Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
File: SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft (raw, json)
Hash identifier: xoFuS3A7gQ9V1wnSsKLIQ3ybPs50Y2i8cXD8bVcZNE8=
Subject key identifier: 24:C6:E6:96:57:B9:F0:DB:B9:6B:FA:4E:64:A4:EA:F5:63:02:18:53
Authority key identifier: 49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
Certificate issuer: /CN=490db999ca4ce287c5c92ab167a500902259bb05
Certificate serial: 019D284E0C14C989A5848719DCE88715370E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 04:01:36 +0000
Manifest this update: Thu 26 Mar 2026 04:01:36 +0000
Manifest next update: Fri 27 Mar 2026 04:01:36 +0000
Files and hashes: 1: SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl (hash: INf5mOF2levDPkhrNIYRcIQYLfCDbk+BYmqdHgkBsS0=)
2: hAZrKewTVxZT3GF5DqzKsU9bNKo.roa (hash: fsGaTWUHmLGtuoOa159GIKQVUnBG8uk4RWTcKenk10M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:0c:14:c9:89:a5:84:87:19:dc:e8:87:15:37:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490db999ca4ce287c5c92ab167a500902259bb05
Validity
Not Before: Mar 26 04:01:36 2026 GMT
Not After : Mar 27 04:01:36 2026 GMT
Subject: CN=24c6e69657b9f0dbb96bfa4e64a4eaf563021853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:fe:a6:0b:6c:91:c1:5c:1f:7f:bc:97:d6:
73:61:07:4a:c7:9f:a7:b2:f3:b3:e1:ac:66:4b:3f:
da:e8:b4:d9:92:c0:ea:62:58:21:f6:0f:96:5b:49:
d7:07:8c:3f:62:4c:96:37:6a:f2:23:91:7d:8d:df:
2d:b0:d2:61:ad:6b:1a:52:07:0f:6e:1d:3c:76:c4:
1e:8b:12:79:b3:a7:65:63:f4:56:d2:13:04:cb:21:
65:60:76:87:76:c5:13:2d:5a:f8:47:01:a5:d9:4a:
40:63:79:ee:ad:85:8c:22:26:2c:80:4c:4c:0b:2f:
91:b6:56:d5:6e:74:49:a6:ac:b4:0b:3b:cb:60:2f:
bb:00:ec:18:58:c7:b2:bf:e2:fd:fa:e1:7e:44:df:
f9:80:bc:58:bb:1a:1f:40:e9:25:3b:2a:8b:13:7f:
9c:b1:9d:b3:74:d6:c2:0f:b0:46:0e:ad:5c:87:ef:
87:55:4e:3b:01:d7:a0:df:b7:67:86:59:f0:df:01:
7a:7b:f3:00:c6:48:11:4d:09:df:09:68:12:4c:61:
49:11:7f:81:80:bc:b2:ce:9f:ad:09:0e:e4:e8:72:
48:e5:bb:7e:13:41:fd:8e:7a:21:6b:ea:7b:02:7d:
0a:7e:14:ac:90:d1:ef:8a:fd:66:f3:cd:fc:0c:b6:
5f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C6:E6:96:57:B9:F0:DB:B9:6B:FA:4E:64:A4:EA:F5:63:02:18:53
X509v3 Authority Key Identifier:
keyid:49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:95:cf:be:d0:00:bd:ed:2a:a6:a7:f2:f4:50:0b:2f:ef:2a:
6d:c4:85:8d:72:88:77:2f:ce:5e:19:4d:5c:f6:8b:23:a8:b6:
e8:19:b5:29:03:1e:22:95:bd:03:ad:8d:c6:9f:9d:b1:80:ff:
49:58:f4:66:64:1d:64:81:57:05:cd:f9:f5:16:34:78:8d:fb:
72:77:39:da:4c:e7:b1:36:46:2d:26:82:dd:81:63:81:bd:a3:
a5:17:86:4e:9b:59:89:5d:b9:d9:1d:ef:ba:c8:f3:09:8e:3b:
b9:bf:d2:9d:e7:ef:b2:71:55:05:7b:98:5e:fd:75:03:09:d6:
b0:e5:7e:95:de:f5:90:1b:2a:1e:6d:02:4e:6e:fd:a8:16:0e:
3f:73:f5:ad:bd:b8:3a:f6:5f:fc:f2:72:97:00:dd:e5:81:73:
71:fd:fd:ad:bc:76:a6:07:4e:90:06:74:30:a4:b8:0c:e1:34:
a4:f5:20:76:bf:75:3e:ad:db:61:d1:23:82:e1:7c:77:5a:04:
7b:c9:a3:18:77:2a:97:cf:4c:7c:dd:94:db:7a:51:9c:19:12:
8f:e9:f0:44:0e:6e:4c:b2:fb:63:cd:17:6a:57:a1:13:ed:78:
b9:34:75:74:93:f9:ef:1b:5a:73:29:34:5b:fc:4f:7d:c9:0a:
65:13:af:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:08:45 2026 by rpki-client