Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
File: Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft (raw, json)
Hash identifier: opPwUCzr2AHSz9Qn4NEC0e7gFePj4AxOb3KWItlx4Bs=
Subject key identifier: A3:73:69:71:4E:05:2A:D7:64:04:0C:1F:61:D6:80:B3:D3:31:4D:38
Authority key identifier: 4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43
Certificate issuer: /CN=4aae738ee1782735939a4fb0d672a6317b7f5243
Certificate serial: 019D2A3B49DE5F1F60ED6B97F8E42CB4177B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 13:00:21 +0000
Manifest this update: Thu 26 Mar 2026 13:00:21 +0000
Manifest next update: Fri 27 Mar 2026 13:00:21 +0000
Files and hashes: 1: 36P60n_A-MwjiwD6uyhgY22phxA.roa (hash: eUcegOgWx2e5tZypy6pwKd7HaKvPBA1CoHaxPDGLqFw=)
2: Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl (hash: eZMCVHMpGmbyNvDXQArljwG86cmBuwVi/XeB3hy7Gpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:49:de:5f:1f:60:ed:6b:97:f8:e4:2c:b4:17:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aae738ee1782735939a4fb0d672a6317b7f5243
Validity
Not Before: Mar 26 13:00:21 2026 GMT
Not After : Mar 27 13:00:21 2026 GMT
Subject: CN=a37369714e052ad764040c1f61d680b3d3314d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:f0:4d:b1:75:86:e0:84:0f:2c:c7:79:71:
e8:8a:13:20:48:55:a7:52:f5:c1:90:45:5c:d1:55:
e5:ba:0e:a1:57:13:d0:34:c7:fc:cb:31:87:e5:08:
fa:f0:2e:70:76:28:cc:5f:4f:11:98:23:ae:8e:a2:
b3:0a:7b:32:88:b6:45:7f:f0:7b:e2:25:22:f6:8d:
94:45:6f:c4:a4:3a:e7:70:ac:d3:a0:a0:2a:1c:12:
de:15:e3:7d:25:25:29:81:3e:fb:27:3b:8f:00:4a:
f0:1c:a2:d3:d7:5b:fa:ec:22:0b:de:7a:50:ef:1e:
fd:0d:4b:5e:a1:5d:e5:ce:c2:26:39:bb:67:d9:06:
5a:70:84:37:36:6f:cb:f2:1a:e0:bf:7b:83:f3:a9:
bd:2b:75:5c:9c:5b:2a:68:ab:12:2e:9b:03:1c:2c:
ea:16:72:b2:18:3a:98:55:16:d3:7a:60:a8:70:84:
51:79:ab:00:e6:19:2d:a3:57:e3:28:20:22:fd:28:
38:25:bd:85:06:43:83:f6:f7:77:73:b7:24:b4:7b:
d1:7e:9e:5b:b8:df:05:35:fa:80:51:e1:45:4c:38:
3f:59:6a:c5:97:d1:5b:7b:87:eb:6b:33:a7:54:e0:
79:09:7c:28:5e:b4:08:1c:7d:fc:33:11:6e:3e:97:
41:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:73:69:71:4E:05:2A:D7:64:04:0C:1F:61:D6:80:B3:D3:31:4D:38
X509v3 Authority Key Identifier:
keyid:4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1f:54:ef:f6:61:76:a6:f0:97:f6:b9:60:e1:b9:43:45:02:
95:77:ba:ff:50:ea:8d:b3:05:c2:bd:ea:66:73:42:87:40:da:
0c:76:3e:92:22:75:19:a5:7c:26:13:77:3b:1b:cd:9f:3f:bd:
30:46:5d:86:dc:f2:65:e8:90:6b:0a:d6:b4:97:17:e4:16:45:
ae:24:44:14:60:eb:50:73:49:5c:37:da:bf:41:c4:71:39:03:
e1:4d:c6:84:63:d4:9d:11:1f:eb:04:db:ba:7c:ee:97:40:5c:
c9:67:41:57:ae:20:ef:0c:05:4b:00:8d:43:e6:aa:58:bc:5b:
d2:94:88:4c:1f:f6:71:ff:2a:e0:8c:d1:fb:be:16:62:59:48:
c1:a1:25:3a:92:0c:b9:8e:75:51:6f:9c:f9:ce:ea:fd:1d:cb:
e4:e8:44:96:6a:17:0f:65:c5:29:1a:45:40:e6:07:65:78:9c:
73:e6:13:a7:4a:49:e1:75:02:df:e4:b2:df:a6:12:aa:81:9e:
38:a3:85:e7:94:b7:9b:bc:fd:79:36:f6:d1:fa:88:95:34:55:
74:85:15:9b:a6:cc:b4:fb:0e:df:de:4e:86:26:d7:af:e0:e4:
d1:30:d0:9a:7e:b2:9c:16:56:dc:c0:76:18:05:68:f3:1a:9c:
6d:bf:b7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:42:05 2026 by rpki-client