Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
File: SQtgyL0tnQHwq1ocTApT4dczn2U.mft (raw, json)
Hash identifier: 8ICBdAFpN+UPLDfrHZOYURmsYZNIQYfcIX0gnVLwswA=
Subject key identifier: 0D:3C:7F:E5:9B:57:9C:92:2C:1E:D3:4F:12:66:1B:8A:C8:D8:76:23
Authority key identifier: 49:0B:60:C8:BD:2D:9D:01:F0:AB:5A:1C:4C:0A:53:E1:D7:33:9F:65
Certificate issuer: /CN=490b60c8bd2d9d01f0ab5a1c4c0a53e1d7339f65
Certificate serial: 019D2704AA175A4860B3DCCE7542D20B12AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQtgyL0tnQHwq1ocTApT4dczn2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
Manifest number: 146D
Signing time: Wed 25 Mar 2026 22:01:50 +0000
Manifest this update: Wed 25 Mar 2026 22:01:50 +0000
Manifest next update: Thu 26 Mar 2026 22:01:50 +0000
Files and hashes: 1: SQtgyL0tnQHwq1ocTApT4dczn2U.crl (hash: GH82Fbkw41YJFIruZHO5sBTFgumvZtIgN6Mrk0FTVhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQtgyL0tnQHwq1ocTApT4dczn2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:aa:17:5a:48:60:b3:dc:ce:75:42:d2:0b:12:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490b60c8bd2d9d01f0ab5a1c4c0a53e1d7339f65
Validity
Not Before: Mar 25 22:01:50 2026 GMT
Not After : Mar 26 22:01:50 2026 GMT
Subject: CN=0d3c7fe59b579c922c1ed34f12661b8ac8d87623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:20:ee:b9:ed:dc:3c:6d:5b:bd:dd:7e:07:
87:0d:7c:1f:2a:1b:d9:ca:f7:36:c0:c2:6b:21:f7:
89:c6:cd:b6:8d:ef:85:f4:a3:da:53:9a:5e:fc:21:
82:04:fc:fc:93:64:3b:22:5a:96:b1:2e:c3:ba:85:
90:1b:b4:72:aa:40:2a:96:6a:f7:49:b5:7d:38:20:
a3:d0:39:c4:c0:eb:25:ce:95:38:d0:55:c3:be:28:
29:82:e6:b3:8d:e8:43:20:c1:1d:e8:48:5f:e1:61:
ad:99:87:43:0e:ac:be:1c:66:52:99:1b:44:67:83:
24:11:9d:59:98:54:78:50:ab:aa:2b:46:47:1a:f4:
0e:8c:88:ab:76:fb:20:33:2b:56:d8:32:0e:ee:cb:
bb:9b:0f:eb:15:1f:81:6e:cd:b0:16:40:17:66:79:
49:0a:68:4e:e5:f6:d2:28:ad:93:ec:b2:71:cf:3f:
90:c3:c9:a6:2f:54:6e:ee:6e:11:c0:b1:85:a4:99:
de:a9:f2:c1:b6:2e:43:c1:03:ca:9f:ca:bf:34:cd:
f6:7a:1d:c1:ea:19:4b:5f:34:c4:78:e5:cd:8d:b8:
3e:04:6f:af:1d:d3:44:37:49:3e:57:aa:e5:3c:a9:
6b:36:43:47:77:e4:e0:1f:37:01:99:13:d8:62:6e:
f4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3C:7F:E5:9B:57:9C:92:2C:1E:D3:4F:12:66:1B:8A:C8:D8:76:23
X509v3 Authority Key Identifier:
keyid:49:0B:60:C8:BD:2D:9D:01:F0:AB:5A:1C:4C:0A:53:E1:D7:33:9F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQtgyL0tnQHwq1ocTApT4dczn2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a9:f6:7c:1b:58:be:1b:40:14:5d:10:bd:51:e6:c4:b4:89:
ad:40:03:2a:19:ed:a4:3b:98:19:3b:5e:5a:9e:7b:6d:30:61:
75:c8:14:b8:26:4a:f8:fe:bf:48:cf:ff:76:32:33:77:33:71:
43:a6:e1:7f:8a:a5:e4:0c:3a:bb:a9:6e:d1:3b:78:ff:30:a0:
8e:6e:05:6a:ea:cb:c6:b5:93:47:3c:32:f8:49:94:28:75:d5:
65:05:2d:4c:22:7f:36:1b:07:cb:3f:31:0c:ca:12:70:06:11:
ea:bf:54:30:97:f8:f5:05:8f:56:94:c4:58:ab:ea:59:f4:93:
b0:83:ac:ce:89:4f:be:9c:f8:19:4d:39:f4:8e:fb:99:52:e5:
0e:56:3e:a7:ca:a7:5c:ab:04:44:71:2d:59:54:b9:a8:b0:27:
01:c6:a2:4f:04:cb:8f:19:a2:f6:13:99:2a:2c:c6:fe:de:78:
06:e7:66:cf:b1:cc:1d:5c:6e:0d:de:e4:aa:c1:7d:5b:80:e4:
74:8b:17:a4:8b:1f:84:e1:39:e8:85:53:6e:92:cd:d0:25:a9:
b3:0a:5f:15:bb:10:eb:69:af:92:29:02:17:cc:52:39:4b:42:
08:8f:0d:f8:4b:d5:39:3e:60:e8:9c:d2:40:7f:39:d9:39:88:
d8:9a:a4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:29:54 2026 by rpki-client