Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
File: sQw889xTylScA-T19G2RzpC44HA.mft (raw, json)
Hash identifier: 5NMTyYWd5NxHV2V/HBH74P6Ff8LAZOtFXFtvtqOiHTs=
Subject key identifier: 7F:B6:74:C2:5E:D1:DB:DE:B7:BA:E5:D4:9B:EF:69:B3:E0:2E:C3:BA
Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Certificate serial: 019D273B3264D19C2B9E83568E080C48987E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
Manifest number: 189C
Signing time: Wed 25 Mar 2026 23:01:24 +0000
Manifest this update: Wed 25 Mar 2026 23:01:24 +0000
Manifest next update: Thu 26 Mar 2026 23:01:24 +0000
Files and hashes: 1: o40VleOLDva4l-Hlse3BxkX262M.roa (hash: vt1iL3MNmGtBJoVTbi5X0cqEnKhYSdktMc3RDciLR8w=)
2: sQw889xTylScA-T19G2RzpC44HA.crl (hash: E0hi8AgRtsMuBA3EgYIqXq5agfPdeQSLbPS2vR+LNG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:32:64:d1:9c:2b:9e:83:56:8e:08:0c:48:98:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Validity
Not Before: Mar 25 23:01:24 2026 GMT
Not After : Mar 26 23:01:24 2026 GMT
Subject: CN=7fb674c25ed1dbdeb7bae5d49bef69b3e02ec3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b5:6a:09:6e:e9:23:57:92:63:6d:ce:59:9c:
c8:c4:a9:c1:1b:8c:1e:c5:59:0a:62:d0:fe:83:ee:
9c:d9:fa:1b:7c:2c:31:1d:a8:5c:99:65:84:c1:bd:
79:91:93:0e:8d:49:93:8c:cc:dc:1f:84:99:67:a5:
8f:08:0e:43:25:1c:c8:0b:9a:6b:58:d2:3e:2a:31:
45:ac:a3:1c:6a:fd:24:ba:11:03:20:9c:d2:b7:19:
76:ff:10:30:c2:89:12:e1:b0:65:15:2e:69:af:7c:
0e:aa:5e:ac:0f:db:4f:96:74:8b:18:51:80:95:34:
dd:ef:d2:df:29:cd:ae:0f:58:9f:b3:7f:6d:f2:ff:
de:0b:ca:cf:c9:33:8d:0d:44:29:07:8a:13:72:9c:
fb:97:9a:6b:91:97:e9:d8:43:7d:0c:11:b0:5c:0f:
4b:2c:f3:63:cc:80:df:a8:0e:d0:6a:2d:e2:05:06:
46:bc:34:fb:37:f4:08:d5:07:b8:80:71:50:fd:b5:
c6:e0:75:df:4f:13:d7:66:80:c6:e4:8f:05:92:b7:
59:83:cb:50:8c:68:1f:bf:6f:c5:d7:8d:d0:a1:c9:
3b:7e:51:8e:2b:07:dd:67:53:0a:59:ed:46:d4:7a:
33:89:a3:29:2d:b2:99:a3:56:64:12:f3:65:a2:ea:
70:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B6:74:C2:5E:D1:DB:DE:B7:BA:E5:D4:9B:EF:69:B3:E0:2E:C3:BA
X509v3 Authority Key Identifier:
keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:4a:7d:72:ca:b8:22:1f:60:af:60:1f:47:58:cc:8b:e7:30:
e5:e4:16:57:4e:ce:8d:05:25:ed:13:b5:04:dc:fe:70:3d:3c:
99:da:37:15:17:08:cf:3f:7a:26:9d:24:22:a3:9e:e6:44:8b:
4f:bf:61:aa:7d:a2:f3:0d:7c:4d:a4:85:bc:9d:9e:e5:e2:eb:
ea:c0:7a:07:fb:bc:ad:3d:1b:02:13:0b:84:4a:7f:65:cb:6b:
ed:95:d7:10:fd:43:c6:c3:e7:01:87:b7:0d:ba:01:61:7b:12:
84:33:43:52:2a:7c:2b:d1:a4:8e:23:06:44:f3:3d:4e:82:19:
7e:cf:6f:24:a5:8c:83:e1:9b:5f:07:17:6b:61:94:58:5f:01:
7e:49:f3:28:fe:d0:5b:e5:3a:50:84:2d:28:3d:df:bd:e7:44:
78:10:b9:de:2c:f1:98:b0:01:8f:67:95:a7:7a:49:76:3b:bc:
a1:20:c4:d6:2a:c7:49:52:50:4a:d6:d4:77:87:7e:a4:54:2b:
a0:9a:e9:4a:fe:ce:f5:0f:0b:33:ca:d5:5c:26:e5:78:92:ab:
6e:ac:11:b5:ea:73:5b:48:8b:9b:84:3c:9a:5c:7f:9a:ee:e7:
46:d6:38:81:36:a2:22:60:ea:63:ef:47:95:d3:10:55:38:b5:
59:02:5d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:37 2026 by rpki-client