Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft
File: sqvUconMbNnByAJ0KiztUMY0vTs.mft (raw, json)
Hash identifier: w1Cz/TSbhdJ26JNwuLpvTh0JENRpkiFw5EWJ2ErG/oQ=
Subject key identifier: 4E:2A:46:D3:1C:70:AC:56:05:01:5B:2D:09:7A:73:27:9B:77:59:4A
Authority key identifier: B2:AB:D4:72:89:CC:6C:D9:C1:C8:02:74:2A:2C:ED:50:C6:34:BD:3B
Certificate issuer: /CN=b2abd47289cc6cd9c1c802742a2ced50c634bd3b
Certificate serial: 01A092B39EBCCEA32C2C1B8B08859EF84523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqvUconMbNnByAJ0KiztUMY0vTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft
Manifest number: 0C20
Signing time: Fri 11 Sep 2026 23:00:40 +0000
Manifest this update: Fri 11 Sep 2026 23:00:40 +0000
Manifest next update: Sat 12 Sep 2026 23:00:40 +0000
Files and hashes: 1: omOIkUQB-zmqOTkf6AoePranFhs.roa (hash: y1D2TurDR5SSMCMDBMYJgq8CTPaet7Qns9/ynfcmAsc=)
2: sqvUconMbNnByAJ0KiztUMY0vTs.crl (hash: MbYOmXO1by2ckOTfoTad4AAB9YllbM99SwHrfwuaiuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqvUconMbNnByAJ0KiztUMY0vTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 21:40:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:92:b3:9e:bc:ce:a3:2c:2c:1b:8b:08:85:9e:f8:45:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2abd47289cc6cd9c1c802742a2ced50c634bd3b
Validity
Not Before: Sep 11 23:00:40 2026 GMT
Not After : Sep 12 23:00:40 2026 GMT
Subject: CN=4e2a46d31c70ac5605015b2d097a73279b77594a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1b:b6:d7:18:5a:fe:5b:af:15:53:ee:1a:2d:
f7:86:c3:ac:58:3d:4b:1e:c5:a9:69:46:96:8f:3f:
8c:94:7e:0b:bc:db:2a:6b:ee:44:f3:72:0c:99:22:
13:7e:c0:bb:1a:d1:ec:ae:33:ba:1c:0b:0f:4d:4c:
5f:25:a1:6b:99:80:18:b1:2d:4d:53:07:7b:0e:05:
c2:03:50:e3:e8:34:75:fc:98:8f:05:af:62:0b:de:
76:21:30:5c:e0:69:55:e8:b5:40:f6:cb:d2:88:7e:
6c:59:2f:2c:57:4b:c7:a9:86:ed:a8:33:b6:39:db:
e2:fc:d9:fa:4e:c2:13:af:70:a1:21:f4:bf:52:bb:
ee:0c:f9:3f:4d:c2:6f:e1:eb:3c:0e:dd:12:ef:ad:
04:6f:b7:30:72:3b:ca:c7:68:1b:04:27:14:1b:f5:
1c:1d:b5:5e:25:ec:47:28:4a:7c:e4:e3:c5:84:2c:
99:99:a4:15:c2:32:13:0a:c9:98:ab:4d:d1:0f:f7:
ee:bc:e5:c0:bb:62:7c:50:be:53:e4:5d:7f:57:6c:
5f:18:f7:84:a5:2e:98:4a:6e:8b:78:22:ca:9b:29:
f3:f1:d3:21:c0:e8:39:62:43:6c:79:2d:8c:b1:c0:
b0:fb:c5:a3:00:3e:f5:5c:ac:1a:cc:b7:f0:91:45:
aa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2A:46:D3:1C:70:AC:56:05:01:5B:2D:09:7A:73:27:9B:77:59:4A
X509v3 Authority Key Identifier:
keyid:B2:AB:D4:72:89:CC:6C:D9:C1:C8:02:74:2A:2C:ED:50:C6:34:BD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqvUconMbNnByAJ0KiztUMY0vTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a5:c7:07:a7:56:90:5e:73:d3:e7:7c:c8:a5:3f:ae:2c:5b:
67:c4:80:56:3b:31:ef:01:91:06:33:29:ee:75:0b:20:d4:62:
e5:f1:1b:21:41:b7:fe:17:00:f6:16:05:48:f6:c8:2e:0c:be:
12:61:b7:37:de:3f:e5:b1:2c:f1:c3:ea:5c:12:db:15:bb:d2:
de:75:ea:72:82:29:79:f8:61:03:0d:09:72:3c:a2:12:61:36:
0d:a3:7a:c3:b3:55:ad:04:2a:86:7e:ed:c0:7e:fc:64:81:93:
ec:bc:64:5e:e6:12:b8:85:d1:3e:59:ff:e4:94:6f:c5:8f:0d:
0e:ab:9b:60:42:ee:ab:50:04:da:39:0e:57:f3:8a:a1:14:25:
41:fa:a9:e0:61:a1:29:e8:91:70:1e:ab:0a:07:ba:16:3c:05:
fd:25:b5:ff:a3:c1:af:9f:f1:a8:dd:c6:fd:6a:31:2e:e4:b6:
e8:37:b6:6e:69:01:de:81:9b:85:06:cf:99:ed:95:f3:e7:f0:
a0:52:95:b0:a8:d3:1f:a8:6d:f6:71:ef:3d:39:63:c6:91:c7:
14:f9:8c:4f:aa:91:27:93:78:6e:11:f2:8f:c4:87:51:66:1b:
28:27:93:7f:2f:65:2b:6b:c7:39:b7:38:1c:4e:2c:c7:73:c8:
1e:37:e6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 06:02:56 2026 by rpki-client