Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
File: SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft (raw, json)
Hash identifier: QpprHVIU3zkc8JeKahx1/Y0262RxKCE3emCQV88WnV0=
Subject key identifier: A9:01:F0:8B:F7:38:B0:65:05:B5:4B:36:EF:C5:F3:9B:0F:56:A4:23
Authority key identifier: 4A:A2:FA:6F:67:70:F7:2D:80:84:BC:6C:18:30:58:B8:0E:83:8D:73
Certificate issuer: /CN=4aa2fa6f6770f72d8084bc6c183058b80e838d73
Certificate serial: 019D262814353BC7A014D6714481B7E94F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
Manifest number: 0464
Signing time: Wed 25 Mar 2026 18:00:53 +0000
Manifest this update: Wed 25 Mar 2026 18:00:53 +0000
Manifest next update: Thu 26 Mar 2026 18:00:53 +0000
Files and hashes: 1: SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl (hash: D9pK39dFc+jD7VDV/ZazqNut1ugMiPQuskhKmRw/HpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:14:35:3b:c7:a0:14:d6:71:44:81:b7:e9:4f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa2fa6f6770f72d8084bc6c183058b80e838d73
Validity
Not Before: Mar 25 18:00:53 2026 GMT
Not After : Mar 26 18:00:53 2026 GMT
Subject: CN=a901f08bf738b06505b54b36efc5f39b0f56a423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b0:f2:c0:4d:ae:c0:bf:c0:b4:d2:ef:85:bf:
17:28:93:c1:7d:fb:81:fc:e7:d1:b9:be:70:60:eb:
ad:89:fc:10:49:0e:09:55:75:6c:fa:54:54:d4:7c:
ef:5a:60:ff:45:83:28:97:b9:88:17:49:4e:45:44:
f7:41:3e:a4:25:39:14:b1:e1:3a:00:25:d1:8d:d2:
9f:98:2d:fa:c1:93:1b:17:c3:9d:85:62:34:5c:ba:
6c:bd:5c:f9:5c:fd:90:6c:34:e6:b6:48:7e:22:80:
7d:c0:97:ae:74:c9:e1:45:4d:99:7f:ff:bb:d4:8b:
2f:1d:48:5b:b3:45:40:1d:46:a5:d2:10:56:68:ba:
f4:06:b0:69:94:d5:f8:45:fe:63:a9:4f:70:8e:60:
70:44:78:4e:ec:4a:59:2f:bc:24:2e:00:dd:38:94:
56:a5:74:ad:d2:e1:6d:8d:d6:05:e9:bb:4c:d9:91:
1f:ad:bb:c9:a5:ff:34:b3:e9:d9:40:e4:66:e6:33:
82:05:f4:6d:d0:be:6f:b9:47:03:27:33:81:d4:53:
7b:8f:38:59:13:24:94:d0:5a:8b:d2:ad:97:55:a7:
b7:f9:7f:ca:5c:67:9b:64:70:61:f9:90:6e:8d:c4:
2d:7c:b0:4a:89:c5:14:07:d8:98:d6:ad:69:06:a1:
a1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:01:F0:8B:F7:38:B0:65:05:B5:4B:36:EF:C5:F3:9B:0F:56:A4:23
X509v3 Authority Key Identifier:
keyid:4A:A2:FA:6F:67:70:F7:2D:80:84:BC:6C:18:30:58:B8:0E:83:8D:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5b:f3:a4:6b:6d:58:cc:0a:06:3b:d7:5c:0c:9d:ea:c0:d5:
ee:0c:33:1e:fc:b2:ff:05:d5:98:bd:11:c2:45:37:22:bd:ea:
e7:7a:f7:d4:32:52:49:48:a4:f6:d5:0a:21:5a:91:1e:f2:d3:
29:ff:02:78:b8:41:82:5c:28:cc:31:83:27:8b:e4:89:3a:ef:
c3:3c:c6:8c:50:8b:06:3e:da:d3:8a:9d:d1:c0:69:70:9e:d5:
bd:48:96:fc:d9:1d:5b:5b:98:ab:d2:4c:68:db:75:33:04:6d:
f5:5d:17:5a:70:d7:06:a2:32:ad:8f:4c:f3:37:18:96:90:e1:
6c:bf:fa:95:a5:97:a2:00:51:83:f6:91:b6:73:28:c2:cb:21:
2a:bc:ec:6d:85:70:b8:e7:45:6d:b6:79:22:50:23:ab:b9:2b:
c6:cf:29:3e:d1:71:53:44:68:03:0f:0c:c1:db:db:09:4c:69:
20:53:80:7c:07:92:e0:a1:99:96:0c:99:91:f5:6d:f3:b2:49:
84:e8:4b:bd:7f:5a:d3:7c:0a:8b:9f:07:cd:df:52:d8:d6:58:
d0:d3:ab:42:4d:57:ae:aa:67:d6:d8:c1:12:8f:a3:0c:5c:ab:
92:46:09:8b:ce:c3:1c:e2:f7:2f:6e:8d:5f:21:94:ce:34:57:
71:4d:16:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKBQ1O8egFNZxRIG36U9pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYTJmYTZmNjc3MGY3MmQ4MDg0YmM2YzE4MzA1OGI4MGU4
MzhkNzMwHhcNMjYwMzI1MTgwMDUzWhcNMjYwMzI2MTgwMDUzWjAzMTEwLwYDVQQD
EyhhOTAxZjA4YmY3MzhiMDY1MDViNTRiMzZlZmM1ZjM5YjBmNTZhNDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47DywE2uwL/AtNLvhb8XKJPBffuB
/OfRub5wYOutifwQSQ4JVXVs+lRU1HzvWmD/RYMol7mIF0lORUT3QT6kJTkUseE6
ACXRjdKfmC36wZMbF8OdhWI0XLpsvVz5XP2QbDTmtkh+IoB9wJeudMnhRU2Zf/+7
1IsvHUhbs0VAHUal0hBWaLr0BrBplNX4Rf5jqU9wjmBwRHhO7EpZL7wkLgDdOJRW
pXSt0uFtjdYF6btM2ZEfrbvJpf80s+nZQORm5jOCBfRt0L5vuUcDJzOB1FN7jzhZ
EySU0FqL0q2XVae3+X/KXGebZHBh+ZBujcQtfLBKicUUB9iY1q1pBqGhFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKkB8Iv3OLBlBbVLNu/F85sPVqQjMB8GA1UdIwQY
MBaAFEqi+m9ncPctgIS8bBgwWLgOg41zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3FMNmIyZHc5eTJBaEx4c0dEQll1QTZEalhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yOTdiZDgtYmVhZi00NjA5LTljNjAt
NzQ3NGY5MTZkYjQ3LzEvU3FMNmIyZHc5eTJBaEx4c0dEQll1QTZEalhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yOTdiZDgtYmVhZi00NjA5LTljNjAtNzQ3NGY5MTZkYjQ3
LzEvU3FMNmIyZHc5eTJBaEx4c0dEQll1QTZEalhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVvzpGtt
WMwKBjvXXAyd6sDV7gwzHvyy/wXVmL0RwkU3Ir3q53r31DJSSUik9tUKIVqRHvLT
Kf8CeLhBglwozDGDJ4vkiTrvwzzGjFCLBj7a04qd0cBpcJ7VvUiW/NkdW1uYq9JM
aNt1MwRt9V0XWnDXBqIyrY9M8zcYlpDhbL/6laWXogBRg/aRtnMowsshKrzsbYVw
uOdFbbZ5IlAjq7krxs8pPtFxU0RoAw8MwdvbCUxpIFOAfAeS4KGZlgyZkfVt87JJ
hOhLvX9a03wKi58Hzd9S2NZY0NOrQk1Xrqpn1tjBEo+jDFyrkkYJi87DHOL3L26N
XyGUzjRXcU0WkQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:10 2026 by rpki-client