Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
File: SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft (raw, json)
Hash identifier: yJzraw9++o7roiG435/hI4ndktaToft63qAKYcrh7GU=
Subject key identifier: F0:63:95:AD:5A:4F:48:A3:3F:3E:BB:1D:EF:28:0A:55:2F:D2:7C:41
Authority key identifier: 49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
Certificate issuer: /CN=490db999ca4ce287c5c92ab167a500902259bb05
Certificate serial: 01A12BB221FB1D98B48C9F49C17D5271C2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
Manifest number: 1A9D
Signing time: Sun 11 Oct 2026 16:00:56 +0000
Manifest this update: Sun 11 Oct 2026 16:00:56 +0000
Manifest next update: Mon 12 Oct 2026 16:00:56 +0000
Files and hashes: 1: SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl (hash: DC7ASWkhNMZuf+OMX+3GJyyiv/s5RFJTchJ0Xa7N+l4=)
2: hAZrKewTVxZT3GF5DqzKsU9bNKo.roa (hash: fsGaTWUHmLGtuoOa159GIKQVUnBG8uk4RWTcKenk10M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b2:21:fb:1d:98:b4:8c:9f:49:c1:7d:52:71:c2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490db999ca4ce287c5c92ab167a500902259bb05
Validity
Not Before: Oct 11 16:00:56 2026 GMT
Not After : Oct 12 16:00:56 2026 GMT
Subject: CN=f06395ad5a4f48a33f3ebb1def280a552fd27c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6f:4e:6c:ac:c3:83:86:f8:72:66:e9:83:5d:
dd:05:5a:37:9a:ee:f2:06:b5:97:1c:4e:83:54:c8:
83:4d:79:1e:cf:0c:19:3d:d1:f9:b9:4a:b1:57:21:
a0:5c:33:fb:bc:e9:0c:63:2d:88:c4:15:27:99:e0:
f8:eb:2e:70:8c:8d:0f:e2:7c:f2:90:df:0b:03:38:
ab:01:64:32:80:30:3b:00:a1:af:7d:73:35:6b:67:
d4:f8:d2:a4:ed:15:06:56:8d:b3:0b:eb:07:57:b1:
cc:eb:e6:b9:84:3f:74:27:28:6b:f3:53:5b:e0:e3:
78:35:62:a6:04:9f:bd:72:d5:49:1b:94:15:1f:bf:
ed:48:a9:40:40:33:43:fa:99:2e:40:e0:3f:3b:cc:
c4:1a:74:43:8f:91:7f:7f:25:e2:d6:2a:e9:2c:b3:
cc:b2:4e:c1:b2:09:3f:b7:de:1b:59:63:c6:33:24:
40:15:4d:ce:79:ce:85:4e:13:79:9e:80:c9:10:ec:
32:b6:f4:12:a8:9f:eb:32:42:e0:f0:70:bf:c5:7e:
bb:84:82:66:28:9e:6c:fc:f4:a1:27:90:ae:a3:f2:
11:a8:6b:a1:8f:21:72:43:6a:f8:55:ae:8b:b0:f4:
f7:33:22:bf:8a:06:ad:23:d7:ab:66:d7:a1:8d:eb:
a2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:63:95:AD:5A:4F:48:A3:3F:3E:BB:1D:EF:28:0A:55:2F:D2:7C:41
X509v3 Authority Key Identifier:
keyid:49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a0:1a:a3:ba:06:f6:85:ea:27:bc:bf:51:05:ed:e3:49:95:
7e:6e:7b:3d:7f:d9:42:9d:12:b2:9d:4d:c1:d7:69:27:b6:51:
5a:f1:e1:11:4f:30:f5:ae:7d:31:79:9a:d8:10:24:68:fa:f4:
13:f8:84:c7:a8:a4:56:f3:75:fe:99:77:45:f7:44:95:c1:84:
b5:08:dd:43:57:d3:95:bf:c9:f3:43:5a:bd:9d:0b:e8:25:26:
55:41:d0:07:fe:af:2c:02:cb:07:28:1c:e2:4b:d1:ca:eb:e3:
71:73:c2:58:ff:2b:9d:fd:c0:8b:41:b3:7f:e2:a1:e3:db:2c:
97:cd:b9:25:32:df:fe:4d:b3:b9:81:6b:1f:0a:7d:08:d9:04:
e0:83:33:9c:d6:2c:69:b7:4d:5c:38:1b:d3:bc:69:a5:c4:1a:
eb:83:ef:73:fe:a5:aa:b8:ad:7b:d6:cd:5e:cb:2f:2b:d1:9b:
a9:5f:ac:41:85:f4:8f:02:6d:26:62:51:5c:ae:37:f6:70:19:
b6:1d:42:a1:a6:1a:8c:31:40:55:8e:cf:fa:0b:69:ac:7b:65:
13:3a:7c:a9:b0:23:34:c3:13:17:73:3c:85:d9:d0:0a:a7:c3:
3f:44:e7:d7:d5:34:96:de:af:a6:d3:f5:44:29:56:02:d0:04:
e2:40:d8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:03:56 2026 by rpki-client