Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
File: SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft (raw, json)
Hash identifier: 4Smqro45uih5n+ux5se5llAmEzYG66/wTsawQG0JnhY=
Subject key identifier: AF:77:63:61:09:48:0E:1C:2E:E0:FC:7A:DE:12:37:E9:E5:38:AD:81
Authority key identifier: 49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
Certificate issuer: /CN=490db999ca4ce287c5c92ab167a500902259bb05
Certificate serial: 01A08F44A9194B3679612190F1811541970C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
Manifest number: 1A4C
Signing time: Fri 11 Sep 2026 07:00:36 +0000
Manifest this update: Fri 11 Sep 2026 07:00:36 +0000
Manifest next update: Sat 12 Sep 2026 07:00:36 +0000
Files and hashes: 1: SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl (hash: oqN/yWa1XI4/thFjRPPbU1p7axWUri/bsnh5/4YSudM=)
2: hAZrKewTVxZT3GF5DqzKsU9bNKo.roa (hash: fsGaTWUHmLGtuoOa159GIKQVUnBG8uk4RWTcKenk10M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:44:a9:19:4b:36:79:61:21:90:f1:81:15:41:97:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490db999ca4ce287c5c92ab167a500902259bb05
Validity
Not Before: Sep 11 07:00:36 2026 GMT
Not After : Sep 12 07:00:36 2026 GMT
Subject: CN=af77636109480e1c2ee0fc7ade1237e9e538ad81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9b:92:12:7d:be:92:c0:98:d1:85:a6:9b:e2:
35:22:7b:a9:fe:06:8c:13:68:4c:c4:30:2a:45:ee:
a2:cd:77:a8:ce:3e:75:07:b4:24:16:13:df:d7:97:
aa:b9:8b:f8:f5:ce:ed:3e:f8:76:ce:29:3e:59:09:
93:b5:b3:a2:cd:9c:86:bf:a3:12:e9:64:5d:97:54:
2f:38:a5:0f:57:c2:43:6a:a9:6f:7b:23:a9:7e:85:
aa:ef:fe:48:e6:86:fb:c7:8d:a8:af:92:65:1d:33:
94:bb:54:4a:20:94:e3:3e:a6:8e:49:97:3c:b7:2b:
b0:91:d8:82:cb:5e:67:56:6d:a4:2f:7f:5b:20:8c:
31:4b:b5:ba:20:35:1b:c1:ab:2f:3f:b7:ab:6c:85:
dc:8d:7e:f1:cc:19:64:cb:e8:f3:54:d9:28:53:4f:
fa:b0:28:01:69:5a:8d:3c:d5:a2:47:0b:2c:e4:d8:
4f:6e:97:5b:8c:2a:dd:f6:3c:07:ea:ce:a0:bf:96:
db:8d:63:d2:c5:28:65:7a:aa:ac:2f:2f:bc:71:85:
41:8a:2c:17:6e:64:25:c9:17:14:51:bc:22:b5:12:
9d:c3:eb:4a:dd:91:15:96:fb:c9:6e:e4:f3:c6:25:
e0:83:57:60:db:b0:6e:86:30:e4:48:5e:1d:0c:4b:
e0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:77:63:61:09:48:0E:1C:2E:E0:FC:7A:DE:12:37:E9:E5:38:AD:81
X509v3 Authority Key Identifier:
keyid:49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3d:08:ac:44:5f:10:4f:f2:97:68:e7:5d:cb:62:33:57:e0:
18:9d:be:9a:09:63:cb:37:fd:b2:a0:2d:46:7c:e5:b6:09:e6:
f2:86:27:75:45:11:a3:2d:1f:51:ff:ef:da:fb:a0:de:47:7e:
39:10:97:9e:d8:01:db:72:5e:f7:62:ab:b4:8c:89:aa:21:cb:
86:9f:e7:3e:bf:3e:ea:86:85:2e:b9:0a:13:87:eb:b5:e1:d4:
f6:cc:e4:8e:69:55:1f:24:8c:61:4d:63:12:19:7e:23:37:90:
56:50:4f:ad:41:3a:35:8a:da:04:de:76:25:7d:7c:ec:c3:fa:
d0:26:a0:0a:3a:27:01:3a:c3:2a:92:80:b0:7e:9f:61:c3:66:
44:59:ae:2c:e7:f3:40:3d:66:60:2e:f1:ea:5c:a7:7e:96:95:
85:94:ae:5e:ff:22:04:90:f5:e9:90:8c:7b:0b:56:36:54:3d:
e2:40:d2:bd:df:f0:75:27:c0:82:2a:d5:f3:d6:74:91:f3:06:
3b:d6:d4:69:25:b7:dd:5b:89:d4:46:e2:56:fc:d5:03:ed:be:
09:0d:a9:52:1f:6f:0b:6d:a4:47:41:f5:eb:9f:07:86:c3:86:
c7:53:d1:32:8b:a5:2f:24:29:08:46:80:2a:3d:cb:c9:8f:9f:
a0:27:25:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:20:52 2026 by rpki-client