Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
File: SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft (raw, json)
Hash identifier: T91tWVu6Qoxb5DNCpuliZiCDeAPgc6YgHajMzhV4FOk=
Subject key identifier: 78:FB:43:02:D9:52:1E:EA:DF:FD:5B:0F:79:CD:28:D5:2C:A2:A2:8A
Authority key identifier: 49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
Certificate issuer: /CN=490db999ca4ce287c5c92ab167a500902259bb05
Certificate serial: 019F9436F1B9F7C4CBFF54E02D81EB04B280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 13:00:56 +0000
Manifest this update: Fri 24 Jul 2026 13:00:56 +0000
Manifest next update: Sat 25 Jul 2026 13:00:56 +0000
Files and hashes: 1: SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl (hash: Z/2TXGUXVmPYvR25jpd5QikPMtQFcWHuzg0zagBSO9Y=)
2: hAZrKewTVxZT3GF5DqzKsU9bNKo.roa (hash: fsGaTWUHmLGtuoOa159GIKQVUnBG8uk4RWTcKenk10M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:f1:b9:f7:c4:cb:ff:54:e0:2d:81:eb:04:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490db999ca4ce287c5c92ab167a500902259bb05
Validity
Not Before: Jul 24 13:00:56 2026 GMT
Not After : Jul 25 13:00:56 2026 GMT
Subject: CN=78fb4302d9521eeadffd5b0f79cd28d52ca2a28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:06:37:6a:d5:80:32:b6:ce:2e:6f:e1:e1:
98:ce:3e:57:42:4b:f2:2d:f4:b8:69:69:4b:c4:d8:
3f:73:2c:d8:44:ac:93:e0:3d:b9:2f:56:12:51:54:
d4:75:a8:6f:59:27:38:c0:90:c4:c1:2c:9f:b5:3a:
f2:56:41:77:8f:f5:75:72:95:02:49:19:f2:95:33:
1a:5b:13:69:d5:6a:53:7b:c9:6b:ae:a5:b8:e4:41:
3d:9a:4d:82:44:b6:e7:97:83:09:51:aa:45:d0:74:
0a:75:a9:30:a2:4b:ae:b3:a9:83:20:6f:4a:65:87:
68:91:38:6b:39:a3:5c:6d:22:09:fa:26:ec:e7:78:
d2:6d:e9:de:ef:04:64:1b:1b:07:da:2a:be:24:8e:
ba:fa:8c:18:06:07:77:5d:fe:c1:a0:fb:42:c0:75:
c9:d8:8a:51:40:25:81:ec:b1:c4:19:0d:7d:a4:22:
54:0c:5e:75:ff:a2:b1:e1:e4:f5:8e:4d:14:a3:7e:
4f:bd:57:2e:d2:14:37:2d:e0:d8:3f:cc:ba:8b:c8:
b9:dd:02:78:2f:fe:db:36:17:d5:9b:34:65:34:88:
ea:6d:52:2a:66:f6:77:6a:b1:5e:60:b9:bb:6e:7b:
b3:1b:d3:65:0f:e3:ce:ac:cf:50:88:d1:1d:4f:e9:
b5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FB:43:02:D9:52:1E:EA:DF:FD:5B:0F:79:CD:28:D5:2C:A2:A2:8A
X509v3 Authority Key Identifier:
keyid:49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:8a:72:b0:1a:05:d9:bb:1f:9a:9f:66:74:0e:1d:4f:b6:62:
26:5a:43:62:4d:71:c0:62:88:02:31:33:5b:14:e2:2c:f0:dc:
eb:25:1a:c9:68:40:bb:c1:c6:9f:7f:ed:03:d7:a4:8d:8f:c0:
02:a0:39:4a:ad:38:0f:79:a3:29:b4:e0:fd:44:1e:99:fe:d4:
1e:b8:0d:57:f4:85:1d:e7:ce:7f:f4:5d:5d:68:49:c9:33:5a:
13:9b:45:81:3e:29:e6:48:d1:a7:79:e8:15:80:0c:71:4c:0c:
a5:56:fe:48:24:c1:30:7d:6e:04:7c:42:90:2f:a1:7b:ca:d8:
5e:bc:2b:13:28:48:94:24:2d:91:61:7b:22:a7:8a:20:b9:eb:
0b:1c:b4:42:de:62:cf:e0:83:08:af:3b:fb:26:a4:fd:4b:17:
63:ec:c0:2f:da:9b:3b:04:26:c9:0d:b0:bc:d6:b3:dd:07:ce:
72:ed:a5:d2:e0:88:03:62:65:62:ec:17:31:b7:76:4b:13:81:
1c:04:80:1e:da:b9:e3:d4:b0:d7:3c:1d:19:94:17:09:66:99:
ee:89:f5:d0:31:43:0e:c9:28:7f:56:51:fe:6f:9c:23:3d:73:
4c:d9:72:50:9b:c1:38:3b:f0:4b:b4:73:1c:e5:d1:79:51:4b:
48:e2:d9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:42:19 2026 by rpki-client