Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
File: SqbchPRraQchSFpEBb_JOdolSWk.mft (raw, json)
Hash identifier: 5vggrCRxPexbAntdTm/e1CV35SYh1fqn3d2naljmZJk=
Subject key identifier: B7:FC:5B:D1:51:EA:C2:4E:46:B9:40:6F:67:5E:FB:E7:10:85:1E:60
Authority key identifier: 4A:A6:DC:84:F4:6B:69:07:21:48:5A:44:05:BF:C9:39:DA:25:49:69
Certificate issuer: /CN=4aa6dc84f46b690721485a4405bfc939da254969
Certificate serial: 019CAEDA367A972FF9E7677B4DA450379F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
Manifest number: 039E
Signing time: Mon 02 Mar 2026 14:01:02 +0000
Manifest this update: Mon 02 Mar 2026 14:01:02 +0000
Manifest next update: Tue 03 Mar 2026 14:01:02 +0000
Files and hashes: 1: 1kPwWdchsNxn-Bc9d2kic34pLHM.roa (hash: Pw0uzLsLdRPJc3mWei6tAgpkvqXkdwbkwjXBKfc2x8E=)
2: SqbchPRraQchSFpEBb_JOdolSWk.crl (hash: BIrtRRbwI+jCcKSB39VppdVIZM+mp84SHpbzubn6qq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:36:7a:97:2f:f9:e7:67:7b:4d:a4:50:37:9f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa6dc84f46b690721485a4405bfc939da254969
Validity
Not Before: Mar 2 14:01:02 2026 GMT
Not After : Mar 3 14:01:02 2026 GMT
Subject: CN=b7fc5bd151eac24e46b9406f675efbe710851e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:06:9e:bb:47:2b:bc:03:ed:67:55:34:57:
15:7e:5e:47:ef:01:c3:68:22:92:59:15:f0:eb:a9:
40:3a:68:28:45:50:5d:f3:8c:f8:0a:86:d5:06:56:
fe:d7:c6:95:32:1d:2a:e5:9f:65:48:e6:54:6a:43:
87:0f:47:5f:4b:96:60:77:a6:15:7d:5c:54:17:1f:
1a:b1:e1:6a:72:67:9b:96:2f:ef:33:a8:f1:64:9f:
f1:bc:5f:ca:ea:be:b6:8f:00:6f:0c:9d:72:24:d5:
97:41:a9:e1:f7:86:35:52:a2:70:04:d0:89:d4:db:
7a:64:28:04:28:28:a8:b9:d9:9d:72:e2:b4:d5:52:
c7:d7:d3:2b:63:d3:67:49:09:b6:32:51:a6:cc:11:
56:c7:ff:8b:fd:88:e0:d8:87:ad:3a:59:dd:1c:3e:
97:01:51:19:29:95:77:fa:10:2b:f4:6d:d6:9f:b8:
b7:0c:16:f6:59:82:0f:83:ec:2f:ed:db:49:b2:48:
e5:52:dc:ee:b8:69:5c:27:ef:71:d1:0b:8e:f5:eb:
d3:85:d0:15:f8:c1:a2:05:e5:3c:c0:5a:d7:4a:75:
ff:ef:18:48:59:4c:19:7c:3a:56:d3:b7:44:ca:1f:
c2:8e:8c:ba:3f:b3:e9:6f:b8:d5:bd:d3:6c:77:8c:
a0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FC:5B:D1:51:EA:C2:4E:46:B9:40:6F:67:5E:FB:E7:10:85:1E:60
X509v3 Authority Key Identifier:
keyid:4A:A6:DC:84:F4:6B:69:07:21:48:5A:44:05:BF:C9:39:DA:25:49:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5f:b4:ab:00:53:27:6b:8f:23:b0:49:42:40:2e:36:d6:d6:
ae:86:12:a0:23:1f:39:68:40:8b:12:aa:6f:47:6b:88:12:9a:
4c:ab:ab:bd:9a:fe:d3:de:a5:9f:c5:c9:12:92:f4:df:e4:16:
f6:e3:3d:4b:01:e5:d8:bc:83:66:10:dc:12:4c:b7:88:6f:79:
a6:99:7d:a0:0c:88:bf:5d:4d:22:3e:2a:39:11:a8:fd:6f:40:
f8:b9:6a:a5:3d:53:bf:50:2b:37:15:89:f0:f9:bd:a1:38:ba:
ab:5e:fe:71:87:b6:e3:f7:ea:3a:d1:14:f7:a9:7b:af:0a:b2:
ad:0a:37:5f:65:5d:04:4e:44:a7:37:fd:d1:1b:33:ae:1e:16:
5a:7d:8d:d9:69:c9:05:af:e1:f2:17:d0:50:e4:83:fd:08:d0:
24:f5:1d:b2:4a:b1:e9:55:2b:f9:c5:3e:60:2f:81:d5:4a:9a:
ce:29:ae:9f:7f:2c:20:0b:55:6d:31:c9:5c:ee:67:22:22:a3:
81:66:57:7f:a5:c0:d4:a7:48:6e:d8:aa:01:f3:9a:c1:36:95:
f8:2f:69:8b:96:19:06:8b:d3:ea:d4:c4:55:c1:a8:57:b8:d3:
51:3b:3c:f3:5c:60:07:f2:c2:2b:1f:a9:44:78:70:13:c2:93:
3e:7c:39:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:26 2026 by rpki-client