Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
File: _sQT3TZn54GV5SaKooWupRa8sZk.mft (raw, json)
Hash identifier: DWqLXfTNQ5Wg3arRxW+m853MLD0RJiEK/v52cSNpl/U=
Subject key identifier: 5A:2E:6A:79:64:D6:64:5A:18:5E:3E:A0:86:03:BF:7D:CE:D9:99:D9
Authority key identifier: FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
Certificate issuer: /CN=fec413dd3667e78195e5268aa285aea516bcb199
Certificate serial: 019DA3E5FA29742F3B4D67B3021A18FDDF28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
Manifest number: 15F0
Signing time: Sun 19 Apr 2026 04:00:51 +0000
Manifest this update: Sun 19 Apr 2026 04:00:51 +0000
Manifest next update: Mon 20 Apr 2026 04:00:51 +0000
Files and hashes: 1: _sQT3TZn54GV5SaKooWupRa8sZk.crl (hash: tf7fK5UlZTGd6Lnc2t49Yp4e0iixk5tZ8DX+w9riQwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e5:fa:29:74:2f:3b:4d:67:b3:02:1a:18:fd:df:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec413dd3667e78195e5268aa285aea516bcb199
Validity
Not Before: Apr 19 04:00:51 2026 GMT
Not After : Apr 20 04:00:51 2026 GMT
Subject: CN=5a2e6a7964d6645a185e3ea08603bf7dced999d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:91:e3:26:f1:da:74:ac:c7:f6:b2:4a:05:f4:
6d:d1:cc:e6:38:e4:97:47:5c:5d:99:cd:a8:13:46:
6a:7b:1b:d4:6c:55:f6:70:89:02:48:af:0a:54:09:
68:e5:73:cd:4f:1e:1c:12:f9:df:c9:cd:81:70:06:
5f:e9:24:83:26:2f:08:55:19:3f:79:5c:a5:fb:2f:
7c:75:f9:3f:2a:70:b6:b9:6e:64:d7:3c:88:4f:53:
2e:3f:00:e2:d3:73:c1:31:2b:7a:ec:56:e5:f5:28:
42:a3:e0:bd:f0:4b:08:09:b6:06:e8:ef:67:6b:84:
67:e4:6d:01:23:b2:20:78:19:82:58:c8:78:c3:67:
9d:5c:52:5a:b6:be:f3:56:28:1e:77:e3:a8:9f:e5:
99:85:12:30:30:df:2f:e7:b0:bb:96:19:7c:99:2e:
a5:6d:0f:08:79:ee:32:6e:12:d9:0d:d0:71:b9:1d:
32:63:5b:e1:4d:f9:7f:a9:f0:18:83:1b:a8:33:76:
03:cd:8a:0a:ff:62:a9:49:f3:35:e5:36:9f:e9:1c:
66:8a:8d:5d:1c:87:a5:f9:ea:7e:e8:fc:84:bf:39:
12:78:b3:9d:f7:17:0d:54:2f:8e:f7:52:ef:70:82:
cf:8b:6f:fe:01:de:a9:81:e1:b4:06:32:33:56:39:
a5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2E:6A:79:64:D6:64:5A:18:5E:3E:A0:86:03:BF:7D:CE:D9:99:D9
X509v3 Authority Key Identifier:
keyid:FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e4:07:3c:78:b1:69:17:84:58:27:ba:e3:cc:75:b4:c0:a8:
3c:3f:7e:56:60:ee:c0:cc:12:7c:fe:fb:bb:5f:33:18:30:52:
8a:ec:c1:0d:bd:2e:7b:04:f0:5a:7c:09:1e:d1:da:0e:a6:4f:
15:03:3a:ff:73:aa:f0:05:71:b5:6d:a3:9e:1a:d4:4a:40:ff:
c1:c9:4b:bb:d1:0c:6b:6c:f6:94:97:f6:1a:14:87:fe:da:d9:
41:62:9e:9b:bd:3b:c1:0b:f4:a8:b0:46:e9:5f:80:41:e8:7c:
a0:65:ad:13:aa:a8:0c:6c:53:a2:a4:f1:ae:2e:cd:03:25:ae:
cd:2f:e7:a5:a1:0f:78:db:9e:e6:fc:9c:e0:e3:b2:0e:51:ac:
39:14:27:a6:68:98:6c:5b:bc:a2:89:83:3d:8f:6d:61:9c:12:
65:3c:6b:6c:b7:15:7e:d1:9d:e1:13:8c:86:b4:78:98:c6:97:
f0:3c:8b:be:4f:ae:f6:2a:eb:f8:ea:e2:a0:f0:9f:8d:1b:1e:
0c:ad:4b:b0:8a:c4:3b:f8:22:e5:46:29:aa:ae:8d:16:af:f6:
f8:15:e4:85:05:30:4c:77:68:4e:db:e8:4c:a1:35:56:75:d4:
60:6f:f8:0d:82:3f:b5:ef:68:03:95:d4:4d:e5:87:66:0e:be:
74:80:79:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:23:33 2026 by rpki-client