Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
File: sqT-PDcZVbkhLK3mScvxfF_FjuI.mft (raw, json)
Hash identifier: 6Eu+Ym4+EtjfUL3RZJEMpB0VILB7uNxBtzaidOpgJbc=
Subject key identifier: 28:F3:72:90:E4:A2:37:D6:60:53:5C:B9:CB:32:B7:34:55:7D:7B:9D
Authority key identifier: B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
Certificate issuer: /CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Certificate serial: 019DF8DF05F402B2C09F5F4405ECCDBEF711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
Manifest number: 04A6
Signing time: Tue 05 May 2026 16:00:58 +0000
Manifest this update: Tue 05 May 2026 16:00:58 +0000
Manifest next update: Wed 06 May 2026 16:00:58 +0000
Files and hashes: 1: sqT-PDcZVbkhLK3mScvxfF_FjuI.crl (hash: DGyKvc0pkPis/sLqwsxBWvThlqDrhmn4N9/WLnWRQSc=)
2: wS-jaaEMUTGS5DqxQuN95qXPBc8.roa (hash: 06h366lvWqKC+ftnxISHm/f+AJodcmHOYMbCi4Dh0pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:df:05:f4:02:b2:c0:9f:5f:44:05:ec:cd:be:f7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Validity
Not Before: May 5 16:00:58 2026 GMT
Not After : May 6 16:00:58 2026 GMT
Subject: CN=28f37290e4a237d660535cb9cb32b734557d7b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:13:23:2e:77:0a:77:71:50:a6:75:e7:7f:8a:
f4:88:f3:4f:4a:88:d5:a8:9d:ac:ef:fb:a0:37:8f:
31:16:4f:3f:a3:d7:99:65:f5:f0:05:df:00:4e:36:
0f:40:08:d4:29:b7:aa:e1:ee:da:0f:46:da:5e:85:
b9:20:53:0b:80:7a:8c:bc:a5:43:e2:c9:9a:b5:df:
ff:d1:c0:e3:48:f9:ab:3d:79:4f:2b:f5:84:dc:e9:
f5:03:1f:1e:60:35:93:87:59:2f:48:be:06:ca:96:
85:ca:5d:9a:d1:34:2a:58:b9:b2:2a:38:4c:79:1d:
78:84:cb:9a:dc:1b:f0:21:b0:92:fa:e0:f4:4b:28:
c0:ae:e5:aa:44:c2:0e:7b:24:a8:3a:67:03:f3:22:
41:14:55:f1:61:85:84:a1:24:c6:29:be:0d:b9:b4:
42:79:41:57:0a:c6:d8:33:67:a2:34:73:f8:3a:1d:
71:2d:90:ef:aa:94:ba:6a:c8:b5:96:be:e8:5c:18:
21:e9:dd:b2:4b:e0:68:79:56:0f:74:60:14:f8:9d:
cb:0f:f8:15:92:d4:35:45:46:c7:e6:9d:b7:be:6b:
04:6d:b6:df:fc:63:83:a0:f7:09:e3:af:79:d7:47:
a0:66:b4:a5:1d:64:c7:57:dc:94:e2:cd:9c:6a:f5:
8a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F3:72:90:E4:A2:37:D6:60:53:5C:B9:CB:32:B7:34:55:7D:7B:9D
X509v3 Authority Key Identifier:
keyid:B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fd:53:8f:ac:d7:6b:8d:c5:c0:51:5e:d8:3f:31:0c:af:60:
c4:97:c6:b9:91:ba:2d:b4:d7:74:18:97:b9:5d:24:7b:e5:37:
d4:17:3e:01:cd:6a:3c:a2:49:e6:fa:ba:97:af:cf:22:98:a0:
6b:9d:90:ff:a9:29:fa:26:b6:8c:aa:54:a4:94:44:6c:59:1c:
dd:b8:e0:dd:7c:36:ef:00:d7:f5:da:e6:70:e3:e7:f9:c7:5e:
0b:62:78:16:04:5a:08:99:88:68:91:df:a1:3c:a4:9b:68:30:
b4:bf:2d:9f:e3:de:62:b2:25:79:cf:ed:c6:8a:c3:44:e1:ff:
a8:26:46:11:39:61:f3:b0:de:fd:ee:91:4f:12:21:2f:dc:0a:
50:a7:27:9f:23:60:e6:df:ed:95:32:96:6c:a8:c0:c2:cb:4f:
48:3d:29:68:b8:c5:cb:2a:6f:1a:29:56:4c:19:ed:a4:5e:f1:
44:60:ed:1b:e4:7c:33:2d:98:36:d7:48:eb:a1:0a:5b:05:a6:
22:67:04:f2:91:27:56:92:2e:49:58:21:19:f5:41:ca:c9:ba:
b8:0e:31:39:fa:f7:aa:92:53:0c:93:66:5c:07:5c:16:b6:38:
70:47:2f:8c:a4:65:a2:fe:92:02:d9:2d:10:ac:85:43:58:e2:
01:77:79:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 20:11:13 2026 by rpki-client