
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
File: SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft (raw, json)
Hash identifier: GZgGxcMqOQZ8+6tcEJSh26SJNMu5EF78bYLx8Vs6gHc=
Subject key identifier: F9:84:8E:90:46:26:97:1B:12:E5:2B:37:7D:FC:A8:B0:DA:40:BE:CE
Authority key identifier: 49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
Certificate issuer: /CN=490957f79e6c28146643f49d9fe17fc4f163776c
Certificate serial: 019CAB6B4B8F1FB0C51597D42146D6A7104D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
Manifest number: 0F29
Signing time: Sun 01 Mar 2026 22:01:01 +0000
Manifest this update: Sun 01 Mar 2026 22:01:01 +0000
Manifest next update: Mon 02 Mar 2026 22:01:01 +0000
Files and hashes: 1: SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl (hash: 9WehWOk/fHB+deVId7jRGMcrsoO1GLAn0de62VNFnKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:4b:8f:1f:b0:c5:15:97:d4:21:46:d6:a7:10:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490957f79e6c28146643f49d9fe17fc4f163776c
Validity
Not Before: Mar 1 22:01:01 2026 GMT
Not After : Mar 2 22:01:01 2026 GMT
Subject: CN=f9848e904626971b12e52b377dfca8b0da40bece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:51:be:38:b0:81:1b:a8:67:21:26:f5:46:6f:
8e:6b:80:be:3e:07:c6:f6:5e:7c:ac:a5:72:3a:99:
0c:ec:5d:52:7e:eb:3d:e3:f9:c0:80:4f:21:32:94:
b9:98:6d:c8:e6:c7:05:ba:00:e3:f8:e1:7b:78:b2:
33:9d:e5:77:36:8f:46:40:17:f5:0e:e0:bd:ad:31:
67:0f:54:bf:e7:da:27:aa:b1:c9:a9:b9:9d:cd:53:
5c:b7:4b:20:8d:e7:b8:57:28:42:7d:6a:19:f6:2e:
f9:fe:8b:ed:47:50:5e:00:d6:ac:ea:02:5c:28:ef:
ad:94:e9:fa:06:2c:ad:a8:c9:ff:8b:a5:62:93:6f:
98:91:17:fc:15:ea:a8:ef:03:19:7b:7e:00:35:b1:
70:26:87:3f:d7:8a:33:c6:af:30:13:83:60:91:fb:
8b:0c:69:a3:ee:d3:2b:5e:62:2a:3e:ee:89:05:5c:
5d:9e:a4:3d:52:99:80:d1:06:f8:df:8a:7d:05:4a:
65:5b:4e:04:ea:dc:c9:98:91:4f:d7:38:df:40:53:
9c:0d:08:76:75:03:f2:e6:2a:07:5b:ef:37:e6:0a:
af:31:f1:b9:43:8b:59:54:e5:5d:4e:da:dc:24:9e:
6b:b0:75:f8:e4:ee:e2:eb:9d:d1:23:74:df:82:44:
7e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:84:8E:90:46:26:97:1B:12:E5:2B:37:7D:FC:A8:B0:DA:40:BE:CE
X509v3 Authority Key Identifier:
keyid:49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2e:95:5f:e7:06:da:a4:66:47:84:08:47:92:c5:65:c9:33:
17:ca:e4:8b:93:04:84:c8:c8:76:84:d7:57:84:cf:d5:fd:93:
14:e9:bc:a1:88:aa:19:ea:54:29:3e:d3:24:c2:07:50:f8:ad:
4d:9e:c8:ac:f1:8d:75:34:70:0e:5f:5f:d7:be:9f:99:10:a9:
ef:bf:5b:71:c3:75:e8:da:8b:23:1f:d2:18:8a:47:32:de:39:
e0:34:73:21:7d:fa:5a:91:7e:8c:6d:4b:ac:e3:1c:13:28:cf:
6d:60:1e:cf:47:2d:47:29:cd:6f:0e:e0:c3:4f:6a:ae:a5:aa:
7b:4c:f0:a0:33:b0:1d:d5:02:d5:e6:2c:55:4a:42:28:32:db:
c1:c9:03:9a:c2:ed:d5:c0:29:0d:c4:d2:bf:f5:73:48:bc:a7:
b6:29:ec:bc:11:66:d2:27:02:84:ec:bf:5f:15:6f:70:2a:7c:
d1:32:a0:c4:45:16:6c:95:51:46:d2:95:b1:64:57:2f:df:c6:
da:2b:86:17:5f:87:6f:12:7c:7a:de:2f:f3:16:80:1a:4b:ef:
a5:e6:eb:d6:d3:83:6d:9d:a3:42:26:70:d6:c8:db:22:cd:ea:
c6:24:2d:4b:74:50:c7:c1:36:91:d6:ed:16:28:ce:dd:6d:12:
16:06:a5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:30 2026 by rpki-client