Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
File: SQsh95ueovPQQjdHFIZ9EkAZlds.mft (raw, json)
Hash identifier: VOijI8g53djDGHXWIgz+YT/OCbdsGLLoB7oELM8Mkfo=
Subject key identifier: 16:6F:1E:F8:79:5D:F2:24:F4:E2:47:9A:8A:5C:E1:24:F9:D7:FC:D8
Authority key identifier: 49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
Certificate issuer: /CN=490b21f79b9ea2f3d042374714867d12401995db
Certificate serial: 019D284DFDE7572E27C67FA6B5F1A699E4EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 04:01:33 +0000
Manifest this update: Thu 26 Mar 2026 04:01:33 +0000
Manifest next update: Fri 27 Mar 2026 04:01:33 +0000
Files and hashes: 1: OsHfm5IcRp6wCajw-NE1iWNH7Z8.roa (hash: oS3FUlduEB7YSg+361aWK05LocqnWlc3lIUtH4BZyko=)
2: QQeZJrwl_4NJIISgArACAVq6L0o.roa (hash: uh1KpLqwgaZj2AcvOxxyx2dRcs//e4c0XtE2TUfZonY=)
3: SQsh95ueovPQQjdHFIZ9EkAZlds.crl (hash: 2qPDd/FELvCcgE0NapJWlNkZ4HUwzc/tLepfXaQ01wQ=)
4: Z4RE0ETdC4xhk1FbbundGTGGRB8.roa (hash: qQ3AizCsruyzTMQNiKoa4LuCo6aARO1PFZyPx/nGISA=)
5: ZmfnOd4CDL5CJbgzX0IFfaCpn_I.roa (hash: r+ACJr/bLBpfF1nAJ7m58XKQpbM78W0wGzauIYTi2V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:fd:e7:57:2e:27:c6:7f:a6:b5:f1:a6:99:e4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490b21f79b9ea2f3d042374714867d12401995db
Validity
Not Before: Mar 26 04:01:33 2026 GMT
Not After : Mar 27 04:01:33 2026 GMT
Subject: CN=166f1ef8795df224f4e2479a8a5ce124f9d7fcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:40:19:b9:e1:6a:31:f8:e6:70:40:6c:be:
e6:ec:1e:b7:ad:bd:8e:fc:a5:fb:d8:25:ef:b0:1e:
02:be:37:99:64:6c:27:39:45:68:4a:30:89:ec:03:
ce:6d:72:10:57:17:65:2f:d5:61:e9:90:58:82:c0:
8f:ba:3f:8e:70:28:a5:ee:46:e6:e9:42:75:59:52:
04:b9:ac:d9:4a:a6:ba:2a:18:1e:eb:57:cb:b0:a2:
68:73:ec:eb:f4:72:94:e9:83:99:1a:c3:91:db:d4:
12:59:26:c4:3f:bf:6f:0e:ef:d0:e4:0b:47:56:86:
6b:95:3b:14:a9:5e:27:e0:86:7b:d9:1f:e8:47:1e:
2a:2b:42:f5:43:ba:65:6f:21:42:6a:8c:a8:98:3e:
52:4f:fa:ce:9f:c3:92:26:d1:5e:79:d7:9d:11:05:
82:2b:d3:ca:34:5b:7e:60:ee:97:21:a4:25:8a:68:
bf:d0:a0:a5:3f:f4:e1:ce:2f:f3:aa:0a:55:6a:0e:
4f:3c:ce:1a:20:24:1a:3e:b4:15:4d:18:37:37:1f:
67:c3:09:ba:60:54:e4:d4:73:2b:10:6c:48:90:90:
8e:5f:c6:ac:7f:fd:3a:51:db:fe:93:e1:48:df:56:
ec:68:c6:3f:e9:de:ca:56:41:88:e1:8f:10:62:2d:
1e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6F:1E:F8:79:5D:F2:24:F4:E2:47:9A:8A:5C:E1:24:F9:D7:FC:D8
X509v3 Authority Key Identifier:
keyid:49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:fd:e7:f8:3c:e3:68:43:41:6d:ce:4f:f4:c2:51:d4:a8:7f:
82:5c:bc:ae:d7:aa:d3:14:f5:a0:4d:2b:10:b0:1f:47:d9:46:
38:ff:6f:aa:94:dd:f5:98:9b:b0:c0:71:e5:3d:63:ec:cd:b3:
18:5d:7c:44:d2:20:3d:6e:fb:76:1f:93:7b:69:e8:37:a0:1a:
82:0f:75:ab:f4:17:6b:80:a2:84:63:1e:1e:b8:96:6f:c8:a7:
1a:e5:ba:f3:31:89:8e:96:23:c0:c9:9b:5b:6a:1f:82:99:92:
82:fa:53:a2:48:27:ea:b4:e6:ea:bf:06:fa:e2:31:50:90:6e:
e1:54:f7:2d:53:ec:87:a1:be:74:77:aa:bf:a1:71:c5:5c:8c:
48:2a:4c:fa:e0:53:1d:b8:f4:56:01:31:ed:6f:5a:9d:e5:2e:
5f:51:5b:65:4d:7e:a3:00:57:f8:1c:fd:4a:d5:20:63:25:3f:
40:d8:fc:49:4e:90:3a:ac:61:e4:30:85:07:e0:a1:80:2d:e6:
19:4d:ee:6e:95:b7:cb:4f:17:13:d8:48:60:26:7f:7c:6b:36:
ca:5f:41:e2:a6:d5:f0:ab:35:bb:33:75:40:a0:d3:d2:5d:55:
a1:0e:d3:43:58:df:e7:63:d3:f9:2b:67:a7:be:e8:97:15:61:
34:94:e0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:18:27 2026 by rpki-client