Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
File: SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft (raw, json)
Hash identifier: DJM6aKHwjgVplf2xQ9OPaKYFSEY/jXHUf6F+kLjo3mg=
Subject key identifier: 3B:7E:08:B6:66:86:27:1C:FE:7A:B0:9E:EF:2C:16:3D:ED:7C:08:27
Authority key identifier: 4A:A2:FA:6F:67:70:F7:2D:80:84:BC:6C:18:30:58:B8:0E:83:8D:73
Certificate issuer: /CN=4aa2fa6f6770f72d8084bc6c183058b80e838d73
Certificate serial: 019D37895A5C32AF2832F345F39CD0507A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
Manifest number: 046D
Signing time: Sun 29 Mar 2026 03:00:41 +0000
Manifest this update: Sun 29 Mar 2026 03:00:41 +0000
Manifest next update: Mon 30 Mar 2026 03:00:41 +0000
Files and hashes: 1: SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl (hash: hqzRXhTUGfCSQekhc7fDrXA1BF9jN24tsNaxV583yJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:5a:5c:32:af:28:32:f3:45:f3:9c:d0:50:7a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa2fa6f6770f72d8084bc6c183058b80e838d73
Validity
Not Before: Mar 29 03:00:41 2026 GMT
Not After : Mar 30 03:00:41 2026 GMT
Subject: CN=3b7e08b66686271cfe7ab09eef2c163ded7c0827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e8:20:a5:cc:6a:f0:5f:c9:6c:62:7e:c9:6f:
cf:ef:4d:c6:4a:28:ce:6e:84:c1:d5:f9:1e:7c:e4:
6c:85:62:df:70:1c:c0:ae:af:6e:24:d3:bd:84:ea:
c9:e2:46:29:93:a1:b6:c9:ed:b9:e7:26:5f:c1:6e:
16:0a:10:00:0f:99:16:65:72:ba:37:eb:e0:df:03:
da:7f:51:3a:a3:7e:75:7d:47:d7:61:40:ff:0b:7f:
4b:02:2f:dc:f2:e9:11:bd:fb:c3:2b:75:48:af:34:
5c:b8:e3:b5:21:6d:ed:b0:a9:1e:c0:a1:b5:9f:59:
a8:68:77:34:ae:7c:f7:dd:79:82:0b:a3:20:8a:a9:
4a:3f:be:f7:b9:9e:0a:ed:01:be:56:51:ab:cc:18:
36:e1:79:00:51:e8:b0:91:e7:fd:fa:1f:e1:37:99:
65:75:73:a3:4a:a1:88:18:74:cc:4e:c1:df:fd:cc:
de:13:cd:70:84:b8:80:b4:a9:c1:ab:4c:b6:59:1d:
9c:c3:4f:2a:eb:8d:18:9d:6e:53:f3:6c:98:0e:6f:
1a:f4:f3:3f:a4:a5:16:84:5c:5a:15:a4:2f:ae:36:
ba:6e:8a:f0:70:bc:58:26:e0:a0:1f:9a:bf:99:fc:
30:9d:c6:ed:99:72:d2:3a:3e:d6:7e:18:66:34:2d:
69:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7E:08:B6:66:86:27:1C:FE:7A:B0:9E:EF:2C:16:3D:ED:7C:08:27
X509v3 Authority Key Identifier:
keyid:4A:A2:FA:6F:67:70:F7:2D:80:84:BC:6C:18:30:58:B8:0E:83:8D:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:76:3b:ba:a3:2a:ae:bf:97:c2:5e:4a:5b:96:45:98:c5:6b:
f4:4d:1f:0d:08:16:c7:3a:27:00:ae:10:a9:b9:07:68:26:86:
9b:71:76:b6:07:fe:68:e8:24:f4:d8:77:f6:9c:0d:80:b1:8d:
22:15:8c:97:37:1c:46:e7:6a:b0:e8:fa:8e:a8:0b:22:24:11:
9d:76:65:45:54:85:a3:9d:fd:e9:fd:67:be:ec:69:d8:e4:70:
6c:4b:a2:28:db:45:14:a0:ed:d5:ed:a7:ee:fd:84:66:f0:39:
ef:fd:99:ea:70:48:38:66:87:13:2b:93:f7:1e:78:96:ee:de:
2d:ae:e2:09:45:0d:5c:0e:c1:a5:8a:db:92:9c:7a:27:d8:23:
7b:6c:65:dd:4b:53:28:92:65:13:a0:b1:25:45:2e:9d:91:46:
7b:6d:05:67:3b:62:11:4e:ab:e5:39:16:cc:13:ff:d2:9d:62:
2d:d1:a3:10:61:7b:81:1d:0f:f6:ff:4f:97:e0:a7:39:d5:42:
c8:9d:2c:82:a1:94:3c:03:29:df:f5:58:c5:0c:db:d5:2b:ef:
7b:a9:7f:e3:15:84:f1:6e:e0:ad:c4:f7:67:80:51:6b:c1:15:
af:d7:26:1b:10:46:0a:93:db:46:89:fb:05:64:22:06:88:2a:
cf:5a:b0:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iVpcMq8oMvNF85zQUHpMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYTJmYTZmNjc3MGY3MmQ4MDg0YmM2YzE4MzA1OGI4MGU4
MzhkNzMwHhcNMjYwMzI5MDMwMDQxWhcNMjYwMzMwMDMwMDQxWjAzMTEwLwYDVQQD
EygzYjdlMDhiNjY2ODYyNzFjZmU3YWIwOWVlZjJjMTYzZGVkN2MwODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Oggpcxq8F/JbGJ+yW/P703GSijO
boTB1fkefORshWLfcBzArq9uJNO9hOrJ4kYpk6G2ye255yZfwW4WChAAD5kWZXK6
N+vg3wPaf1E6o351fUfXYUD/C39LAi/c8ukRvfvDK3VIrzRcuOO1IW3tsKkewKG1
n1moaHc0rnz33XmCC6MgiqlKP773uZ4K7QG+VlGrzBg24XkAUeiwkef9+h/hN5ll
dXOjSqGIGHTMTsHf/czeE81whLiAtKnBq0y2WR2cw08q640YnW5T82yYDm8a9PM/
pKUWhFxaFaQvrja6borwcLxYJuCgH5q/mfwwncbtmXLSOj7WfhhmNC1pNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDt+CLZmhicc/nqwnu8sFj3tfAgnMB8GA1UdIwQY
MBaAFEqi+m9ncPctgIS8bBgwWLgOg41zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3FMNmIyZHc5eTJBaEx4c0dEQll1QTZEalhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yOTdiZDgtYmVhZi00NjA5LTljNjAt
NzQ3NGY5MTZkYjQ3LzEvU3FMNmIyZHc5eTJBaEx4c0dEQll1QTZEalhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yOTdiZDgtYmVhZi00NjA5LTljNjAtNzQ3NGY5MTZkYjQ3
LzEvU3FMNmIyZHc5eTJBaEx4c0dEQll1QTZEalhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHY7uqMq
rr+Xwl5KW5ZFmMVr9E0fDQgWxzonAK4QqbkHaCaGm3F2tgf+aOgk9Nh39pwNgLGN
IhWMlzccRudqsOj6jqgLIiQRnXZlRVSFo5396f1nvuxp2ORwbEuiKNtFFKDt1e2n
7v2EZvA57/2Z6nBIOGaHEyuT9x54lu7eLa7iCUUNXA7BpYrbkpx6J9gje2xl3UtT
KJJlE6CxJUUunZFGe20FZztiEU6r5TkWzBP/0p1iLdGjEGF7gR0P9v9Pl+CnOdVC
yJ0sgqGUPAMp3/VYxQzb1Svve6l/4xWE8W7grcT3Z4BRa8EVr9cmGxBGCpPbRon7
BWQiBogqz1qwbQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:40 2026 by rpki-client