Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
File: SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft (raw, json)
Hash identifier: tflespAklEOnGBj4NFiq4ZL9+eBTUOBAMrUQt8wFDOU=
Subject key identifier: 66:37:6C:06:1A:02:96:DD:1B:2A:5B:55:94:C9:F7:78:69:5E:53:CF
Authority key identifier: 49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
Certificate issuer: /CN=490957f79e6c28146643f49d9fe17fc4f163776c
Certificate serial: 019D9AE31462F850F8FC2B54B2C7134C6017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
Manifest number: 0FA5
Signing time: Fri 17 Apr 2026 10:01:06 +0000
Manifest this update: Fri 17 Apr 2026 10:01:06 +0000
Manifest next update: Sat 18 Apr 2026 10:01:06 +0000
Files and hashes: 1: SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl (hash: QrIQNaIPw4NJIfS83YpxnAwvUwb6WAXsc4nQLLu2UVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:14:62:f8:50:f8:fc:2b:54:b2:c7:13:4c:60:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490957f79e6c28146643f49d9fe17fc4f163776c
Validity
Not Before: Apr 17 10:01:06 2026 GMT
Not After : Apr 18 10:01:06 2026 GMT
Subject: CN=66376c061a0296dd1b2a5b5594c9f778695e53cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:03:67:06:11:fe:fb:dc:f9:69:90:34:fd:a1:
98:17:22:6d:71:63:af:5b:5c:30:55:fd:f3:3b:7b:
3d:bf:0a:74:03:b6:b8:5f:60:44:73:f8:cf:95:80:
7d:9d:51:84:8b:b9:6d:bb:8b:96:c8:17:38:30:44:
d7:4c:bb:c5:12:8d:f7:54:03:dd:7a:66:0b:28:17:
60:eb:dc:35:56:85:46:05:26:80:ca:bc:a7:9e:6e:
d3:c8:1c:55:08:c0:9c:ce:a2:92:74:3c:2f:f1:35:
98:2d:42:0c:28:27:67:84:98:22:b0:d4:5d:ac:12:
fc:cd:b2:54:95:72:28:9d:1a:85:59:25:5d:0f:ae:
2b:14:f2:c1:8c:24:cd:d8:ce:ec:8e:6d:c3:8a:86:
6c:ee:0b:18:40:5b:82:49:87:10:d5:42:f4:a8:92:
fb:06:60:a8:c0:30:ee:33:b6:4e:dc:53:63:54:94:
f0:c8:96:70:b4:62:45:60:bf:e4:a8:f2:77:1c:0d:
6a:36:b3:2d:a7:1f:69:29:ad:70:e7:58:83:19:87:
98:e5:d4:9c:08:ed:a7:ba:0e:94:3f:c1:a2:06:1f:
f9:eb:27:94:8b:38:5d:49:1a:fb:1f:84:39:93:2e:
e6:2b:88:38:dd:98:b7:81:0c:48:f9:c2:b0:53:37:
eb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:37:6C:06:1A:02:96:DD:1B:2A:5B:55:94:C9:F7:78:69:5E:53:CF
X509v3 Authority Key Identifier:
keyid:49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:11:48:8f:f7:cf:f5:08:6d:71:16:70:d6:7c:50:9e:9e:38:
e0:aa:ef:c0:30:0e:d2:a6:c9:5b:1b:6e:fe:44:b0:d4:df:31:
4a:64:00:1e:ed:7c:41:ff:b7:79:b8:57:3a:c8:06:99:ea:8f:
b3:f8:1b:40:72:1e:3c:c7:6d:d7:87:ca:5b:67:9b:5c:2b:f8:
a9:0f:67:60:22:e3:1d:1e:a3:0d:78:c0:99:36:70:aa:59:a5:
dc:95:ba:1b:39:69:c3:a9:3d:85:2a:ee:cf:8d:1e:94:94:ff:
6f:6e:29:44:48:b2:c2:9f:d2:0b:8d:06:1d:34:01:9c:3e:67:
99:a3:ce:ae:24:e1:4f:e5:63:08:3b:75:3f:5e:bc:e1:32:16:
01:bc:d1:3b:ce:7e:61:c0:66:6f:b8:17:d0:11:23:24:59:85:
75:c7:a7:20:6d:c4:9e:93:70:af:9f:ae:f7:f8:e9:08:63:cf:
88:e9:cf:55:4f:6e:f8:0f:95:6f:89:5b:4d:85:0a:75:7e:64:
19:bc:75:6e:82:5b:44:d8:85:a2:98:b2:47:14:97:b8:1a:09:
e6:d3:f5:74:04:b4:d2:a5:de:d7:f1:40:75:5b:14:df:13:23:
02:b7:26:cf:12:70:32:9f:22:61:26:7c:e8:c5:fd:b9:8d:f4:
18:8a:b5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:27:11 2026 by rpki-client