Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
File: sQBtYOzMF8WGM3oONk176YAd6fE.mft (raw, json)
Hash identifier: RiPE0v0EXMKjJXQuQaGlhTi3VFlI7MAtHsZxoBL2f9g=
Subject key identifier: 93:1E:41:B9:52:15:8F:84:60:ED:70:B7:11:95:30:91:D5:CE:FB:DF
Authority key identifier: B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1
Certificate issuer: /CN=b1006d60eccc17c586337a0e364d7be9801de9f1
Certificate serial: 019D277286FE4F78589FFB97CBDC9F6DA4A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
Manifest number: 1814
Signing time: Thu 26 Mar 2026 00:01:50 +0000
Manifest this update: Thu 26 Mar 2026 00:01:50 +0000
Manifest next update: Fri 27 Mar 2026 00:01:50 +0000
Files and hashes: 1: sQBtYOzMF8WGM3oONk176YAd6fE.crl (hash: 9AuDGcufbLZJdVO2hyCIiKWNPn2bn9gbEPTz5cq8590=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:86:fe:4f:78:58:9f:fb:97:cb:dc:9f:6d:a4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1006d60eccc17c586337a0e364d7be9801de9f1
Validity
Not Before: Mar 26 00:01:50 2026 GMT
Not After : Mar 27 00:01:50 2026 GMT
Subject: CN=931e41b952158f8460ed70b711953091d5cefbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3a:88:8c:40:93:91:75:55:61:03:31:4c:2b:
62:98:57:41:78:22:2a:be:26:a5:6a:d7:91:ce:b6:
4e:95:e9:a9:33:90:40:95:13:d7:31:52:8b:9d:ca:
16:31:89:00:b9:51:e6:38:e9:d1:3c:5d:50:4a:4a:
97:4f:19:4e:7b:4b:90:38:70:86:25:cb:36:35:46:
89:e0:8d:92:f2:34:3a:51:7b:2e:80:16:59:a7:77:
a7:ef:9b:39:f9:59:b6:0e:74:56:95:ab:bd:e4:2f:
1c:6f:3e:d0:d0:3d:75:e4:63:4b:2a:a7:4f:f1:50:
74:6c:8c:b8:47:00:0f:e5:20:05:69:16:77:bc:b6:
d0:c4:bd:d8:3a:19:20:75:8f:3d:00:06:ef:16:6c:
45:45:b2:53:26:2e:5a:5d:5e:6c:e5:c0:27:04:8b:
91:4d:6d:43:5c:5f:e7:0b:ba:c0:5b:df:2a:b9:10:
69:91:35:4e:bd:b8:ac:d4:97:ab:a8:ab:aa:32:e1:
4a:a1:b6:7c:09:12:61:51:1d:aa:20:11:49:f5:f8:
dd:d6:c4:e2:c1:4e:f5:46:d9:5c:b7:77:4a:bd:c1:
55:63:9e:f7:44:8d:e2:45:e7:0d:84:e1:a1:a6:ce:
9c:63:41:37:47:34:a0:3b:94:e0:ad:7b:87:f2:12:
d5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1E:41:B9:52:15:8F:84:60:ED:70:B7:11:95:30:91:D5:CE:FB:DF
X509v3 Authority Key Identifier:
keyid:B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f0:a2:ac:c8:41:ef:c8:f1:63:47:b1:f6:10:40:e4:1c:d7:
b9:1a:0e:1c:b9:70:8d:07:53:80:69:5f:59:82:30:37:86:b5:
2d:71:03:cc:3e:1c:5d:5c:d9:66:21:a0:cb:d6:a3:59:9a:47:
ee:d3:33:47:35:40:c1:f7:95:c1:66:aa:5e:24:23:4a:5d:39:
24:b9:8f:fd:fc:c0:66:e4:46:49:92:ca:73:e2:95:37:1e:ea:
24:ed:77:01:0f:90:89:0d:e9:22:a6:a3:a3:52:23:28:a9:d6:
12:c6:79:bd:f8:af:31:71:4e:28:87:c9:7d:6e:a5:48:fd:68:
5b:a7:58:9f:9a:54:62:45:da:8b:fb:64:15:ca:b4:67:3d:6a:
d0:c8:9f:aa:f9:25:79:43:98:4f:7a:1b:07:f3:8f:e1:1a:67:
a2:9b:b4:e3:6b:10:56:aa:3a:d5:48:fc:8f:d6:f1:5a:30:73:
58:52:0d:d3:43:41:94:4b:0a:82:57:1a:d1:60:51:4f:77:97:
02:af:cb:70:50:05:48:46:f8:0c:87:c0:f9:ee:7e:d3:58:ad:
8c:a7:c8:7e:d2:24:85:a9:2f:c2:4d:5a:b4:ff:58:bf:ad:29:
35:1e:4a:a3:69:ef:51:54:9e:3f:65:4d:13:c0:d9:ad:c6:bd:
d7:87:ac:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:17:00 2026 by rpki-client