Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
File: sqT-PDcZVbkhLK3mScvxfF_FjuI.mft (raw, json)
Hash identifier: DStdIhyUOk9cUCpd0q7O687f3d85sdVPDC4ySU/v2Gc=
Subject key identifier: 3F:BB:00:F5:B7:DD:AF:40:9F:FD:63:23:59:E1:5F:BC:DB:94:F1:24
Authority key identifier: B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
Certificate issuer: /CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Certificate serial: 019CEA813623E2CB2E5DB7DD0E6426EBA559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
Manifest number: 041A
Signing time: Sat 14 Mar 2026 04:01:02 +0000
Manifest this update: Sat 14 Mar 2026 04:01:02 +0000
Manifest next update: Sun 15 Mar 2026 04:01:02 +0000
Files and hashes: 1: sqT-PDcZVbkhLK3mScvxfF_FjuI.crl (hash: cbS7l6ZcY9zA1QhRrrQbYD/CsDz4Hziy1g3A8CK/wPE=)
2: wS-jaaEMUTGS5DqxQuN95qXPBc8.roa (hash: 06h366lvWqKC+ftnxISHm/f+AJodcmHOYMbCi4Dh0pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ea:81:36:23:e2:cb:2e:5d:b7:dd:0e:64:26:eb:a5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Validity
Not Before: Mar 14 04:01:02 2026 GMT
Not After : Mar 15 04:01:02 2026 GMT
Subject: CN=3fbb00f5b7ddaf409ffd632359e15fbcdb94f124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:af:7f:36:88:9c:43:28:93:4f:4a:ed:db:01:
db:d0:1a:13:09:01:eb:90:71:08:f7:69:49:06:09:
79:ec:5a:ca:eb:03:bd:94:43:70:63:23:89:6e:e1:
d3:b5:26:33:60:80:26:65:9b:76:f4:43:3e:77:42:
f1:11:96:50:d2:48:e7:2a:4c:2e:4c:7c:af:43:f0:
61:56:31:cb:25:4f:9b:84:be:e7:7d:22:8d:36:94:
46:e6:53:e5:4b:1a:9d:e0:98:1e:55:0a:77:6c:07:
93:ee:77:bc:24:03:68:4e:65:94:eb:92:0f:b3:c0:
e7:64:ab:dd:f9:cd:01:94:11:2f:b7:18:c1:bb:00:
d6:66:79:6c:40:0f:05:c4:cd:75:bc:a3:1a:59:8a:
6d:d2:87:5d:b9:69:6f:17:40:f5:3d:ea:2c:d7:0f:
ac:28:7f:12:f3:41:89:5b:53:10:94:4a:c6:b4:ee:
34:81:90:b5:f2:3b:48:9d:a3:dc:04:39:76:f3:53:
30:04:3e:23:f9:a8:e3:d6:48:1d:89:8c:d2:2a:f4:
15:50:b5:79:66:9e:b5:5b:c1:47:d7:a3:b1:47:54:
d3:fb:8d:2e:b9:24:fc:89:c9:c0:32:f0:b6:9a:91:
e1:53:70:11:fa:f8:0e:0e:eb:0c:9b:82:bb:49:c6:
cb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BB:00:F5:B7:DD:AF:40:9F:FD:63:23:59:E1:5F:BC:DB:94:F1:24
X509v3 Authority Key Identifier:
keyid:B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:81:77:93:14:89:83:4a:4e:a0:43:1b:d9:f7:2e:4e:b5:aa:
b0:16:70:81:b0:d8:1c:c1:ef:6b:3b:22:0a:c6:ee:06:99:bc:
40:d4:d4:7f:01:c9:57:b1:e5:0c:58:d4:38:7d:3f:42:60:32:
98:10:a5:5c:7f:82:a4:a1:b0:11:bb:ab:26:4c:6b:2b:e5:70:
ca:13:dc:80:9c:26:e8:e4:eb:0a:bf:0d:13:73:9d:c0:7d:1e:
3b:8a:d1:93:96:3a:81:a0:51:09:8f:5a:82:4a:df:e2:fd:ca:
8b:e3:26:cd:0d:17:cc:0e:3e:c6:1d:42:81:4b:9f:76:c6:9a:
9f:a7:58:d8:07:44:98:4a:a4:33:51:50:c6:1e:ee:42:56:53:
8b:34:59:bd:9d:1f:ec:b7:4d:d6:a7:23:66:17:b6:b3:ab:ae:
f8:58:66:1f:24:2c:8e:f5:29:41:cb:8e:0f:a2:10:a4:21:10:
e0:ca:4a:22:e5:77:7d:6f:d9:48:cc:82:ed:be:cb:63:39:78:
a5:db:e5:e3:68:9d:10:4f:e5:0c:6a:50:4f:8a:bb:5d:2d:89:
d2:16:65:8a:65:08:93:b3:84:7e:1e:d5:29:83:3b:eb:e2:3a:
32:b6:a6:89:54:87:62:d9:a5:ec:e0:ff:c9:da:fe:b4:b9:b1:
b5:95:99:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 11:41:47 2026 by rpki-client