9S6IxuVP4Auzsd7ivgRJ/tDScHf5mnA1HGKVZDGg/OAgF+Lo0d53cV5wgkM
uzqzm5YqqewdgErTOh3hMXFdgLzinVOmsnmTvsRIBQwxAeihQY4ovWouZJwZo/At
tg8VhB22KAlDdRFofgb1Iju/WpXGZWQOZkRzSlKaEI7bE+ym03KPi+A7yrjwC8XE
LR6/LuRlAusMH1yro/zVs3QdMXStDCbBFE9ZeFIPUTLqxTpFuCQcp2RBax2gw6ds
NpBynDOk01NfuAxqchE+MyCPBXBV3X8dwWA0YSnpHJuqWJjI2ydE8vEkKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJeytzr8+ke6XdsJ+0ZeHVaVMTXwMB8GA1UdIwQY
MBaAFEkLIfebnqLz0EI3RxSGfRJAGZXbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1FzaDk1dWVvdlBRUWpkSEZJWjlFa0FabGRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lMTAxNjUtYjRjZC00MzIxLWJmM2Mt
NDgwYzMyZjQwMGUxLzEvU1FzaDk1dWVvdlBRUWpkSEZJWjlFa0FabGRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9lMTAxNjUtYjRjZC00MzIxLWJmM2MtNDgwYzMyZjQwMGUx
LzEvU1FzaDk1dWVvdlBRUWpkSEZJWjlFa0FabGRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAma1lAcal
SYCPD2N1hQ07qNv7VQ2uCfhRrKpbuFlSMiFwmReFC3M2Ks4DuxSkD9IsgJIAum0F
3RP7s0k8GvYhRHVLJBcP544QLf3I+9WOmn4odrAeLfhLvxJpJZcy9dqjx1KPAiad
ypuuW1yCBbQ8XkkzuJxJ/lJ4OyissnIX2u0jRDEZDcOoQe3MuRtJgrYmsxd84wJE
FqQyzN+z9x5VeSjhpm66Z8fWmQWTUK5v4UW9G3wUi2ICd2sbNZCFI/j6yh6nJy/t
9x/uUyfe144bBJZn7t/Aj/uOJHZROpcXZa96u46+ye+gTi7wkgl1aKzQwMlH22kz
b05YPw9DKBUA5w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:52:08 2026 by rpki-client