Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
File: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft (raw, json)
Hash identifier: k22ZsbFhAJRILDuEUe/Ei0SXguxiLBimKfYq1ggn9Q0=
Subject key identifier: 48:8F:40:2D:A9:90:7D:35:D5:54:F1:0E:6B:BD:B4:02:06:1B:3C:65
Authority key identifier: 49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E
Certificate issuer: /CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
Certificate serial: 019D265F06CE9340885316CC28AEFDDA4D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
Manifest number: 159C
Signing time: Wed 25 Mar 2026 19:00:55 +0000
Manifest this update: Wed 25 Mar 2026 19:00:55 +0000
Manifest next update: Thu 26 Mar 2026 19:00:55 +0000
Files and hashes: 1: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl (hash: QQV6Vq0padvKAvsZZ34Un6JSAcv1vjW+HkJiGKjSV1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:06:ce:93:40:88:53:16:cc:28:ae:fd:da:4d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
Validity
Not Before: Mar 25 19:00:55 2026 GMT
Not After : Mar 26 19:00:55 2026 GMT
Subject: CN=488f402da9907d35d554f10e6bbdb402061b3c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0c:7e:a6:42:66:f0:ad:a2:e1:8b:7a:4b:43:
9b:5d:c4:b2:81:fc:8a:d5:25:06:6c:c8:73:65:8b:
91:58:a8:83:8f:64:d6:8b:a4:c5:46:b0:4d:df:53:
9e:41:e4:37:7d:5d:c3:4b:83:e4:c7:57:af:ec:61:
08:4a:80:c5:5f:56:5c:72:75:1a:82:ef:6c:38:2e:
94:7a:3f:7d:cb:4d:a1:d5:e4:66:42:12:f8:bf:61:
4a:c8:b4:03:6b:19:fe:62:03:d5:2a:6a:c9:ee:a5:
8a:14:e4:76:32:23:ac:49:30:07:a3:7d:02:fe:67:
95:7f:51:5c:0e:50:6b:30:09:eb:54:f0:2c:51:34:
a6:66:3b:7a:61:0c:5a:88:bb:7f:2c:fe:2c:29:70:
93:30:61:47:de:55:6d:52:b2:33:96:f3:fc:2e:dc:
c7:1e:1c:64:d6:5b:49:be:ae:d3:8d:32:bb:62:c9:
64:e1:d2:00:09:16:b2:59:3e:e3:a1:0d:6c:79:11:
a0:06:79:3a:85:cb:0a:f4:f5:92:92:7d:4e:37:a4:
1a:0e:3a:1a:ed:89:2f:37:42:8d:49:6b:31:88:53:
c7:db:91:7b:2b:dc:3c:f2:4a:c5:13:e3:21:d2:c4:
4b:95:32:29:13:c7:84:fb:07:fa:1e:f1:da:04:55:
23:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8F:40:2D:A9:90:7D:35:D5:54:F1:0E:6B:BD:B4:02:06:1B:3C:65
X509v3 Authority Key Identifier:
keyid:49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:66:26:7b:45:61:2f:4e:70:9c:d7:2f:40:24:e0:58:8e:cb:
e1:52:fe:c6:d6:6a:03:2d:89:f6:d4:26:ad:49:89:e1:9c:31:
1b:b9:d4:ba:94:29:00:5f:f1:74:f6:97:fd:4e:28:84:10:77:
25:56:0f:72:f7:e8:4c:8f:10:55:a7:60:62:c1:4c:ae:de:7f:
bb:c0:63:41:9c:25:c2:92:0b:6b:f6:41:36:94:c8:03:28:31:
44:db:f5:e9:dc:18:05:af:74:af:88:ec:5f:7a:b7:f1:ea:4e:
84:fe:47:f0:16:38:ef:b6:41:19:72:6e:35:98:84:ef:f1:7a:
c7:6f:e8:04:38:42:20:a0:7b:fc:53:8a:38:99:b6:7f:d2:96:
b9:7e:a1:19:4c:16:6f:76:9e:a8:1a:d1:2b:9a:c2:3c:5d:c2:
72:c2:0c:0e:ab:5e:4a:f8:86:a4:93:04:c1:44:19:35:42:14:
a7:77:87:a4:76:3b:09:93:3e:30:81:3a:79:b8:b5:6d:92:8d:
50:b4:5c:2e:98:52:15:13:44:88:de:e1:93:6c:ec:0e:9c:60:
82:4c:b6:7a:47:99:bf:39:bd:de:02:de:99:11:c6:93:62:0c:
68:56:c7:da:d4:5c:ad:58:aa:fb:79:32:08:8c:e5:ce:87:41:
a2:51:4e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:49:20 2026 by rpki-client