Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
File: sQvyxqnxpCuKzuASWfkfUUSrivU.mft (raw, json)
Hash identifier: 1lfdpUZRX0Kmy+BUAcTob+aSwbpAKD5ZRctUgrHhfBE=
Subject key identifier: 17:48:45:4B:2C:00:44:19:EB:F8:2C:19:75:96:88:75:5A:BE:E1:93
Authority key identifier: B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5
Certificate issuer: /CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5
Certificate serial: 019D3940CAEC6272F4FC8234B84018573FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
Manifest number: 0828
Signing time: Sun 29 Mar 2026 11:00:40 +0000
Manifest this update: Sun 29 Mar 2026 11:00:40 +0000
Manifest next update: Mon 30 Mar 2026 11:00:40 +0000
Files and hashes: 1: fe8ukOhhEe7KXEfSiyV_DHengoY.roa (hash: HwZz3DBgstgEomr/Tp/wiHiggtvFxa7jhA0tFGZLzl8=)
2: sQvyxqnxpCuKzuASWfkfUUSrivU.crl (hash: AFAIm9ELGjON6G+2kzPbtBZMTKP0N9rsCs41jmyQPiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:ca:ec:62:72:f4:fc:82:34:b8:40:18:57:3f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5
Validity
Not Before: Mar 29 11:00:40 2026 GMT
Not After : Mar 30 11:00:40 2026 GMT
Subject: CN=1748454b2c004419ebf82c19759688755abee193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:f0:12:71:75:8f:78:ba:78:48:c9:0c:64:
eb:67:80:65:ba:9c:3a:f3:96:05:fd:1f:b0:04:4e:
2f:30:0e:95:3d:00:03:1e:d8:3a:62:7a:75:e1:e7:
ad:ea:49:9b:26:25:d4:b2:30:a4:af:de:ff:62:1d:
90:93:46:27:14:41:ac:8b:87:e3:16:78:da:a5:c2:
61:69:f3:33:bd:17:31:ea:38:dd:83:0d:00:80:42:
50:13:f1:33:6f:97:6c:00:c6:72:64:66:4a:ad:e3:
a6:b6:73:d6:67:f2:e2:76:de:0b:10:06:b0:b8:3a:
70:ea:dc:e2:69:e6:75:37:cc:c8:e8:e4:cd:68:35:
1f:d8:73:e2:14:2d:82:0b:00:bc:8b:4b:5b:ef:b1:
60:6b:a0:25:2c:13:90:78:d9:47:4d:2f:d5:b0:80:
1d:c5:6d:c0:70:80:b5:62:83:ae:23:60:2d:c5:43:
f1:1c:d4:71:c3:f6:06:73:e9:c1:ee:54:59:d5:67:
6b:80:8d:61:e2:2c:4b:9c:27:f4:bc:71:b4:f3:dd:
4d:0b:1e:bf:4b:72:7e:c4:a2:0d:84:38:84:ff:7e:
fc:ed:2a:59:36:06:e2:ec:bb:26:13:d4:a7:8d:76:
ec:6d:71:11:a9:f8:f1:19:05:0a:a9:de:5c:67:ed:
a2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:48:45:4B:2C:00:44:19:EB:F8:2C:19:75:96:88:75:5A:BE:E1:93
X509v3 Authority Key Identifier:
keyid:B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8b:9c:6d:02:60:f7:b4:08:ce:e1:8c:0d:8e:bb:fb:cc:05:
16:dc:10:ef:f8:78:8b:84:9d:c9:7b:dd:5a:15:72:c4:b2:ba:
51:28:7f:35:81:3f:e2:08:4a:bc:83:f0:fb:80:35:75:85:47:
21:70:8f:cd:45:38:8f:79:ce:74:e3:82:61:53:d4:11:8b:b5:
2a:0a:2c:6d:79:97:2a:dc:52:a5:8e:ae:a2:de:b5:f4:5f:de:
ca:0e:51:d6:38:83:31:4d:cd:a9:33:c9:e5:1e:09:cd:0a:a2:
11:94:b4:c6:b3:fe:5f:6a:02:50:71:3d:1a:33:f9:ec:bd:e8:
35:69:31:dd:f7:31:2a:ea:b0:b5:38:98:33:f0:1f:4a:36:11:
40:04:d2:da:80:c0:5a:f9:df:3a:7b:6a:f3:16:fb:6b:7c:61:
d6:1b:fd:1c:cc:84:bf:00:21:53:69:42:6e:83:79:aa:5c:91:
20:e6:f0:a9:02:e4:b9:bd:9a:b0:02:7e:df:cb:aa:f7:43:3f:
9e:94:8a:c2:be:59:60:b3:1e:32:12:e0:15:b8:4b:ac:81:e3:
07:86:6d:89:a7:03:f3:c5:6c:39:ab:be:7a:94:43:cd:29:d1:
fe:d9:6b:56:de:2d:31:64:3c:86:ee:11:bd:b1:20:24:59:be:
3e:4f:d4:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QMrsYnL0/II0uEAYVz/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMGJmMmM2YTlmMWE0MmI4YWNlZTAxMjU5ZjkxZjUxNDRh
YjhhZjUwHhcNMjYwMzI5MTEwMDQwWhcNMjYwMzMwMTEwMDQwWjAzMTEwLwYDVQQD
EygxNzQ4NDU0YjJjMDA0NDE5ZWJmODJjMTk3NTk2ODg3NTVhYmVlMTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqffwEnF1j3i6eEjJDGTrZ4Blupw6
85YF/R+wBE4vMA6VPQADHtg6Ynp14eet6kmbJiXUsjCkr97/Yh2Qk0YnFEGsi4fj
FnjapcJhafMzvRcx6jjdgw0AgEJQE/Ezb5dsAMZyZGZKreOmtnPWZ/Lidt4LEAaw
uDpw6tziaeZ1N8zI6OTNaDUf2HPiFC2CCwC8i0tb77Fga6AlLBOQeNlHTS/VsIAd
xW3AcIC1YoOuI2AtxUPxHNRxw/YGc+nB7lRZ1WdrgI1h4ixLnCf0vHG0891NCx6/
S3J+xKINhDiE/3787SpZNgbi7LsmE9SnjXbsbXERqfjxGQUKqd5cZ+2iWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdIRUssAEQZ6/gsGXWWiHVavuGTMB8GA1UdIwQY
MBaAFLEL8sap8aQris7gEln5H1FEq4r1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1F2eXhxbnhwQ3VLenVBU1dma2ZVVVNyaXZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lZDE4OGEtMGZmZi00ZjBmLWEyNmQt
MjUxYTljODY0ZDI2LzEvc1F2eXhxbnhwQ3VLenVBU1dma2ZVVVNyaXZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9lZDE4OGEtMGZmZi00ZjBmLWEyNmQtMjUxYTljODY0ZDI2
LzEvc1F2eXhxbnhwQ3VLenVBU1dma2ZVVVNyaXZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYucbQJg
97QIzuGMDY67+8wFFtwQ7/h4i4SdyXvdWhVyxLK6USh/NYE/4ghKvIPw+4A1dYVH
IXCPzUU4j3nOdOOCYVPUEYu1KgosbXmXKtxSpY6uot619F/eyg5R1jiDMU3NqTPJ
5R4JzQqiEZS0xrP+X2oCUHE9GjP57L3oNWkx3fcxKuqwtTiYM/AfSjYRQATS2oDA
WvnfOntq8xb7a3xh1hv9HMyEvwAhU2lCboN5qlyRIObwqQLkub2asAJ+38uq90M/
npSKwr5ZYLMeMhLgFbhLrIHjB4ZtiacD88VsOau+epRDzSnR/tlrVt4tMWQ8hu4R
vbEgJFm+Pk/UXA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:03 2026 by rpki-client