Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
File: SqXjXAXCq1S-dYtshnGGzuFZvWM.mft (raw, json)
Hash identifier: uSYvWpu0SUXXgUOj50mPnjfhtAy2udiu8Vbsx9HjWg4=
Subject key identifier: C3:C6:07:F4:DC:36:11:A5:71:4A:F2:6E:1B:CD:0E:37:91:C0:A5:46
Authority key identifier: 4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
Certificate issuer: /CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Certificate serial: 019D284E0923E3285C4DA4A5A18149F03346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
Manifest number: 1282
Signing time: Thu 26 Mar 2026 04:01:35 +0000
Manifest this update: Thu 26 Mar 2026 04:01:35 +0000
Manifest next update: Fri 27 Mar 2026 04:01:35 +0000
Files and hashes: 1: Gf-9RToHV8wPDoXU7Oara5nxIUM.roa (hash: VsHDJwIPTlkkP+eDBuFbkPtE/oNd7HaXUP1nGykcuDA=)
2: SqXjXAXCq1S-dYtshnGGzuFZvWM.crl (hash: E3vV+GM7iuunrJ1tcf1rPPwV+nGUVb2GuriRaxV6Yk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:09:23:e3:28:5c:4d:a4:a5:a1:81:49:f0:33:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Validity
Not Before: Mar 26 04:01:35 2026 GMT
Not After : Mar 27 04:01:35 2026 GMT
Subject: CN=c3c607f4dc3611a5714af26e1bcd0e3791c0a546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b8:f2:f5:d3:cc:53:7c:13:05:eb:b7:6d:ad:
03:ff:12:06:33:ba:2b:60:89:60:ee:d1:0d:a5:46:
04:f2:0e:fb:13:2d:c2:39:10:c8:58:24:84:fd:07:
53:79:00:f8:ee:cf:52:f1:d6:1e:be:2a:b7:23:57:
a0:5f:8d:d9:b5:db:bd:86:3d:2a:66:8a:54:a7:b4:
db:17:cb:3a:a9:0a:f1:16:d7:65:b0:88:72:d5:8f:
1b:eb:9c:47:ee:4d:e1:d0:fa:17:70:99:5b:d7:42:
45:4d:21:fa:27:0b:41:2d:74:82:6c:8a:7d:b3:36:
53:8d:c6:21:b0:41:2f:9c:47:d7:61:0b:dd:f4:ee:
e1:18:82:22:ff:6e:51:27:a6:2f:51:22:d7:2d:8f:
a8:75:ef:f9:31:08:85:e7:dd:d6:cd:16:bd:c6:ce:
b2:e6:88:aa:f7:dc:8c:51:39:d8:26:12:03:ce:68:
9a:13:04:eb:fd:3b:92:eb:51:9e:8a:e6:62:b3:e1:
4f:64:42:69:24:a2:4c:bc:e0:bd:37:32:73:87:b2:
0d:7b:06:e5:6f:4d:81:59:52:84:78:60:2d:bb:af:
b5:91:b4:7f:fb:5d:b6:72:ef:b8:9b:72:88:3f:5b:
2c:9c:f7:22:8e:8b:51:40:01:38:d9:21:71:da:89:
5d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C6:07:F4:DC:36:11:A5:71:4A:F2:6E:1B:CD:0E:37:91:C0:A5:46
X509v3 Authority Key Identifier:
keyid:4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3e:52:62:13:67:79:d1:d0:eb:b5:e0:06:92:d6:6f:86:dd:
98:d9:c4:19:ef:27:0c:3b:42:97:aa:70:31:b0:18:8c:d8:4d:
64:c6:c5:5f:20:d0:3f:ed:a9:ee:be:ae:89:45:95:93:07:c6:
04:22:fd:66:1e:5e:9c:49:a2:8d:88:5e:f2:b3:23:e1:03:c2:
27:1d:31:db:49:a9:18:1a:1a:6b:ac:3d:9b:d2:07:7a:ad:34:
9f:44:02:a2:f7:06:fd:e5:44:78:76:ac:f8:57:25:30:d5:ff:
82:c9:6a:a3:c9:55:59:b7:92:02:b2:9c:d5:b1:28:d3:ee:55:
78:c0:6b:1b:16:1d:59:a1:a6:ba:68:00:d8:b2:36:59:ca:69:
66:db:de:aa:6d:a2:9a:9e:7b:29:ec:5a:0a:68:25:b5:8a:e1:
8b:d7:0d:47:66:71:09:71:f3:6f:3d:53:f5:23:b7:fb:42:77:
0d:cc:bd:64:7c:52:18:cd:54:0c:ae:ea:85:01:53:1e:c3:bc:
38:87:c5:58:77:70:fe:78:76:3c:41:2d:56:57:33:c0:03:4c:
5c:70:75:d3:20:f1:01:62:3f:53:21:64:01:92:5a:20:72:03:
fe:eb:70:be:dc:fd:1a:69:5e:d7:8f:14:83:9c:23:b3:25:96:
97:95:6c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:12 2026 by rpki-client