
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
File: sqT-PDcZVbkhLK3mScvxfF_FjuI.mft (raw, json)
Hash identifier: Y8gtu9ktv1VYw3LB1dCyhap9VLZoOYE74obGdWXnDqs=
Subject key identifier: CD:43:06:07:7D:51:9F:D5:87:3F:50:0E:22:77:13:9C:32:AD:DE:F2
Authority key identifier: B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
Certificate issuer: /CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Certificate serial: 01A0D4CB901351034483D394A2169B95CD10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
Manifest number: 0621
Signing time: Thu 24 Sep 2026 19:01:45 +0000
Manifest this update: Thu 24 Sep 2026 19:01:45 +0000
Manifest next update: Fri 25 Sep 2026 19:01:45 +0000
Files and hashes: 1: sqT-PDcZVbkhLK3mScvxfF_FjuI.crl (hash: gLmL/dY2t9EP/8YwGR+DnLKYf7xN3u+PkAeILvpSfDA=)
2: wS-jaaEMUTGS5DqxQuN95qXPBc8.roa (hash: 06h366lvWqKC+ftnxISHm/f+AJodcmHOYMbCi4Dh0pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:90:13:51:03:44:83:d3:94:a2:16:9b:95:cd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Validity
Not Before: Sep 24 19:01:45 2026 GMT
Not After : Sep 25 19:01:45 2026 GMT
Subject: CN=cd4306077d519fd5873f500e2277139c32addef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:37:2a:14:89:06:39:bd:0f:10:7c:fd:ad:f7:
d9:ed:07:b2:43:96:3c:1c:42:f9:8e:c2:2e:f7:e0:
77:4b:07:4e:52:5c:9b:b0:5b:8f:8a:82:75:5f:51:
7b:e5:9a:b2:0d:4f:fd:63:f5:ca:46:ac:1b:28:5b:
e8:46:d2:37:85:3b:7e:b3:4e:e5:54:d8:f1:4f:9e:
0c:c8:56:40:5d:0d:25:e8:ff:b7:a3:df:5a:fa:d1:
07:74:32:be:30:6e:1d:c6:51:c1:a6:4b:7f:05:e2:
f0:ce:20:dd:ca:ac:f4:0d:d7:2b:0c:b1:11:96:fe:
1c:b1:ad:08:0c:a9:88:cf:be:72:f5:10:1e:d6:2c:
29:9f:c7:3a:3d:34:93:7b:b3:67:a6:ad:22:80:9c:
03:47:ee:71:56:83:77:9c:e1:f9:24:5d:3f:93:f7:
fd:07:18:0b:5a:34:5d:cb:2f:fb:7f:b4:31:28:56:
e7:1f:cf:7a:d9:dd:f8:70:c6:8d:08:0b:c0:88:14:
f2:20:41:6d:80:14:48:46:0d:e3:f6:78:bc:5e:e6:
53:12:cf:6f:b1:b2:ad:67:05:28:80:f1:2f:05:8c:
eb:c3:75:ec:b1:31:ef:54:b2:f0:7b:c6:d4:2e:ff:
a7:8d:70:39:a1:fe:a0:ae:78:77:33:26:40:bf:52:
de:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:43:06:07:7D:51:9F:D5:87:3F:50:0E:22:77:13:9C:32:AD:DE:F2
X509v3 Authority Key Identifier:
keyid:B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1c:ff:dd:0f:43:74:c5:63:6b:fc:1a:0c:f5:59:19:95:68:
66:b0:18:26:e9:4e:88:3e:28:c3:81:ec:5c:d1:65:1d:99:f8:
74:78:27:e5:6d:a2:b8:eb:d6:f0:28:89:af:49:81:ed:89:fa:
89:80:54:c6:9f:5c:cf:1e:00:a6:d7:ec:64:6c:07:90:39:a7:
c0:cc:0c:6e:4b:da:c5:d3:4f:d0:0d:75:b2:b4:0e:27:9b:72:
bd:f9:a8:6b:0d:aa:3a:36:25:b6:9f:32:03:a7:76:8f:38:7a:
76:95:bb:34:96:25:00:18:7a:bb:4e:d9:31:80:9a:85:59:93:
aa:bd:2a:dd:42:54:fd:ca:50:08:11:56:94:79:48:5c:24:39:
ac:a4:2f:fc:13:1e:99:58:83:09:75:04:0a:f5:ea:e5:7c:98:
81:88:ff:7c:22:e6:4c:f0:ae:9e:61:76:dd:a5:1f:d1:99:47:
85:e1:f6:37:18:71:55:a9:ff:b1:af:37:a4:df:c6:5b:1a:64:
7f:cf:5e:d2:6f:94:f9:6e:08:c2:3e:25:0a:23:73:90:3d:58:
e4:44:45:7c:86:cb:74:0e:73:16:82:98:ba:ed:1e:99:d9:76:
f0:81:ee:8a:18:f7:8a:fa:ee:38:ba:bb:28:9e:61:0a:b8:36:
77:15:17:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:45:30 2026 by rpki-client