Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
File: SqaReHb9eJJsGSe5_ceWWNdGyEw.mft (raw, json)
Hash identifier: OT+dB/9wLlmKn/ZrneNt5JvsWm6DDrrLAFxJKM33JOQ=
Subject key identifier: 91:E0:BB:39:5B:5D:B9:61:9F:4F:85:CA:31:FD:23:65:F2:3B:2C:B0
Authority key identifier: 4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C
Certificate issuer: /CN=4aa6917876fd78926c1927b9fdc79658d746c84c
Certificate serial: 019CAA583A7380073384E5C59F635C9C2D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
Manifest number: 15A8
Signing time: Sun 01 Mar 2026 17:00:34 +0000
Manifest this update: Sun 01 Mar 2026 17:00:34 +0000
Manifest next update: Mon 02 Mar 2026 17:00:34 +0000
Files and hashes: 1: SqaReHb9eJJsGSe5_ceWWNdGyEw.crl (hash: dzb+5bEYwWbzct5iH+XKMqo/BuAEnZk1rVVNGpwwPZA=)
2: dEe9kef00viBgag16NgYd-MmkFk.roa (hash: ijeJQOQCPV+rQCmqff64uTf1aTuDHnwhJzXA65R50R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:3a:73:80:07:33:84:e5:c5:9f:63:5c:9c:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa6917876fd78926c1927b9fdc79658d746c84c
Validity
Not Before: Mar 1 17:00:34 2026 GMT
Not After : Mar 2 17:00:34 2026 GMT
Subject: CN=91e0bb395b5db9619f4f85ca31fd2365f23b2cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fc:b3:9d:4c:a7:da:a7:ef:2e:ca:0b:a6:8f:
69:5e:4f:b4:2d:bb:ce:52:98:69:3c:cc:b5:da:62:
66:5d:3a:66:dd:08:f8:15:b9:8f:1d:58:60:24:62:
2a:c9:11:1c:57:b4:b6:8a:29:b3:ef:ce:a4:06:6d:
b1:6b:64:e7:7f:f6:17:33:87:89:49:cf:55:09:73:
ed:de:a8:5e:b8:db:86:f6:c0:83:d4:61:3b:45:34:
17:40:17:84:03:e0:cd:27:e5:4b:10:6d:53:6d:eb:
0b:a4:48:95:a3:12:d0:5e:5d:08:e6:bf:6b:4f:dc:
eb:c8:0b:22:37:9d:90:9b:30:5b:b5:b0:03:ed:c7:
52:af:ed:ff:38:89:d8:ee:bd:3d:6c:8a:a0:ea:a1:
ed:8f:36:c0:80:bd:55:4a:f7:03:d8:9a:dd:2c:d3:
d1:8d:03:9f:db:b9:37:0c:d0:6b:24:4c:9e:b2:a8:
c1:e3:50:a4:21:ef:72:23:86:a1:c6:a6:67:3c:87:
55:df:91:80:29:a3:42:4b:c8:c3:ff:25:6c:69:60:
a6:04:a3:da:d7:6a:54:dd:d9:df:57:55:5f:fd:10:
eb:89:24:f5:64:7f:a1:af:00:bf:b2:a0:b8:40:af:
7f:ff:2e:26:b5:73:1b:a1:d4:57:82:a9:42:5d:5d:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E0:BB:39:5B:5D:B9:61:9F:4F:85:CA:31:FD:23:65:F2:3B:2C:B0
X509v3 Authority Key Identifier:
keyid:4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3f:09:b1:84:7b:92:38:58:f7:a3:77:76:77:46:00:cd:80:
ca:2c:60:e6:a6:3a:14:92:c5:d6:b8:be:0a:c4:2a:ce:ec:a3:
6a:c9:8a:68:1d:69:67:bb:29:3e:b7:99:44:e9:58:92:04:19:
11:34:4e:05:d3:37:c4:e8:2f:8d:bd:f7:66:b5:14:61:56:55:
dc:65:39:6e:6e:f8:f9:e2:41:18:d5:63:b2:6b:0b:07:c9:5f:
8a:3a:20:3e:18:8c:99:a3:3e:49:ca:5f:c5:6f:68:ec:26:4c:
b1:fc:7a:6e:2b:32:eb:71:c4:86:c6:de:07:b7:1b:9b:ee:c7:
6d:db:58:91:55:fc:ed:34:80:b6:9c:34:4d:54:90:52:57:e7:
b6:a7:a4:a6:dd:47:85:9a:7e:94:98:f1:af:01:45:98:f6:fd:
ba:f9:23:96:94:d5:9f:a0:69:d2:26:d2:7b:94:d2:e1:3f:ee:
8f:22:2c:de:14:bc:83:02:58:6f:14:b1:5a:2d:52:24:7a:f7:
6b:7c:55:35:e7:ed:94:fb:c8:46:66:26:ab:00:0e:2e:93:6f:
ff:d1:85:57:39:fe:a3:96:d7:93:d1:a6:db:95:e9:21:56:4b:
40:3f:4e:69:d2:3a:d9:10:01:76:69:46:5a:76:36:fa:5a:ac:
72:b0:11:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:03:11 2026 by rpki-client