Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
File: Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft (raw, json)
Hash identifier: /mYOASQPEJalYDfbRrOw6/fi3RdIrCz7OVDIAZ11KaY=
Subject key identifier: 1A:3B:32:5B:10:7F:2A:04:DA:5D:83:04:1B:55:11:C0:3C:F2:CB:04
Authority key identifier: 4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43
Certificate issuer: /CN=4aae738ee1782735939a4fb0d672a6317b7f5243
Certificate serial: 019D37C038E2D77C0FBE91E9B96D4E8802EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 04:00:37 +0000
Manifest this update: Sun 29 Mar 2026 04:00:37 +0000
Manifest next update: Mon 30 Mar 2026 04:00:37 +0000
Files and hashes: 1: 36P60n_A-MwjiwD6uyhgY22phxA.roa (hash: eUcegOgWx2e5tZypy6pwKd7HaKvPBA1CoHaxPDGLqFw=)
2: Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl (hash: wpLork//cSg7mMFdAowt57UTpG/DobsIpTjMV2hbGTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:38:e2:d7:7c:0f:be:91:e9:b9:6d:4e:88:02:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aae738ee1782735939a4fb0d672a6317b7f5243
Validity
Not Before: Mar 29 04:00:37 2026 GMT
Not After : Mar 30 04:00:37 2026 GMT
Subject: CN=1a3b325b107f2a04da5d83041b5511c03cf2cb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c3:f4:07:97:2e:63:56:7f:a9:e0:6f:38:a5:
ac:05:73:39:f2:18:fe:57:09:8a:61:60:f7:c1:36:
65:9f:56:e4:38:32:e4:7b:72:58:c5:f0:1e:68:8d:
f2:76:6b:cd:38:ff:78:08:74:a2:a9:14:9e:b1:b4:
46:84:47:e7:38:5e:26:18:6e:9e:d7:fc:72:85:f0:
1e:48:9e:c2:76:3d:b9:3b:b8:0d:a1:58:77:ef:90:
90:26:fd:24:46:57:1d:b4:3e:04:6d:46:21:73:ba:
70:13:a9:6a:4d:fa:d9:dd:22:7e:0e:ec:9c:35:07:
97:70:22:d6:5c:6d:f0:e9:2a:f4:6f:3e:94:19:9d:
6d:b0:e8:3c:4a:62:3a:96:06:5f:01:2f:8f:1a:6f:
f5:86:c8:52:56:72:7e:eb:43:e8:e3:58:a8:7e:d4:
20:d0:94:22:df:0a:de:f2:72:62:a1:55:c9:62:cb:
bd:8f:f5:62:8e:fc:73:20:f0:ce:55:94:07:15:d4:
4a:ed:3e:6d:c8:2c:71:7e:a4:41:0d:7c:fb:1b:df:
86:66:d6:7c:5c:5a:1c:78:a9:02:f6:46:22:03:39:
90:ac:e5:0c:ba:dc:60:9e:ad:b7:66:d7:39:4f:c4:
9b:0a:93:6f:4b:ed:62:ce:7e:85:37:24:a7:0f:2e:
a9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3B:32:5B:10:7F:2A:04:DA:5D:83:04:1B:55:11:C0:3C:F2:CB:04
X509v3 Authority Key Identifier:
keyid:4A:AE:73:8E:E1:78:27:35:93:9A:4F:B0:D6:72:A6:31:7B:7F:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9e024e-c6e5-4977-b369-1ff9ff192cd7/1/Sq5zjuF4JzWTmk-w1nKmMXt_UkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ce:16:32:db:59:92:3f:8f:1f:f6:bd:f0:ae:cc:57:0c:32:
03:3e:52:f0:15:a9:d8:32:d8:7c:67:9a:ee:c7:06:f3:0b:7a:
1b:32:8c:54:92:0c:9e:93:69:37:ef:e0:b1:4e:79:de:eb:d5:
fa:40:83:f6:48:2d:9b:77:f6:1f:68:e8:fb:0a:ac:61:94:82:
dc:33:f9:1e:30:df:16:d4:1b:69:75:fa:a7:e8:29:bc:6b:99:
9d:5d:4c:5d:2c:4f:d3:4a:b4:46:8a:11:60:f0:a1:2c:bc:69:
8c:56:a7:f3:cc:ec:00:98:ba:c4:c3:5e:6f:74:17:86:5b:e8:
7b:83:4a:a5:cb:c0:1f:5c:10:31:bf:af:be:e5:a9:77:13:e4:
60:8b:13:3c:a7:e4:dc:ac:a4:6f:20:2f:e1:d5:34:34:94:63:
c6:e4:4f:f7:93:5b:3d:81:4d:7c:c8:19:33:e6:c8:a1:38:b7:
42:d8:9d:14:d1:0f:bd:bc:12:db:a2:c9:88:f9:ba:2c:66:30:
54:12:a5:b3:06:a9:7e:60:94:56:d2:8e:fe:45:e9:0e:69:a8:
33:cb:ac:8d:aa:c5:5b:fe:cc:6d:a1:6a:2a:bd:d2:f8:60:1e:
e8:d4:bb:d4:19:ca:ee:95:a7:a8:6f:bd:dd:4c:d3:52:3a:04:
77:f8:ae:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:13 2026 by rpki-client