Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
File: sQeA3za1uUL2YOQDov5ginXk5X0.mft (raw, json)
Hash identifier: lKgqqJcv+qV2IuY7LcAG7ht+8IaAW2nBmu2CykyBYj8=
Subject key identifier: A6:92:1A:5F:9B:28:CD:E7:64:DA:A2:3D:48:E6:66:92:F2:F2:24:4A
Authority key identifier: B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
Certificate issuer: /CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Certificate serial: 019D2929288B1E165206C5DEB1E620AD15FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
Manifest number: 1819
Signing time: Thu 26 Mar 2026 08:00:56 +0000
Manifest this update: Thu 26 Mar 2026 08:00:56 +0000
Manifest next update: Fri 27 Mar 2026 08:00:56 +0000
Files and hashes: 1: IRpFGeK75W2NCoLOiJ_s8Xp5yew.roa (hash: BhIo7ljP7ZgEPGbs9sKTB4qik1eSNnRy76SvPdzQrR4=)
2: sQeA3za1uUL2YOQDov5ginXk5X0.crl (hash: R/HzDbiDfcqMZPt0EqOgMvTnjb7cNKeaBe0UEDlJHcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:28:8b:1e:16:52:06:c5:de:b1:e6:20:ad:15:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Validity
Not Before: Mar 26 08:00:56 2026 GMT
Not After : Mar 27 08:00:56 2026 GMT
Subject: CN=a6921a5f9b28cde764daa23d48e66692f2f2244a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:29:ca:85:04:1a:c9:a7:3a:87:9c:a4:0f:1a:
dc:6a:50:44:1d:c5:3f:f8:99:cb:12:b6:a0:dd:66:
23:de:5c:4c:8c:d3:4a:d5:c9:9e:95:44:68:8d:72:
57:3c:92:a1:91:1f:b4:4f:62:36:5d:c2:22:74:1b:
ad:91:e3:d3:3c:60:c1:bb:23:0a:7d:ec:55:0d:75:
01:d6:64:19:11:e6:90:3e:25:e0:a4:a5:34:ff:5f:
19:4d:20:00:db:2b:1f:42:a2:73:10:d4:0c:c0:c9:
d9:d1:c3:d9:78:64:e6:92:cd:75:7f:ac:a0:4a:27:
42:39:f6:42:a9:61:92:9d:da:ca:05:dd:01:bb:ea:
57:84:53:42:9a:ca:52:14:3d:85:7a:75:55:02:15:
46:1e:19:7d:ed:3a:4d:de:32:95:5f:74:37:76:bc:
d4:c6:1e:4e:83:e1:f2:fc:d9:a1:c2:e8:7d:01:39:
8c:f5:ea:c8:23:99:4c:7d:b2:31:97:fa:79:d7:49:
34:7b:9c:b1:16:0b:e5:5b:f2:23:62:00:7c:2a:04:
12:61:2d:24:04:e7:d9:ac:4d:b9:f7:19:d9:9d:97:
d8:ff:bf:33:ca:17:cc:27:70:22:9f:a3:01:25:62:
e0:2e:ab:58:04:69:fb:4d:44:1a:d2:30:fc:f2:e4:
23:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:92:1A:5F:9B:28:CD:E7:64:DA:A2:3D:48:E6:66:92:F2:F2:24:4A
X509v3 Authority Key Identifier:
keyid:B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:93:4f:80:29:34:67:27:0d:b1:c7:84:84:a7:fb:25:d8:89:
30:a3:1f:a4:c9:b2:fe:43:fd:e7:f4:04:d7:39:a3:f6:71:e1:
76:12:9c:15:42:a6:0e:d2:31:d1:00:1b:92:f7:5b:b2:aa:f5:
91:d3:bf:8f:51:72:db:7d:44:c6:05:3a:5f:4c:b0:e1:c7:b3:
81:ad:73:1d:24:6e:ba:e7:82:f8:15:ad:71:c0:03:2e:6c:2a:
da:2e:d8:e9:55:a6:e2:32:44:8e:a7:75:c2:2e:3e:94:1a:41:
7c:0e:08:f7:d7:c5:47:e2:6f:6f:b3:ba:04:89:ba:0b:01:66:
dc:64:00:fe:a8:a3:69:b9:62:43:9d:73:d5:26:d3:4a:d8:04:
84:27:96:5c:ac:10:26:65:4d:be:58:c0:9f:c4:75:42:48:36:
db:9c:18:f5:35:59:ac:a7:33:dc:13:77:76:19:86:db:67:ec:
c7:60:64:7b:00:9d:3e:65:86:a2:76:95:dd:78:f3:04:bc:68:
f0:48:d6:57:05:da:97:fa:ce:ac:99:06:7f:44:53:aa:87:40:
19:81:73:aa:87:2a:8c:86:eb:c3:da:7d:da:d0:ae:d4:98:74:
5d:7c:81:94:bf:75:b7:f0:85:5e:4a:95:60:19:60:f4:7e:7b:
d7:f7:d9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:37 2026 by rpki-client