Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
File: sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft (raw, json)
Hash identifier: 0l0HfdFSphj/X75uhtVMEnxSe9zBiPMy8ofUOJhI+Mk=
Subject key identifier: 4F:E8:36:F8:A1:FC:97:DC:D0:9C:2C:9B:43:B1:12:6E:FE:40:82:CF
Authority key identifier: B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57
Certificate issuer: /CN=b1040bc251fe02669f57fea572743a37acfbd557
Certificate serial: 019D390A46C9C83CD53BBED85C37B7E618F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
Manifest number: 0A35
Signing time: Sun 29 Mar 2026 10:01:07 +0000
Manifest this update: Sun 29 Mar 2026 10:01:07 +0000
Manifest next update: Mon 30 Mar 2026 10:01:07 +0000
Files and hashes: 1: sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl (hash: I6iNxLylGVjx8KZ3p3cTRfcbJtF5kpIf3YSn/S1SM0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:46:c9:c8:3c:d5:3b:be:d8:5c:37:b7:e6:18:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1040bc251fe02669f57fea572743a37acfbd557
Validity
Not Before: Mar 29 10:01:07 2026 GMT
Not After : Mar 30 10:01:07 2026 GMT
Subject: CN=4fe836f8a1fc97dcd09c2c9b43b1126efe4082cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:1f:c6:65:b1:ee:f3:37:db:e3:7a:c0:55:
d0:bc:a5:74:99:bc:34:e5:a0:27:aa:3b:08:10:c3:
e7:1c:af:16:1a:61:7f:d3:f0:80:88:63:59:6d:97:
b0:0b:ad:77:ca:18:20:3a:d1:e7:45:04:ee:f4:52:
3e:cb:ce:d0:89:45:fe:4a:b0:4b:77:b7:28:07:00:
08:3a:08:2c:16:7d:53:b2:71:93:4a:50:11:00:b1:
d8:23:36:45:79:b4:e2:3f:32:b4:35:74:7a:8b:6e:
4d:9f:90:4d:e8:94:55:02:01:95:6f:68:4d:0c:46:
e9:42:7e:8a:ea:fd:97:06:ff:f1:d2:78:72:26:99:
a0:81:f4:2a:d4:44:d9:ba:45:42:a4:18:b7:2b:ef:
11:60:e2:40:21:31:81:7e:2b:cf:3d:85:ac:83:62:
c5:e4:6c:fb:09:a4:7f:ef:94:5d:11:77:27:2b:ab:
25:d2:f6:f2:4b:1f:7e:cf:b1:b4:66:db:d2:a2:03:
21:f5:88:44:c3:a0:eb:8d:00:16:81:af:5b:1f:1f:
01:e7:35:a9:b7:10:d9:42:8f:b6:6b:64:69:7d:5a:
1f:01:32:51:16:5c:70:27:89:6d:57:c2:c5:1c:a0:
fa:04:e5:4e:73:29:b0:11:7f:66:d8:a8:5c:7c:62:
5f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E8:36:F8:A1:FC:97:DC:D0:9C:2C:9B:43:B1:12:6E:FE:40:82:CF
X509v3 Authority Key Identifier:
keyid:B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e8:42:4a:2e:f9:02:53:d7:2c:36:43:56:98:31:58:bf:a1:
f3:16:e7:b7:d8:74:16:b6:70:4d:e1:de:17:ae:a8:97:63:cf:
eb:e0:49:16:5c:eb:e2:2e:d1:ad:3c:dd:df:ec:2f:b5:3d:e9:
19:ab:93:cd:06:19:fd:f8:c4:29:19:b9:43:1d:a4:63:82:af:
f1:af:3b:d0:73:a7:ee:33:a3:d5:ac:2d:4d:cf:a1:d6:c8:69:
7b:a0:66:7b:17:9b:b2:d9:b6:91:4a:ab:67:71:d0:0e:35:c8:
3f:97:69:1d:46:63:0c:eb:70:ed:28:3d:7d:2f:3f:b3:fd:95:
6f:ac:71:2e:49:76:17:c5:4f:d5:87:a3:fc:3b:bd:47:1a:5f:
0d:92:02:4d:0c:d7:19:96:5f:0f:b0:6b:e2:21:4f:35:25:c5:
37:77:a3:ba:ff:e8:17:be:bc:50:3f:22:0b:35:08:6e:04:bb:
c2:6a:14:ed:14:e1:ef:27:bc:d7:d4:30:d8:27:d3:21:81:4c:
cf:5a:82:0e:ba:22:4b:bf:cd:cf:b8:49:f6:ad:78:83:4e:1b:
c2:90:c2:bf:dd:cd:08:ef:30:ac:33:5d:5b:45:e2:f7:08:7a:
38:e7:c9:b7:c7:c8:92:59:ab:50:b2:29:b6:e8:f4:a6:f0:e3:
e0:d5:07:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CkbJyDzVO77YXDe35hj3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMDQwYmMyNTFmZTAyNjY5ZjU3ZmVhNTcyNzQzYTM3YWNm
YmQ1NTcwHhcNMjYwMzI5MTAwMTA3WhcNMjYwMzMwMTAwMTA3WjAzMTEwLwYDVQQD
Eyg0ZmU4MzZmOGExZmM5N2RjZDA5YzJjOWI0M2IxMTI2ZWZlNDA4MmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYYfxmWx7vM32+N6wFXQvKV0mbw0
5aAnqjsIEMPnHK8WGmF/0/CAiGNZbZewC613yhggOtHnRQTu9FI+y87QiUX+SrBL
d7coBwAIOggsFn1TsnGTSlARALHYIzZFebTiPzK0NXR6i25Nn5BN6JRVAgGVb2hN
DEbpQn6K6v2XBv/x0nhyJpmggfQq1ETZukVCpBi3K+8RYOJAITGBfivPPYWsg2LF
5Gz7CaR/75RdEXcnK6sl0vbySx9+z7G0ZtvSogMh9YhEw6DrjQAWga9bHx8B5zWp
txDZQo+2a2RpfVofATJRFlxwJ4ltV8LFHKD6BOVOcymwEX9m2KhcfGJfwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/oNvih/Jfc0Jwsm0OxEm7+QILPMB8GA1UdIwQY
MBaAFLEEC8JR/gJmn1f+pXJ0Ojes+9VXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1FRTHdsSC1BbWFmVl82bGNuUTZONno3MVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xMzA1ZDctM2ExNi00NjIzLWI3NGUt
ZWVhZjIwZWJmOGVmLzEvc1FRTHdsSC1BbWFmVl82bGNuUTZONno3MVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8xMzA1ZDctM2ExNi00NjIzLWI3NGUtZWVhZjIwZWJmOGVm
LzEvc1FRTHdsSC1BbWFmVl82bGNuUTZONno3MVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcehCSi75
AlPXLDZDVpgxWL+h8xbnt9h0FrZwTeHeF66ol2PP6+BJFlzr4i7RrTzd3+wvtT3p
GauTzQYZ/fjEKRm5Qx2kY4Kv8a870HOn7jOj1awtTc+h1shpe6Bmexebstm2kUqr
Z3HQDjXIP5dpHUZjDOtw7Sg9fS8/s/2Vb6xxLkl2F8VP1Yej/Du9RxpfDZICTQzX
GZZfD7Br4iFPNSXFN3ejuv/oF768UD8iCzUIbgS7wmoU7RTh7ye819Qw2CfTIYFM
z1qCDroiS7/Nz7hJ9q14g04bwpDCv93NCO8wrDNdW0Xi9wh6OOfJt8fIklmrULIp
tuj0pvDj4NUHHQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:30 2026 by rpki-client