Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
File: sq-PF3TgWSXyTkHe5p5bYj2axj0.mft (raw, json)
Hash identifier: anC7q8tjtqTgubk1BQsM3zHUTUiCZwoyPgHr4nUMZSo=
Subject key identifier: DD:76:ED:6D:F9:DC:5E:C3:AB:5D:18:C3:9A:B0:A6:1E:BA:24:4F:8F
Authority key identifier: B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D
Certificate issuer: /CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d
Certificate serial: 019CE5914056E144D05A3C23A070B00F076F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
Manifest number: 1866
Signing time: Fri 13 Mar 2026 05:00:27 +0000
Manifest this update: Fri 13 Mar 2026 05:00:27 +0000
Manifest next update: Sat 14 Mar 2026 05:00:27 +0000
Files and hashes: 1: VFGEJNzLzqbtn_xoW_8uAp03Cps.roa (hash: vNmZGriew68XIyyo5twCVk3Ozs6RyZWncGa/e7gLj+Q=)
2: sq-PF3TgWSXyTkHe5p5bYj2axj0.crl (hash: 8La86hMeaRLnotH1oNHGYasuJkqvc72VqVcC4ivUsvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:40:56:e1:44:d0:5a:3c:23:a0:70:b0:0f:07:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d
Validity
Not Before: Mar 13 05:00:27 2026 GMT
Not After : Mar 14 05:00:27 2026 GMT
Subject: CN=dd76ed6df9dc5ec3ab5d18c39ab0a61eba244f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ff:3b:9d:ff:64:a5:d7:6e:68:73:14:89:52:
fb:9e:59:38:ed:d7:7d:84:d1:17:bc:ca:a6:29:f5:
f7:9c:d8:ba:8c:5e:85:6d:e6:91:54:1a:f3:ca:a3:
9e:ad:03:92:77:4f:9c:ce:a2:61:8a:1a:c5:18:f0:
32:c0:54:7a:be:67:70:c5:6e:f5:46:ba:12:74:ad:
e0:a4:2f:cc:3f:fc:a8:3b:5a:b7:0c:44:9c:b4:28:
9a:89:2c:07:e9:1c:fa:08:18:bb:f4:91:af:50:9e:
0c:05:88:4e:b3:76:2d:a5:c5:c1:ce:02:2d:db:f7:
49:8c:17:b5:a4:7f:0b:30:91:80:4f:8b:37:95:75:
f2:a0:41:c7:fb:c7:b7:20:6c:a3:aa:dc:cf:c1:96:
ce:ff:9c:49:6a:05:b2:b4:db:b0:60:a9:88:12:a0:
11:da:85:a1:5c:89:b9:65:40:b6:13:a1:94:03:0d:
29:20:a6:5b:84:1a:3b:05:bf:39:91:bc:f3:f7:90:
45:5c:05:e3:03:3b:c4:e3:00:b9:82:c7:88:61:c2:
23:9e:ee:65:c3:ff:f7:59:eb:81:fc:11:3f:77:53:
da:da:fd:d6:4c:9c:e3:f9:66:56:d6:ec:06:f8:3a:
6c:1c:d7:27:e8:fb:12:42:87:ad:d4:91:e9:60:9a:
c2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:76:ED:6D:F9:DC:5E:C3:AB:5D:18:C3:9A:B0:A6:1E:BA:24:4F:8F
X509v3 Authority Key Identifier:
keyid:B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:49:be:b6:39:fd:69:10:e6:55:eb:0f:3d:e7:08:3b:9e:bb:
de:71:b3:b7:16:98:bd:ab:bb:c6:5a:4c:ec:95:7f:60:63:f4:
48:a9:83:07:2a:39:02:39:42:cc:52:1b:08:27:c9:8a:cc:c7:
7d:68:f7:7e:4e:cb:75:58:30:de:5a:52:7b:a1:30:61:dc:ab:
15:c5:9d:74:9b:35:cd:21:a0:ba:9c:ec:a8:60:bd:2a:9d:a5:
ed:6e:eb:1c:84:d4:47:bb:1b:b4:d2:59:e9:d4:72:0f:4e:64:
14:52:84:43:8a:fb:a9:bb:4f:83:09:36:fb:e2:3e:a4:bc:99:
60:91:d3:40:c6:37:07:f9:f3:a0:21:a2:11:3a:45:f0:19:88:
0d:bf:6e:ce:e6:d3:5a:b1:b2:04:60:8f:9a:4c:f6:c0:23:28:
24:81:5e:6f:e5:4b:fc:a3:08:61:a6:0e:45:a0:a1:bb:a6:73:
13:75:27:b8:e6:f1:64:14:31:dd:1b:d6:b6:e0:da:66:e9:b1:
86:8e:5e:6d:84:31:ba:ac:35:12:b9:77:e2:42:8a:38:46:29:
34:e8:82:db:3c:27:5f:28:72:e0:ca:fa:33:5c:0f:de:c8:20:
eb:23:05:c2:f7:73:af:d5:e3:1d:93:16:5d:fd:59:3d:42:08:
9d:a8:b2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:32:44 2026 by rpki-client