Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft
File: sqvUconMbNnByAJ0KiztUMY0vTs.mft (raw, json)
Hash identifier: dW9sntWUngVQknEufT8K0ea2qv+j/LJboA2UwZP5ArU=
Subject key identifier: 2F:89:C9:D3:57:08:0B:B1:86:12:E8:D8:80:53:62:2C:DC:17:EB:0D
Authority key identifier: B2:AB:D4:72:89:CC:6C:D9:C1:C8:02:74:2A:2C:ED:50:C6:34:BD:3B
Certificate issuer: /CN=b2abd47289cc6cd9c1c802742a2ced50c634bd3b
Certificate serial: 019D3752B35FBA242DBDC4E90D34BFE03A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqvUconMbNnByAJ0KiztUMY0vTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft
Manifest number: 0A62
Signing time: Sun 29 Mar 2026 02:00:59 +0000
Manifest this update: Sun 29 Mar 2026 02:00:59 +0000
Manifest next update: Mon 30 Mar 2026 02:00:59 +0000
Files and hashes: 1: sqvUconMbNnByAJ0KiztUMY0vTs.crl (hash: tTU/uq7cfasCp61a5lxJxegS6k0n8knmrwRzsZZaUXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqvUconMbNnByAJ0KiztUMY0vTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:b3:5f:ba:24:2d:bd:c4:e9:0d:34:bf:e0:3a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2abd47289cc6cd9c1c802742a2ced50c634bd3b
Validity
Not Before: Mar 29 02:00:59 2026 GMT
Not After : Mar 30 02:00:59 2026 GMT
Subject: CN=2f89c9d357080bb18612e8d88053622cdc17eb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:40:43:e4:68:e3:cc:33:bd:47:1a:d4:f5:
05:0d:c1:96:19:c7:8f:9a:22:da:25:69:3b:70:03:
96:c4:fc:cc:28:1b:a9:57:80:d6:75:d4:79:fc:95:
cd:a6:21:7c:32:eb:ae:4d:79:36:9a:f4:8e:25:24:
c2:64:59:e1:0d:da:8e:35:80:35:54:5b:67:d2:3d:
17:c3:f1:17:4c:15:ec:7c:fd:e2:d1:8c:ab:1a:7f:
13:08:1e:18:f8:e0:08:fc:a9:91:07:44:0e:e4:b9:
61:41:ee:e7:7b:75:d0:be:19:24:97:b0:0e:be:77:
77:d2:fc:bc:0b:31:6a:8d:62:9b:00:38:aa:5a:31:
dc:88:ef:91:ef:d0:83:dd:f0:21:85:1a:88:44:20:
53:79:c4:93:e6:b1:52:eb:7e:e4:ba:78:0f:fc:42:
94:c3:16:cc:48:3b:74:58:44:a2:53:c3:df:05:31:
e7:9e:49:d1:11:ce:45:22:98:e4:7e:9e:fd:13:44:
69:4f:b5:11:8a:8f:f7:6f:da:ae:b6:f8:66:c6:9f:
d7:af:52:ca:42:70:fd:5f:4e:4f:d5:e4:64:47:03:
8d:0b:45:cb:26:b8:e2:bb:c5:20:7b:4b:db:9c:90:
d2:6c:7c:ad:84:a8:37:b9:8e:ef:95:e5:a1:76:08:
45:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:89:C9:D3:57:08:0B:B1:86:12:E8:D8:80:53:62:2C:DC:17:EB:0D
X509v3 Authority Key Identifier:
keyid:B2:AB:D4:72:89:CC:6C:D9:C1:C8:02:74:2A:2C:ED:50:C6:34:BD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqvUconMbNnByAJ0KiztUMY0vTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:04:3d:a4:28:f1:7a:35:84:65:d2:3b:35:52:9b:4a:1a:26:
02:d6:3b:00:a0:15:a7:c9:cf:54:75:38:db:c1:5c:08:ab:da:
d5:be:26:ec:39:e4:5a:97:9d:8d:67:47:55:4a:d2:d3:07:ea:
1b:da:02:18:e6:40:05:c8:ff:5b:ab:5f:1c:d3:52:c5:1a:e5:
43:cf:4c:76:95:96:b3:72:23:c2:21:38:ec:38:8e:5d:20:b3:
7b:1c:36:0a:05:f6:85:1b:97:6c:c4:e8:de:61:ab:40:cb:a4:
3d:6a:b6:fd:ea:ff:06:e6:57:5f:30:e7:29:a2:2f:17:ce:8c:
d6:a8:b4:6c:e0:3e:b8:33:c0:8e:d8:70:0f:f4:29:a9:3a:73:
0b:5a:0a:c4:bc:f9:e3:a4:ff:01:2f:d8:2b:3a:d1:63:9c:d7:
df:3c:76:0b:d6:6f:46:52:a3:4e:89:6c:0d:6e:a0:9b:3a:5d:
5f:be:f6:83:8e:20:ab:f8:94:21:5f:5f:0f:ac:fc:5b:0e:cb:
df:17:54:aa:75:1f:8e:23:dc:2c:d0:a7:9e:88:c1:1f:2c:49:
7a:28:f6:f3:9e:bb:fd:54:19:75:e2:3c:0f:e8:a8:2d:77:e8:
ef:31:4d:19:70:b8:f6:cc:b7:b9:0d:7b:60:00:b3:59:a1:6e:
c8:c2:a9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:46 2026 by rpki-client