Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
File: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft (raw, json)
Hash identifier: aK1wwIfj4+L/hBUgNLiPjltbhr6kTn1fI+z+iYsggZ4=
Subject key identifier: F1:D0:32:1F:F2:EB:4F:7F:F4:20:10:39:D0:88:E9:C2:C0:90:8A:7A
Authority key identifier: B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14
Certificate issuer: /CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
Certificate serial: 019D2AA9A8F5ABCFA02F6FA9A5BAAB01AB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
Manifest number: 12BB
Signing time: Thu 26 Mar 2026 15:00:54 +0000
Manifest this update: Thu 26 Mar 2026 15:00:54 +0000
Manifest next update: Fri 27 Mar 2026 15:00:54 +0000
Files and hashes: 1: gDMK6bL4SN2yFigRTp_-VpvBGkI.roa (hash: rI6Nu8YONQKTOxDhp9yJL+hYObuArCNmN7bddusmuuY=)
2: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl (hash: p1/ZomQx7L+ZZ0KUW99QKnAd4l3Ags81NHmAzjgjjaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:a8:f5:ab:cf:a0:2f:6f:a9:a5:ba:ab:01:ab:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
Validity
Not Before: Mar 26 15:00:54 2026 GMT
Not After : Mar 27 15:00:54 2026 GMT
Subject: CN=f1d0321ff2eb4f7ff4201039d088e9c2c0908a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f2:be:9b:d5:e7:0f:cf:b9:fa:dd:ff:67:79:
af:31:b4:df:1c:ea:4d:9e:9c:71:a1:45:a9:3e:1d:
0f:b8:9d:94:b8:28:04:57:0f:00:bf:7a:ce:03:ed:
fa:e7:c4:44:d6:6e:78:b3:d4:f4:45:db:4e:b9:2a:
ae:2d:06:da:3e:b6:78:e7:d5:d0:c3:3d:09:d3:51:
76:d3:bf:28:39:c6:f0:51:70:51:fc:51:f2:59:ee:
ff:88:01:8e:36:ac:20:39:5f:f3:db:74:25:e5:81:
36:62:49:da:9a:77:29:dd:02:2f:32:89:a4:29:98:
96:52:3d:e8:d0:3f:a3:1c:c6:ad:d4:e4:65:56:59:
95:83:e4:c4:48:2d:0e:6a:91:d2:c6:e8:41:0d:41:
13:32:9d:aa:b1:3f:d8:c4:b8:d7:89:65:c5:b9:9b:
dd:f2:13:61:73:c3:17:76:a0:83:0c:83:45:be:d4:
05:1c:6c:0c:66:77:35:cd:62:c1:68:39:49:35:68:
a0:d3:34:ee:32:37:60:88:c3:9e:5e:1d:69:fb:81:
45:48:99:20:55:ed:84:6c:8b:fd:88:0a:45:86:39:
e0:d6:39:be:26:99:59:2a:10:a0:8e:5c:01:64:dd:
85:0d:9f:ce:37:da:da:62:41:12:9c:39:96:81:4a:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D0:32:1F:F2:EB:4F:7F:F4:20:10:39:D0:88:E9:C2:C0:90:8A:7A
X509v3 Authority Key Identifier:
keyid:B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0d:6d:88:28:6d:32:54:b7:ed:60:29:16:4d:31:ff:57:32:
68:08:96:23:7f:cc:77:5a:15:9d:b7:4c:14:67:d9:56:b4:89:
bd:26:59:9f:79:da:e6:4e:56:86:a8:d1:6d:64:e9:87:09:4a:
f6:fe:f5:61:6b:a3:02:05:5f:c4:f0:58:41:74:97:f3:7e:c7:
87:2b:ec:05:2f:0a:c7:23:93:aa:c3:18:a2:6e:9b:db:f0:15:
31:94:7e:f8:2e:44:e1:5b:c1:59:99:c3:84:cb:51:a6:d3:bc:
d6:e6:f8:c4:5f:8c:31:0e:48:d0:99:eb:98:8f:34:23:47:18:
e6:5b:f5:ea:7b:72:ea:4a:c0:3a:1d:5c:f6:21:ef:65:22:4c:
19:1b:02:59:15:e5:f8:b0:76:4b:d4:89:f0:2c:9c:86:87:7a:
94:2a:ba:ae:82:0b:7e:01:88:ff:b3:1e:db:c2:a4:d8:be:c4:
93:73:42:dd:f4:4f:74:be:4f:a5:17:82:ee:7c:7c:44:d2:9d:
91:a0:c8:07:d6:ee:52:e0:72:28:08:f9:d8:f4:da:81:d7:84:
ba:37:ca:d1:39:08:e2:61:ed:ee:99:25:1e:2e:b2:7a:52:4b:
a3:19:9a:60:6b:fb:c4:00:b8:7f:ef:4f:f6:cd:3e:22:fa:62:
e3:e2:b5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:12:12 2026 by rpki-client