Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
File: SQsh95ueovPQQjdHFIZ9EkAZlds.mft (raw, json)
Hash identifier: hQ3lnDMt5Lu33af049aaq0qfKc4T9kaazTzL/m4Baz0=
Subject key identifier: FF:3D:A4:F6:4A:79:D5:2A:EB:A0:61:91:4D:B8:51:81:E3:B8:0F:81
Authority key identifier: 49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
Certificate issuer: /CN=490b21f79b9ea2f3d042374714867d12401995db
Certificate serial: 01A001DD252ED2E72D61746C6CD9EF332832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
Manifest number: 1A08
Signing time: Fri 14 Aug 2026 20:01:05 +0000
Manifest this update: Fri 14 Aug 2026 20:01:05 +0000
Manifest next update: Sat 15 Aug 2026 20:01:05 +0000
Files and hashes: 1: D2NDXon9tRzoL-Y41MeImDBzBX0.roa (hash: hhnm2U2ilCapnJ9WdrcPHqXlSDPxhBMVV2XskPsU2V4=)
2: OsHfm5IcRp6wCajw-NE1iWNH7Z8.roa (hash: oS3FUlduEB7YSg+361aWK05LocqnWlc3lIUtH4BZyko=)
3: SQsh95ueovPQQjdHFIZ9EkAZlds.crl (hash: AuX6hEcsUkOoql1Cim6vxsC7d29nTGrjvZboPjQn7C0=)
4: Z4RE0ETdC4xhk1FbbundGTGGRB8.roa (hash: qQ3AizCsruyzTMQNiKoa4LuCo6aARO1PFZyPx/nGISA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:25:2e:d2:e7:2d:61:74:6c:6c:d9:ef:33:28:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490b21f79b9ea2f3d042374714867d12401995db
Validity
Not Before: Aug 14 20:01:05 2026 GMT
Not After : Aug 15 20:01:05 2026 GMT
Subject: CN=ff3da4f64a79d52aeba061914db85181e3b80f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a8:a6:44:48:ae:da:aa:99:4f:63:09:91:50:
97:e7:5a:f8:b2:bc:55:ba:7d:b2:d0:58:fd:dc:c0:
4b:75:d8:d0:98:e0:59:97:a5:4c:83:fc:d9:46:0b:
3e:21:0e:5b:17:f5:e5:c8:49:d2:3d:9e:d9:22:29:
83:66:fd:ce:e9:39:1f:22:3f:ae:de:b3:e6:e1:3f:
cb:a7:f1:42:41:27:ed:8d:c4:97:62:2b:b4:6a:73:
54:05:ef:a8:55:76:a4:98:dc:a7:d0:94:71:8b:4e:
43:5b:6d:1e:47:aa:a2:8f:a8:25:a3:24:d4:26:9b:
ce:60:23:c3:5b:fc:b6:2b:1e:f2:2f:20:ac:fc:6d:
2b:2d:b9:72:77:11:ed:b3:b3:24:a3:4c:43:6f:65:
da:6d:14:e0:2e:33:ad:f2:2f:74:65:81:c5:e4:15:
ac:f7:25:17:be:7a:74:9c:43:3f:40:08:8a:cf:22:
40:23:13:42:6c:5a:08:e0:b5:e1:34:b7:dd:06:d0:
21:f8:c8:2d:b1:89:a7:68:8f:12:d7:3c:f6:e1:34:
60:02:0c:a9:6c:6c:94:38:c6:21:76:48:2d:b4:63:
5f:33:39:3d:25:09:65:77:ac:d2:17:7b:da:69:ce:
68:16:dc:04:46:19:d0:04:73:06:0f:39:a3:22:c0:
73:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3D:A4:F6:4A:79:D5:2A:EB:A0:61:91:4D:B8:51:81:E3:B8:0F:81
X509v3 Authority Key Identifier:
keyid:49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ba:cd:66:f7:22:20:87:b3:9c:b6:1b:bc:f1:13:79:78:46:
dd:e2:e3:b3:36:b7:97:f8:59:3d:b2:96:66:52:76:dc:d8:39:
5e:f7:10:e3:5c:18:03:6c:89:ba:60:8c:bb:75:a5:64:69:78:
1e:da:60:0c:a3:cf:d8:7d:99:53:38:50:40:15:59:fa:cf:bf:
c3:86:9f:b4:47:fd:c9:3a:09:4f:14:40:38:79:18:dc:b3:44:
73:00:32:a8:1c:a4:1c:38:98:24:58:5b:61:d1:af:b5:b7:c0:
10:f1:ad:63:bf:43:78:c7:09:85:1b:58:c2:28:78:d3:3a:67:
f9:c1:ea:d8:ca:92:5d:19:69:ea:3b:ad:86:6f:7c:33:3d:3a:
b2:6e:75:51:f8:c5:8b:d8:fe:2d:9a:d4:8e:87:6c:f9:33:4b:
0a:e4:6e:6f:23:6c:66:96:13:38:48:b0:1f:3f:f8:0d:f6:d3:
5f:e5:6c:8f:6f:f7:92:4b:5d:54:d3:08:36:de:ec:8c:7d:56:
8f:e9:da:62:61:f6:76:e3:b3:90:46:5d:ca:0d:1d:c7:ff:01:
88:d1:d1:d5:e5:a1:e6:b0:cf:cd:41:f2:97:7e:ee:fd:13:ec:
4e:33:2f:27:a6:72:ee:72:2b:38:14:b3:43:14:ec:0c:44:96:
1c:69:5c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:16:52 2026 by rpki-client