Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
File: Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft (raw, json)
Hash identifier: IQuRBSD+9ij5quDvwfeXfcA+6bZV4h+45FU+J7Tb830=
Subject key identifier: CB:7C:FF:EA:59:A6:6D:E9:7D:0B:9C:07:B1:75:65:57:55:FA:16:EC
Authority key identifier: 4A:AF:E4:5B:30:FA:7F:59:49:25:DD:39:5B:A1:4C:EF:B6:73:E2:C0
Certificate issuer: /CN=4aafe45b30fa7f594925dd395ba14cefb673e2c0
Certificate serial: 019D39408C44CEA880EC5859E5BA0EDE450A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 11:00:24 +0000
Manifest this update: Sun 29 Mar 2026 11:00:24 +0000
Manifest next update: Mon 30 Mar 2026 11:00:24 +0000
Files and hashes: 1: Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl (hash: sBPbswQ/qDZKpE1h0rle2kobZtXKKgWJ0/Wpq3AXu84=)
2: e-TXm60k7Kx6Oh6yvAUbKW27JU0.roa (hash: oDcorjp/ifU0UbolQ0ZKZMHDQwFU7Ev3i8BjyydcT+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:8c:44:ce:a8:80:ec:58:59:e5:ba:0e:de:45:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aafe45b30fa7f594925dd395ba14cefb673e2c0
Validity
Not Before: Mar 29 11:00:24 2026 GMT
Not After : Mar 30 11:00:24 2026 GMT
Subject: CN=cb7cffea59a66de97d0b9c07b175655755fa16ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:73:cd:77:c5:6d:2d:64:50:cc:13:f3:00:
93:fa:12:b4:f7:c9:30:ea:64:f1:06:e2:76:62:bc:
2a:e8:2f:b0:7c:fc:a6:60:28:55:68:f8:2d:47:b6:
57:93:15:9d:15:dc:22:05:c4:6b:1f:05:6b:cb:5f:
73:b2:36:61:e2:a1:e6:5d:37:74:e4:30:01:51:9f:
5a:cd:48:56:e7:8f:7c:54:c3:fe:c1:56:c7:37:c4:
56:b1:20:c3:c1:3e:a9:db:9d:dc:19:14:a9:9c:78:
84:57:5f:66:c2:bc:1b:54:50:57:19:e5:1a:87:4a:
9e:2e:26:7b:98:5c:0b:eb:48:5c:3c:fd:e9:45:02:
00:ab:f5:4b:65:1a:7f:e9:5c:3b:da:d5:f9:90:10:
1d:f8:b5:e4:11:5f:14:21:c7:41:73:f6:fd:d2:e2:
54:db:6e:bb:03:f0:86:20:32:10:f9:c1:a0:a9:34:
54:e1:cd:8a:24:3c:a9:5b:c5:da:80:f5:cd:bd:c7:
05:e2:3e:14:5e:8c:2b:7b:de:1f:d4:f8:34:82:d4:
1e:82:0c:27:ff:25:b1:57:24:e5:fa:6b:87:ca:41:
7e:cc:d5:47:83:8d:43:f9:88:9d:1e:e8:cf:67:67:
c9:a5:72:65:c5:58:cb:0e:e7:fe:72:5e:7d:94:87:
fa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:7C:FF:EA:59:A6:6D:E9:7D:0B:9C:07:B1:75:65:57:55:FA:16:EC
X509v3 Authority Key Identifier:
keyid:4A:AF:E4:5B:30:FA:7F:59:49:25:DD:39:5B:A1:4C:EF:B6:73:E2:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b4:73:32:f1:c4:12:f5:79:b9:dc:52:bf:b1:a7:f9:22:ae:
d7:88:b3:f4:a7:68:a1:2c:c9:c9:49:da:c1:87:17:ee:bc:a7:
72:3c:da:00:a5:4a:48:df:4a:4f:f8:bc:49:34:54:6e:b2:6b:
d1:62:cc:9d:ba:0f:42:51:e6:3e:8b:ee:44:83:9f:88:fa:fc:
4a:0b:48:15:28:d2:d4:8d:bb:87:6e:62:81:0d:5b:6c:3f:1b:
a0:b0:9a:c8:08:4c:0e:c6:84:fe:51:46:e4:87:a0:1e:0a:d9:
16:02:b9:61:cc:1b:1a:09:eb:8a:8a:66:4e:87:52:43:a4:95:
b6:17:3d:d5:ee:29:1a:9f:e8:69:e7:da:e7:07:53:95:e9:9e:
95:00:89:ef:21:a7:44:ce:ad:af:14:a0:7e:8e:09:1b:35:98:
c8:cf:6b:da:82:00:14:b1:29:f1:ec:23:8d:69:98:77:1f:41:
5b:52:98:4d:a9:39:b9:2f:71:eb:fd:4a:9d:9c:d6:7f:75:d4:
a3:9c:55:22:88:e0:18:e1:fb:7f:81:a3:7a:b4:c1:9c:36:f6:
ea:f3:3a:93:12:95:d0:b1:92:6c:90:7a:2e:c2:b1:4b:29:bb:
1a:33:b5:67:92:aa:97:34:9e:74:c0:49:d5:8e:2d:ca:15:55:
8e:ae:a3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:35 2026 by rpki-client