Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
File: sQw889xTylScA-T19G2RzpC44HA.mft (raw, json)
Hash identifier: WQApKLmqCdsCQRjS5rXkoR4FmVgESUQGXVK3NX5CAu0=
Subject key identifier: 55:F1:DF:0E:C9:0D:AE:E4:07:1C:E8:C7:1F:1D:BF:4A:BB:E8:ED:82
Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Certificate serial: 019D992B7369253AC401CAC198D7CE5F6254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
Manifest number: 18D7
Signing time: Fri 17 Apr 2026 02:00:54 +0000
Manifest this update: Fri 17 Apr 2026 02:00:54 +0000
Manifest next update: Sat 18 Apr 2026 02:00:54 +0000
Files and hashes: 1: o40VleOLDva4l-Hlse3BxkX262M.roa (hash: vt1iL3MNmGtBJoVTbi5X0cqEnKhYSdktMc3RDciLR8w=)
2: sQw889xTylScA-T19G2RzpC44HA.crl (hash: nUJfaQIsp+epZqILRKrYGSxTQcPsMWfGNh/KJLY8zdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:73:69:25:3a:c4:01:ca:c1:98:d7:ce:5f:62:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Validity
Not Before: Apr 17 02:00:54 2026 GMT
Not After : Apr 18 02:00:54 2026 GMT
Subject: CN=55f1df0ec90daee4071ce8c71f1dbf4abbe8ed82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:6c:3b:21:a6:77:8c:43:f8:25:53:88:82:
f3:04:b2:04:d2:5d:42:c0:44:27:24:e3:b8:21:c4:
a1:81:7b:8c:47:65:a9:36:74:19:54:17:19:c5:23:
d8:07:9e:30:53:48:4a:ef:fb:01:61:c2:69:a7:5e:
c4:7c:16:c8:04:87:e6:69:91:3d:1b:ac:f5:57:87:
44:3d:01:47:c8:36:ea:44:89:da:bd:73:2f:60:dd:
35:c0:2a:44:98:d3:9d:e8:e8:22:29:9f:90:5d:3a:
3c:80:42:03:b2:7a:f1:63:e5:f0:cf:96:eb:61:1c:
52:75:60:70:e6:e7:a8:6a:95:da:5a:8d:eb:f0:3c:
94:7e:f7:1f:21:cc:28:8f:0c:2b:32:43:a2:73:31:
b9:ba:0a:e5:ad:1f:b7:fa:cb:8c:87:b8:f8:06:d6:
72:6b:ba:fd:be:67:ba:73:41:ad:5d:9b:d1:e1:c8:
79:51:7b:8d:2c:8b:5c:a5:0e:bf:a9:f2:a4:65:11:
c3:c9:71:76:5d:1a:5c:6a:42:6b:03:b9:a4:37:3a:
c7:1d:38:cc:9f:b8:9b:f9:fb:66:b2:f5:de:b2:aa:
6e:7f:8f:50:9b:e6:c1:74:3d:a3:bd:5a:04:a4:89:
37:c0:e1:84:56:2d:81:96:e6:b0:c0:41:06:9a:74:
3a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F1:DF:0E:C9:0D:AE:E4:07:1C:E8:C7:1F:1D:BF:4A:BB:E8:ED:82
X509v3 Authority Key Identifier:
keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:cf:bb:95:87:ff:d7:e8:31:09:1b:5c:dc:d8:6d:34:e6:d1:
58:b6:c3:13:88:31:c0:63:fe:11:2f:3e:48:b2:23:34:8d:af:
fa:88:4c:21:82:69:de:16:a1:71:13:82:62:dd:04:77:f8:51:
1a:38:2d:9b:b4:d7:74:e4:29:f2:d6:66:2c:97:a3:42:75:62:
7a:b1:5e:d2:1e:33:1c:3f:0c:35:20:3f:93:53:1a:c0:5e:9b:
c4:24:a3:2f:2e:f7:e8:7e:82:3a:6f:bc:ad:68:37:7b:96:68:
3a:7b:4a:c8:ac:aa:10:ea:32:66:4a:c0:ff:a2:08:3b:17:48:
ca:a9:aa:12:90:27:c1:c8:39:41:25:a7:fa:ba:24:3f:01:4e:
69:0b:5d:ae:63:b6:4b:8a:ce:49:23:16:e6:46:b5:60:fa:67:
3d:16:23:45:93:2c:6f:6e:63:53:2b:38:3f:dd:ac:d9:4e:33:
c6:16:b7:97:48:e2:65:69:02:38:21:e3:4c:14:82:d0:6b:ea:
2e:b3:35:58:29:81:66:2e:cf:20:d4:41:d3:10:07:1c:70:34:
96:21:7f:83:02:b8:9d:de:52:ad:37:fa:13:f6:37:1f:26:41:
7d:17:1a:fd:59:97:39:6c:28:29:51:84:8f:12:e3:b7:87:7b:
b3:58:5a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:24 2026 by rpki-client