Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
File: SqvRp2WuXL4dyT2vAk06R-cqyRg.mft (raw, json)
Hash identifier: n/YePDHMxsQ0rZPkOUUIBlIZs/fgX1J7n6gaO9twEfI=
Subject key identifier: 88:11:D8:29:5A:14:A2:D2:ED:60:16:DB:B8:EF:01:72:DF:C9:DA:C4
Authority key identifier: 4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18
Certificate issuer: /CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
Certificate serial: 019D27DF503B4A800818AAC2A4E581929E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
Manifest number: 1242
Signing time: Thu 26 Mar 2026 02:00:39 +0000
Manifest this update: Thu 26 Mar 2026 02:00:39 +0000
Manifest next update: Fri 27 Mar 2026 02:00:39 +0000
Files and hashes: 1: 7GkLDdomT5eL60D6-khNrUAPRs8.roa (hash: shWGexTkkzOs8oRP4d8FwNhRI05jCv9BHag7xNm2iyw=)
2: SqvRp2WuXL4dyT2vAk06R-cqyRg.crl (hash: G50TiEMxbkDlmvlYocF/35OWj6BRD6uonxmv5E/mRA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:50:3b:4a:80:08:18:aa:c2:a4:e5:81:92:9e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
Validity
Not Before: Mar 26 02:00:39 2026 GMT
Not After : Mar 27 02:00:39 2026 GMT
Subject: CN=8811d8295a14a2d2ed6016dbb8ef0172dfc9dac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:b6:30:8b:be:47:6e:78:63:03:4c:3b:da:
88:87:98:b1:6a:bd:e8:10:f8:2f:4b:0e:76:42:68:
83:4a:d3:e0:79:7e:49:4b:03:89:62:db:33:f3:72:
44:24:82:21:c3:7b:6e:90:c0:5b:65:5c:2e:c7:e2:
38:60:c2:c2:74:30:ef:c2:1f:fa:76:f6:10:8a:fc:
ae:5b:e7:ae:67:40:b9:51:67:41:82:e2:c0:e1:af:
15:03:76:1a:79:f8:83:0f:ce:87:d5:0e:81:8b:57:
df:1f:2e:56:b1:ee:30:c2:bf:ad:3b:08:f6:8b:05:
ca:49:6e:31:9e:f7:d0:04:9f:cc:32:8a:b2:79:c0:
3d:0d:77:61:3d:da:82:8d:6c:a6:e0:c3:41:cf:0e:
6f:6b:27:f2:6d:b6:53:e7:6a:04:42:09:ef:c6:6f:
69:79:d0:02:07:ce:b8:74:3b:48:ca:d3:fd:ec:ea:
90:56:28:5e:68:63:ec:c2:db:62:95:ec:29:fe:b0:
b8:53:3c:1d:12:d7:f8:79:ce:a2:f4:95:ee:78:46:
a4:50:66:fe:28:13:25:46:a8:47:8f:19:84:aa:fb:
8c:52:dd:a2:d1:85:f3:6d:5a:22:38:01:45:fd:2a:
f7:7a:4a:12:f9:b4:f3:09:97:a3:e7:62:8b:8c:06:
76:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:11:D8:29:5A:14:A2:D2:ED:60:16:DB:B8:EF:01:72:DF:C9:DA:C4
X509v3 Authority Key Identifier:
keyid:4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:58:66:07:07:90:20:b6:83:d5:f3:3e:9a:d0:00:e9:1e:63:
b0:7d:e7:5a:94:98:20:fc:99:b5:3a:30:71:df:bc:6b:f9:2b:
08:e5:3f:ae:16:62:39:db:25:ef:4f:64:b2:90:f8:37:43:18:
4a:00:48:ee:f2:f1:8b:39:10:f9:1c:df:a1:2e:33:f9:ca:94:
49:8e:e1:dc:23:bb:e0:4a:6f:c8:46:ec:8d:ff:cd:8d:be:1d:
f2:7b:f0:fb:4c:90:39:31:9f:0b:9b:3c:e1:db:bc:7c:96:45:
36:b4:73:5f:7b:67:1c:6a:26:98:ba:15:60:8a:78:26:5c:51:
95:fd:bd:69:66:64:90:7f:4b:7b:53:cf:1c:37:f5:2d:5a:fe:
1f:7c:be:9b:cf:bf:73:77:51:27:4e:40:7e:3d:a2:dc:1e:93:
5a:83:d3:3b:0f:aa:1d:5e:a3:65:5e:be:41:94:9d:4e:ee:24:
28:a3:c3:28:ff:6a:59:0f:b1:3f:5f:5b:11:8e:f7:7b:6c:82:
5c:35:40:0b:86:61:69:a8:22:a7:22:0a:76:cf:03:37:7b:b9:
3c:e5:81:85:dc:3a:d9:64:49:2a:00:13:4a:fe:19:dd:c2:62:
78:c8:08:9a:cf:c2:8e:10:e1:13:45:b8:f6:cd:6c:2a:58:73:
e2:33:46:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:57 2026 by rpki-client