Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
File: SqXjXAXCq1S-dYtshnGGzuFZvWM.mft (raw, json)
Hash identifier: /9gKCAj6XLc2ZDlag2MdC0rK2kj+mNpexA7pGPHODdY=
Subject key identifier: 80:2F:76:06:23:89:72:E1:00:9E:42:35:96:84:A6:11:09:28:62:A5
Authority key identifier: 4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
Certificate issuer: /CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Certificate serial: 019D37C056989DAC4F0884C015DD12B58FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 04:00:45 +0000
Manifest this update: Sun 29 Mar 2026 04:00:45 +0000
Manifest next update: Mon 30 Mar 2026 04:00:45 +0000
Files and hashes: 1: Gf-9RToHV8wPDoXU7Oara5nxIUM.roa (hash: VsHDJwIPTlkkP+eDBuFbkPtE/oNd7HaXUP1nGykcuDA=)
2: SqXjXAXCq1S-dYtshnGGzuFZvWM.crl (hash: R9c+cwO77ZLMQ2Pni3acNsZsdJBphJVFbmHlc/KTpSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:56:98:9d:ac:4f:08:84:c0:15:dd:12:b5:8f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Validity
Not Before: Mar 29 04:00:45 2026 GMT
Not After : Mar 30 04:00:45 2026 GMT
Subject: CN=802f7606238972e1009e42359684a611092862a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:79:80:7e:56:0d:fc:2b:9b:df:9e:72:d4:
76:4d:94:ea:4e:0e:83:5e:23:0d:96:ea:c3:0a:9f:
76:05:59:93:61:c2:61:08:ca:ad:77:cc:ed:fe:7a:
db:29:c2:b2:0f:97:d6:bd:8b:5e:9c:4c:87:64:f1:
04:ad:b8:dc:d3:01:bf:4a:3b:0c:82:2e:e9:62:49:
8d:8c:36:e1:5c:be:3a:d0:76:af:57:cb:e9:c4:38:
f5:d6:80:9f:a8:43:3e:35:c5:7b:74:e0:ea:d0:cc:
d2:7a:ff:20:1f:c6:27:ea:c8:ee:05:5e:7b:bd:8f:
67:b4:09:a2:b1:fd:3c:5d:06:ce:73:6c:68:3a:ff:
12:bf:9e:68:ce:c1:ff:7c:ff:7e:47:56:75:d2:5b:
f1:69:a3:18:a4:d9:9a:fb:53:89:25:62:8f:f4:10:
58:ad:b0:fb:b4:4c:b0:3a:dd:cc:08:96:8c:88:2f:
3a:6d:2d:48:df:f4:de:ec:d2:b6:a8:bb:86:d9:5f:
e1:ec:e1:47:76:f1:b2:2c:48:92:e9:b3:24:89:57:
95:6e:36:46:dc:c7:5d:c8:32:46:0a:66:60:d0:30:
79:05:f8:91:41:8a:f1:85:79:4e:f9:f3:0a:28:85:
19:4b:95:8a:9d:6b:34:53:61:0c:8c:40:f2:3a:02:
80:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2F:76:06:23:89:72:E1:00:9E:42:35:96:84:A6:11:09:28:62:A5
X509v3 Authority Key Identifier:
keyid:4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fa:b6:ec:0a:a3:88:34:6e:06:93:3f:98:3e:b8:5f:7a:c8:
8c:cc:f3:b8:5a:e0:40:89:bd:46:80:57:34:7d:e8:25:fa:18:
58:43:03:2e:40:8c:be:60:22:2b:89:ab:a7:d6:31:d9:69:16:
f6:71:65:85:57:8c:9f:5e:53:b7:52:01:1c:1f:4b:f3:ee:a7:
4e:7f:a1:5b:55:63:03:00:39:40:86:84:d6:d2:85:39:0d:ee:
17:c9:4c:8d:83:26:c3:87:42:05:98:7a:c6:74:23:83:ec:d5:
10:d9:d2:0d:57:d9:1b:4c:7e:72:50:18:83:bb:b3:d2:db:2c:
47:41:08:2e:45:cf:a7:4c:14:5f:cb:ba:ab:df:51:a6:bf:b8:
5b:bb:81:c0:2e:ad:18:1f:e5:18:cf:e1:19:fc:ec:99:db:d5:
66:6e:8d:dd:bc:4a:00:33:b8:81:be:ee:18:a7:50:69:46:9c:
43:a4:5b:a9:30:e9:3c:d0:f8:fe:dd:11:4c:cb:14:1b:8a:73:
df:d2:1c:e3:10:5b:a1:f9:13:07:03:e5:1c:f5:51:7b:c3:9a:
33:7b:b9:06:43:d7:f5:a3:d1:eb:25:25:d0:d4:01:4b:76:88:
b6:c1:e5:51:c6:bc:a5:a8:e0:3e:a5:5a:0a:1b:80:0c:6c:28:
9c:58:b2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:10 2026 by rpki-client