Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
File: SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft (raw, json)
Hash identifier: EZvK+M7Nm8YHL6hOrDRicjt1tHgqKcbEY/48BEG3TF0=
Subject key identifier: FC:41:4C:60:AC:1B:96:03:8B:92:A7:E8:B1:AB:C0:92:42:E4:21:5D
Authority key identifier: 49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
Certificate issuer: /CN=490db999ca4ce287c5c92ab167a500902259bb05
Certificate serial: 019D37C0B19BB5C3435D6A163261500FF6DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:01:08 +0000
Manifest this update: Sun 29 Mar 2026 04:01:08 +0000
Manifest next update: Mon 30 Mar 2026 04:01:08 +0000
Files and hashes: 1: SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl (hash: ji1azRiJ6TfGDaP+O509FtD4BFrhjMVi3VgH/DhjQgY=)
2: hAZrKewTVxZT3GF5DqzKsU9bNKo.roa (hash: fsGaTWUHmLGtuoOa159GIKQVUnBG8uk4RWTcKenk10M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b1:9b:b5:c3:43:5d:6a:16:32:61:50:0f:f6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490db999ca4ce287c5c92ab167a500902259bb05
Validity
Not Before: Mar 29 04:01:08 2026 GMT
Not After : Mar 30 04:01:08 2026 GMT
Subject: CN=fc414c60ac1b96038b92a7e8b1abc09242e4215d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:14:bc:a4:24:83:64:16:f7:6e:52:1b:90:03:
ee:b2:b4:95:09:8a:61:b2:bc:60:8c:42:eb:03:6d:
15:d2:80:30:d2:af:09:d3:99:6e:11:16:31:03:f6:
74:32:3e:fb:3d:ea:06:78:32:5b:bc:d9:a8:2c:66:
d6:c5:91:2f:60:ba:1d:a1:34:3f:ac:7f:81:31:5e:
af:1d:11:5a:4f:42:61:fb:02:bb:91:2d:37:24:a4:
01:ad:47:41:7e:a6:64:e3:e8:85:ec:ed:10:7b:10:
ca:03:50:6b:4a:b0:34:77:ff:1d:21:23:e2:71:4a:
5b:89:2c:0b:4c:86:de:79:72:56:ba:5e:3f:7b:b2:
78:59:e7:27:5c:c9:d4:2d:39:b0:f0:db:15:9f:bf:
43:9c:a2:25:b1:f8:47:8e:18:37:ea:4d:6e:79:a8:
ef:ee:7e:c9:f3:f2:03:f2:f8:57:bc:c8:1e:be:be:
c1:1b:84:10:a7:57:75:78:58:96:ee:90:8b:7c:21:
36:a0:2e:74:dc:3b:e8:75:93:39:90:d1:27:1b:4a:
aa:d8:dd:1d:67:08:c2:77:c2:a6:0d:70:e8:e3:45:
49:de:a5:77:b8:12:f5:52:56:69:63:fa:7e:6d:bb:
f1:63:e8:8f:0e:7d:d2:38:a3:91:da:46:8e:85:f0:
d7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:41:4C:60:AC:1B:96:03:8B:92:A7:E8:B1:AB:C0:92:42:E4:21:5D
X509v3 Authority Key Identifier:
keyid:49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:41:d3:cc:f0:42:6f:43:15:45:5f:9d:92:5f:d7:dc:64:93:
cb:44:7b:13:26:a6:ba:ca:d9:4a:af:a3:a4:fb:13:0f:44:41:
f7:97:1b:3f:60:7d:ea:93:fd:1c:76:9c:77:62:6f:d4:9d:63:
c6:9e:f9:ea:ad:33:66:c8:79:cd:c2:31:6f:5e:a0:a8:7b:0c:
4f:ed:f3:65:3c:50:d1:ff:bb:70:24:f0:b8:b9:9a:2b:7b:77:
19:1f:d6:83:36:82:32:81:78:b5:22:c8:e1:66:8c:f6:34:c5:
d6:9b:ba:96:d8:be:02:a8:a3:1a:dc:1c:81:cf:6d:67:7d:d7:
19:40:46:43:ab:6e:1f:05:a0:cb:96:ed:c7:d5:1b:31:29:e9:
74:a7:95:52:78:1b:3c:62:2a:72:e9:d9:14:37:59:77:d9:09:
69:50:e5:6b:13:42:07:1b:17:a7:49:20:ef:80:b0:2d:67:d5:
2b:92:7b:53:fc:4d:45:24:fe:03:68:52:0e:32:f5:36:41:11:
aa:4c:6d:29:4a:0e:52:70:f1:67:a7:7c:4b:73:72:89:22:08:
61:25:66:8a:0c:9a:81:54:c5:4a:ad:3a:92:0d:b2:40:db:7b:
9c:ee:2c:c2:af:a3:93:ba:a1:a6:cf:99:d7:46:89:33:22:e2:
04:cf:51:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wLGbtcNDXWoWMmFQD/bdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MGRiOTk5Y2E0Y2UyODdjNWM5MmFiMTY3YTUwMDkwMjI1
OWJiMDUwHhcNMjYwMzI5MDQwMTA4WhcNMjYwMzMwMDQwMTA4WjAzMTEwLwYDVQQD
EyhmYzQxNGM2MGFjMWI5NjAzOGI5MmE3ZThiMWFiYzA5MjQyZTQyMTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBS8pCSDZBb3blIbkAPusrSVCYph
srxgjELrA20V0oAw0q8J05luERYxA/Z0Mj77PeoGeDJbvNmoLGbWxZEvYLodoTQ/
rH+BMV6vHRFaT0Jh+wK7kS03JKQBrUdBfqZk4+iF7O0QexDKA1BrSrA0d/8dISPi
cUpbiSwLTIbeeXJWul4/e7J4WecnXMnULTmw8NsVn79DnKIlsfhHjhg36k1ueajv
7n7J8/ID8vhXvMgevr7BG4QQp1d1eFiW7pCLfCE2oC503DvodZM5kNEnG0qq2N0d
ZwjCd8KmDXDo40VJ3qV3uBL1UlZpY/p+bbvxY+iPDn3SOKOR2kaOhfDXwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxBTGCsG5YDi5Kn6LGrwJJC5CFdMB8GA1UdIwQY
MBaAFEkNuZnKTOKHxckqsWelAJAiWbsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82ZjcxZjMtNjM5OS00OTEzLWI5OGUt
OThlMjVlMDQ2OTA4LzEvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82ZjcxZjMtNjM5OS00OTEzLWI5OGUtOThlMjVlMDQ2OTA4
LzEvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUHTzPBC
b0MVRV+dkl/X3GSTy0R7EyamusrZSq+jpPsTD0RB95cbP2B96pP9HHacd2Jv1J1j
xp756q0zZsh5zcIxb16gqHsMT+3zZTxQ0f+7cCTwuLmaK3t3GR/WgzaCMoF4tSLI
4WaM9jTF1pu6lti+AqijGtwcgc9tZ33XGUBGQ6tuHwWgy5btx9UbMSnpdKeVUngb
PGIqcunZFDdZd9kJaVDlaxNCBxsXp0kg74CwLWfVK5J7U/xNRST+A2hSDjL1NkER
qkxtKUoOUnDxZ6d8S3NyiSIIYSVmigyagVTFSq06kg2yQNt7nO4swq+jk7qhps+Z
10aJMyLiBM9RSw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:29 2026 by rpki-client