Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
File: Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft (raw, json)
Hash identifier: QW3hggUCJU/VCLkn4Ly5x5skVF/dEYmRqnzK3/4e4JA=
Subject key identifier: A2:9F:6B:3D:A1:69:3C:B1:91:70:77:DD:C0:C5:C2:2F:B1:3E:1A:5F
Authority key identifier: 4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43
Certificate issuer: /CN=4aae738ee1782735939a4fb0d672a6317b7f5243
Certificate serial: 01A12BB24C2EE2961FFE23E3A3A3D3CE0FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
Manifest number: 1A9E
Signing time: Sun 11 Oct 2026 16:01:07 +0000
Manifest this update: Sun 11 Oct 2026 16:01:07 +0000
Manifest next update: Mon 12 Oct 2026 16:01:07 +0000
Files and hashes: 1: 36P60n_A-MwjiwD6uyhgY22phxA.roa (hash: eUcegOgWx2e5tZypy6pwKd7HaKvPBA1CoHaxPDGLqFw=)
2: Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl (hash: DfzZHTSYZfXf34/vBPk+laVjx9d280VXiLxAIfLiQb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b2:4c:2e:e2:96:1f:fe:23:e3:a3:a3:d3:ce:0f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aae738ee1782735939a4fb0d672a6317b7f5243
Validity
Not Before: Oct 11 16:01:07 2026 GMT
Not After : Oct 12 16:01:07 2026 GMT
Subject: CN=a29f6b3da1693cb1917077ddc0c5c22fb13e1a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:76:34:a7:4d:36:73:14:e8:67:08:27:38:
1e:ea:ec:fe:d0:74:30:af:97:84:e0:55:5c:08:29:
c8:9b:77:1b:f3:97:f4:28:2d:49:5e:ee:ae:6e:c4:
e5:3d:87:d9:01:83:52:09:82:e5:9d:58:d1:4f:15:
7a:69:3e:dc:4e:b8:39:a2:52:8d:0f:8b:e1:ea:41:
1f:a2:7a:4e:81:df:f4:47:8d:56:4a:a3:c1:ef:f2:
45:d4:27:d7:5b:e1:27:20:a9:31:af:94:1d:7a:26:
aa:de:36:9c:fe:a3:1a:95:e2:66:83:ed:86:1e:8e:
73:8d:bb:ce:99:b9:1b:19:6d:6f:d6:63:6a:3a:5f:
54:d1:b5:f4:ad:df:c0:c2:de:fb:d2:11:d5:a0:de:
8b:74:a8:50:4e:ec:71:ca:a6:67:92:5f:73:2a:2c:
33:ae:ee:bb:2f:a7:39:be:c0:e3:e5:db:d2:9a:8c:
9c:64:fa:1e:3c:55:41:06:f7:2f:8d:75:29:b7:50:
e3:34:c9:39:5d:e6:3e:19:dc:66:a7:ec:17:ca:f8:
7a:69:76:b3:61:88:f9:f7:24:30:4e:67:96:44:98:
3f:4f:e1:a2:ac:70:ce:f0:07:81:5a:55:d1:3e:19:
da:83:9e:0d:cc:fa:bd:26:99:ac:85:c4:0b:dd:14:
e7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9F:6B:3D:A1:69:3C:B1:91:70:77:DD:C0:C5:C2:2F:B1:3E:1A:5F
X509v3 Authority Key Identifier:
keyid:4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:db:53:65:03:e4:19:1a:b0:c2:1f:8c:7e:43:4f:9a:10:c7:
fb:67:88:28:d6:e6:fa:71:ad:d8:e3:5c:e6:55:00:6e:76:59:
02:88:b9:c8:0e:b5:3c:61:d6:d3:8e:3a:5f:c6:d5:ed:44:ad:
e7:0f:f2:1f:ae:49:be:38:a1:77:2b:34:c2:bf:c4:9f:43:e3:
d5:ab:c5:64:19:8f:ac:98:c9:4f:dd:17:9b:3f:35:14:88:5f:
ed:af:9b:fb:ae:4c:e0:de:d0:18:3d:7e:f8:b0:86:49:40:37:
75:e4:4a:cf:cf:57:d8:e4:77:7a:8b:bb:40:a3:91:46:79:9f:
ef:00:e7:e1:2d:bf:24:1d:ef:42:d0:67:2f:8b:0a:f6:3c:9e:
50:84:74:42:2e:b8:4f:22:9a:95:74:79:12:24:2e:e5:43:48:
a3:8f:c9:b3:38:11:9e:93:7d:5b:06:b5:d1:98:6e:05:97:4c:
a7:0b:b2:d3:92:58:6a:08:58:08:32:48:2d:ec:82:65:c8:d2:
e9:94:52:f4:59:88:4f:c1:49:3f:4c:b7:92:1e:e1:d8:51:f2:
dc:31:e9:2f:8c:7c:50:ba:18:bc:ec:7e:1f:bc:99:6f:86:f7:
50:cf:83:38:8b:d4:6b:6d:66:12:4b:63:a3:d3:ce:e4:47:57:
19:4a:2a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:11:05 2026 by rpki-client