Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
File: sq-PF3TgWSXyTkHe5p5bYj2axj0.mft (raw, json)
Hash identifier: SHYbCm60VA799NpBCQOw87fgWiIssC6f3sgiWR7al88=
Subject key identifier: 0B:35:7F:D0:7F:86:7B:70:6B:0E:F4:A8:08:98:54:62:C6:9C:BC:74
Authority key identifier: B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D
Certificate issuer: /CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d
Certificate serial: 019FA0A85D1B2CBF147DE99B8BB932EC593F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
Manifest number: 19D0
Signing time: Sun 26 Jul 2026 23:00:16 +0000
Manifest this update: Sun 26 Jul 2026 23:00:16 +0000
Manifest next update: Mon 27 Jul 2026 23:00:16 +0000
Files and hashes: 1: VFGEJNzLzqbtn_xoW_8uAp03Cps.roa (hash: vNmZGriew68XIyyo5twCVk3Ozs6RyZWncGa/e7gLj+Q=)
2: sq-PF3TgWSXyTkHe5p5bYj2axj0.crl (hash: bc2k83EGm5UhYFe6foSjDK0cHV7rcYFEQBoLHPQ79No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:5d:1b:2c:bf:14:7d:e9:9b:8b:b9:32:ec:59:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d
Validity
Not Before: Jul 26 23:00:16 2026 GMT
Not After : Jul 27 23:00:16 2026 GMT
Subject: CN=0b357fd07f867b706b0ef4a808985462c69cbc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:0f:94:10:a4:9a:54:33:98:7d:4f:c1:62:
01:18:96:e5:6f:b7:a0:cc:d7:7a:3c:c8:eb:08:b0:
c1:37:96:47:6f:d2:88:d4:fc:ef:ea:c7:c5:f8:88:
20:f1:48:3a:dd:cc:52:be:80:31:a7:13:3f:06:91:
63:dd:22:76:bd:6f:8f:07:a3:ff:ec:48:90:d1:e3:
57:ae:a6:5c:da:00:42:9e:0a:c4:fb:d4:3e:63:7f:
5c:bd:d8:2f:8e:b9:1a:60:f9:e4:ac:87:34:d8:6d:
34:53:76:ab:38:22:86:68:59:29:fc:a5:4e:9d:71:
73:a6:cc:4e:16:2c:a6:b4:21:38:ed:14:ec:aa:d1:
23:8e:06:c8:9e:ef:ef:8a:6e:95:79:85:df:20:83:
34:05:5d:ff:42:73:16:3a:05:e0:7f:51:f5:d4:03:
b7:11:35:eb:13:dc:f1:46:35:e8:24:a2:5e:03:54:
2a:11:68:91:f2:04:79:dd:16:ea:08:42:62:a9:05:
73:d6:d5:d1:0d:7a:01:25:0a:f7:11:d7:d0:78:cf:
d2:6b:4b:da:c9:d5:ee:d2:6c:7f:e4:55:f8:90:70:
b0:61:a5:e3:f7:4a:18:b2:9c:29:9e:26:bf:b4:0e:
51:ed:43:e8:6d:63:22:39:b1:75:c0:80:d6:dd:d1:
04:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:35:7F:D0:7F:86:7B:70:6B:0E:F4:A8:08:98:54:62:C6:9C:BC:74
X509v3 Authority Key Identifier:
keyid:B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d4:32:3a:62:ba:1a:1f:47:52:c5:4c:c1:d8:41:e2:be:f1:
12:e0:7e:2e:76:68:83:76:7b:29:15:41:8a:10:dc:e5:89:d9:
36:99:8b:3b:7b:c7:ae:0e:de:41:73:41:7f:f1:c1:23:1b:af:
bf:3f:b5:02:bb:80:87:85:65:43:18:52:8f:31:04:ce:38:e7:
6b:4d:95:62:a9:13:bd:8c:dd:d2:c1:49:f9:91:9d:d4:73:a7:
94:99:dc:78:79:f6:ea:3c:ec:4a:ac:30:38:53:33:d4:0e:f0:
70:bc:91:fb:ce:45:9d:d2:5c:99:dd:7c:b4:d3:78:34:fb:d5:
ca:84:ad:c3:ec:48:39:c5:c3:4e:b9:9a:85:a0:e7:84:6d:d2:
48:31:7d:bc:24:1e:74:95:71:db:dc:82:95:b2:b5:c1:22:47:
1e:bf:3e:2d:91:bd:74:8f:62:b5:54:6d:2a:ad:79:88:a4:82:
c6:10:69:22:da:b3:ae:ab:d3:bb:9c:bd:06:d3:d8:96:cc:a0:
9f:37:40:85:31:de:32:f2:63:c4:3e:8b:b7:e4:da:2b:27:a9:
44:15:7d:13:ce:5a:4e:81:c7:89:3d:83:e5:d5:c0:b2:8d:94:
b6:b7:20:6e:bc:ff:d9:b5:9b:6b:ee:bc:2e:8a:75:20:0b:9f:
00:97:37:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gqF0bLL8Ufembi7ky7Fk/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYWY4ZjE3NzRlMDU5MjVmMjRlNDFkZWU2OWU1YjYyM2Q5
YWM2M2QwHhcNMjYwNzI2MjMwMDE2WhcNMjYwNzI3MjMwMDE2WjAzMTEwLwYDVQQD
EygwYjM1N2ZkMDdmODY3YjcwNmIwZWY0YTgwODk4NTQ2MmM2OWNiYzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGkPlBCkmlQzmH1PwWIBGJblb7eg
zNd6PMjrCLDBN5ZHb9KI1Pzv6sfF+Igg8Ug63cxSvoAxpxM/BpFj3SJ2vW+PB6P/
7EiQ0eNXrqZc2gBCngrE+9Q+Y39cvdgvjrkaYPnkrIc02G00U3arOCKGaFkp/KVO
nXFzpsxOFiymtCE47RTsqtEjjgbInu/vim6VeYXfIIM0BV3/QnMWOgXgf1H11AO3
ETXrE9zxRjXoJKJeA1QqEWiR8gR53RbqCEJiqQVz1tXRDXoBJQr3EdfQeM/Sa0va
ydXu0mx/5FX4kHCwYaXj90oYspwpnia/tA5R7UPobWMiObF1wIDW3dEEtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAs1f9B/hntwaw70qAiYVGLGnLx0MB8GA1UdIwQY
MBaAFLKvjxd04Fkl8k5B3uaeW2I9msY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3EtUEYzVGdXU1h5VGtIZTVwNWJZajJheGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jMTU2NzEtYmExYi00OGYyLWI2OTEt
ZmE1N2MxMjZiYzJhLzEvc3EtUEYzVGdXU1h5VGtIZTVwNWJZajJheGowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9jMTU2NzEtYmExYi00OGYyLWI2OTEtZmE1N2MxMjZiYzJh
LzEvc3EtUEYzVGdXU1h5VGtIZTVwNWJZajJheGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANQyOmK6
Gh9HUsVMwdhB4r7xEuB+LnZog3Z7KRVBihDc5YnZNpmLO3vHrg7eQXNBf/HBIxuv
vz+1AruAh4VlQxhSjzEEzjjna02VYqkTvYzd0sFJ+ZGd1HOnlJnceHn26jzsSqww
OFMz1A7wcLyR+85FndJcmd18tNN4NPvVyoStw+xIOcXDTrmahaDnhG3SSDF9vCQe
dJVx29yClbK1wSJHHr8+LZG9dI9itVRtKq15iKSCxhBpItqzrqvTu5y9BtPYlsyg
nzdAhTHeMvJjxD6Lt+TaKyepRBV9E85aToHHiT2D5dXAso2Utrcgbrz/2bWba+68
Lop1IAufAJc3Og==
-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:09 2026 by rpki-client