Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ca71bf-ab7f-4a0e-a955-7efc5b751a7d/1/sqvY_cD-Jo47wgJu5expymu4nzU.mft
File: sqvY_cD-Jo47wgJu5expymu4nzU.mft (raw, json)
Hash identifier: Dkpl9Md2E/Ebes7q8d31s6uBaO47sAUo7G4GAqfQITk=
Subject key identifier: B5:5C:BD:9A:CD:66:F9:80:FB:8E:4F:9E:40:87:3F:AB:6C:57:A6:2C
Authority key identifier: B2:AB:D8:FD:C0:FE:26:8E:3B:C2:02:6E:E5:EC:69:CA:6B:B8:9F:35
Certificate issuer: /CN=b2abd8fdc0fe268e3bc2026ee5ec69ca6bb89f35
Certificate serial: 019D25830DDFC7FE162A89ED3133AB7C6A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqvY_cD-Jo47wgJu5expymu4nzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ca71bf-ab7f-4a0e-a955-7efc5b751a7d/1/sqvY_cD-Jo47wgJu5expymu4nzU.mft
Manifest number: 18
Signing time: Wed 25 Mar 2026 15:00:38 +0000
Manifest this update: Wed 25 Mar 2026 15:00:38 +0000
Manifest next update: Thu 26 Mar 2026 15:00:38 +0000
Files and hashes: 1: OLfmHw3G69CHlt6FQSGhdYd-jnw.roa (hash: St7w/S2np1OP5tS27B/HX6714X0a8f9dEC3Bn7ikgwc=)
2: sqvY_cD-Jo47wgJu5expymu4nzU.crl (hash: ou9ATFWWlGsKBm778cCp3W5XEKyqxvzXk7I628CA2E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ca71bf-ab7f-4a0e-a955-7efc5b751a7d/1/sqvY_cD-Jo47wgJu5expymu4nzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ca71bf-ab7f-4a0e-a955-7efc5b751a7d/1/sqvY_cD-Jo47wgJu5expymu4nzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqvY_cD-Jo47wgJu5expymu4nzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:0d:df:c7:fe:16:2a:89:ed:31:33:ab:7c:6a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2abd8fdc0fe268e3bc2026ee5ec69ca6bb89f35
Validity
Not Before: Mar 25 15:00:38 2026 GMT
Not After : Mar 26 15:00:38 2026 GMT
Subject: CN=b55cbd9acd66f980fb8e4f9e40873fab6c57a62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0d:96:a9:a5:ff:5b:3a:74:19:49:c1:58:81:
75:91:0d:fe:d4:68:cf:f1:5a:30:61:6f:65:be:84:
f9:c2:a4:55:e1:73:da:d4:a1:c7:60:24:4c:f0:80:
d7:ce:af:4a:0f:33:09:46:7f:78:4a:a6:c4:a5:43:
c2:c3:16:38:43:4a:0b:fa:29:f9:b6:49:16:de:58:
81:53:d8:99:cc:ad:bd:e7:51:9f:7f:a3:dd:1d:e8:
e2:89:01:44:e2:1f:e4:08:e9:f5:42:08:93:e0:9b:
0d:4d:fc:c9:90:55:5e:e9:0c:e4:79:7c:6e:8c:4f:
cd:24:e8:84:f8:55:47:50:dc:da:ac:ce:d1:af:e9:
81:b6:00:4b:87:7e:84:c4:36:cd:79:ac:6f:17:d7:
2d:74:ba:5d:a1:79:ee:4c:1d:5c:eb:03:52:42:c2:
24:5b:b4:60:33:b7:33:9f:80:4b:21:52:17:20:47:
30:85:ae:d7:39:6e:fc:38:7e:b8:c3:65:dd:04:5d:
3a:07:0e:1c:cb:a5:d6:7b:37:f2:42:a2:f6:de:ed:
e5:4c:36:7e:e5:d1:37:19:73:3f:df:09:46:9d:06:
00:76:75:f9:c0:bb:d1:42:7e:c4:d9:77:64:ea:e5:
fd:3b:e3:60:cf:07:ab:26:ee:20:31:b4:55:25:1c:
9c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5C:BD:9A:CD:66:F9:80:FB:8E:4F:9E:40:87:3F:AB:6C:57:A6:2C
X509v3 Authority Key Identifier:
keyid:B2:AB:D8:FD:C0:FE:26:8E:3B:C2:02:6E:E5:EC:69:CA:6B:B8:9F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqvY_cD-Jo47wgJu5expymu4nzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ca71bf-ab7f-4a0e-a955-7efc5b751a7d/1/sqvY_cD-Jo47wgJu5expymu4nzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ca71bf-ab7f-4a0e-a955-7efc5b751a7d/1/sqvY_cD-Jo47wgJu5expymu4nzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b7:7d:05:76:aa:8f:98:d2:41:8e:f3:79:73:e5:30:0a:8b:
b1:a6:7f:7c:48:72:bb:83:dc:29:de:a7:23:4a:52:cd:f6:fb:
e2:c8:47:d0:3a:99:e2:e8:cc:0f:74:98:60:9f:f5:7a:a6:b5:
bf:9d:ad:8b:c2:c5:79:7c:67:21:06:1d:61:44:7a:64:22:8d:
82:ba:b6:5c:31:7f:2b:7d:3f:e5:fa:fc:b7:e0:d1:9e:18:b5:
b9:c4:4c:6d:ff:64:25:e6:bd:54:c1:a4:b2:d2:87:99:c0:00:
32:f9:fc:62:50:1a:d3:16:24:4e:65:1a:b0:c0:90:6c:0c:32:
cd:d9:64:11:98:fb:81:0a:f1:00:8f:54:b5:c3:4b:74:34:44:
94:90:05:2c:6b:ca:5b:60:c2:fa:e9:04:9f:84:ae:1f:03:e8:
0d:83:71:22:5c:f7:ca:a3:5c:08:44:35:91:d9:ef:ba:9c:25:
8e:5b:11:11:09:14:70:2a:ea:55:94:8c:a6:20:4a:bc:5e:6f:
fd:f9:66:7c:c7:4f:e6:bd:18:e5:a5:29:52:be:48:b8:05:84:
d1:76:83:32:a6:08:2f:3b:bb:15:96:42:6d:67:4b:db:19:a4:
e1:53:41:60:11:ce:af:51:7c:27:e5:55:2d:d8:0c:cd:d8:52:
35:5f:59:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:58 2026 by rpki-client