Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
File: SqvRp2WuXL4dyT2vAk06R-cqyRg.mft (raw, json)
Hash identifier: CWl0GE0jPBodbQdwLSUZQo3vG2OzRzAZGH1x6T+uvAU=
Subject key identifier: 5F:71:8F:38:D3:44:3F:BB:79:EB:FD:DC:77:EC:77:0E:28:F3:25:C6
Authority key identifier: 4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18
Certificate issuer: /CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
Certificate serial: 019D37533AAE967F58EFE7517AE6BC37D084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
Manifest number: 124A
Signing time: Sun 29 Mar 2026 02:01:34 +0000
Manifest this update: Sun 29 Mar 2026 02:01:34 +0000
Manifest next update: Mon 30 Mar 2026 02:01:34 +0000
Files and hashes: 1: 7GkLDdomT5eL60D6-khNrUAPRs8.roa (hash: shWGexTkkzOs8oRP4d8FwNhRI05jCv9BHag7xNm2iyw=)
2: SqvRp2WuXL4dyT2vAk06R-cqyRg.crl (hash: srnDO5EWqwagjDt3UJJXCXkUfPsGwgBQqrPePwG+Lvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:3a:ae:96:7f:58:ef:e7:51:7a:e6:bc:37:d0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
Validity
Not Before: Mar 29 02:01:34 2026 GMT
Not After : Mar 30 02:01:34 2026 GMT
Subject: CN=5f718f38d3443fbb79ebfddc77ec770e28f325c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ac:9b:12:dd:16:4b:72:b7:1f:6b:ae:65:cb:
b0:37:66:d2:06:c9:df:b8:5b:55:e2:b6:a1:86:db:
f5:09:2e:e6:ab:69:f4:2d:f5:68:03:69:c6:69:18:
12:c5:dd:a9:86:d8:fd:35:59:b5:94:3c:53:f8:bc:
cb:d9:ee:ee:d7:45:d6:81:a0:d4:30:1a:87:6e:b0:
92:51:a4:cd:65:3c:b4:d3:90:bc:f9:03:b6:49:41:
f5:c2:2b:83:0b:25:d2:05:d9:95:39:d1:9d:42:58:
6e:7b:7e:fe:1a:0b:6c:f7:2f:88:d4:bd:6c:1e:41:
0e:31:ff:d0:35:08:90:07:38:8d:95:9b:3f:92:6d:
56:4a:71:87:33:66:c2:df:c2:f6:66:06:50:36:03:
a8:b1:20:ea:fe:e8:5e:47:28:38:12:eb:48:6f:d0:
e5:f4:b7:6a:60:89:9e:63:7c:2c:c1:fe:bd:12:f1:
2b:b7:b0:3f:f3:e4:a3:a8:8c:25:8a:d8:0f:59:da:
3e:f8:93:c3:39:8f:9e:77:04:a5:df:14:49:e4:1d:
57:e7:2f:9f:dc:bd:cd:38:15:da:39:00:20:c5:88:
59:99:9a:d1:d6:64:ad:0f:80:f5:e7:4c:7b:22:d0:
2d:93:89:64:30:4a:fb:5c:e2:77:b1:3c:b0:19:02:
fd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:71:8F:38:D3:44:3F:BB:79:EB:FD:DC:77:EC:77:0E:28:F3:25:C6
X509v3 Authority Key Identifier:
keyid:4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:46:2c:21:35:cf:4f:a6:cf:45:0c:7b:aa:88:96:17:e3:ef:
ad:b2:e7:d9:13:c7:73:e2:c4:eb:f4:2a:c9:7c:5d:64:ab:28:
75:2e:32:7f:11:d9:1c:87:8f:50:b2:d8:ff:8c:48:db:46:c4:
61:65:fc:d6:79:d3:df:13:11:e5:02:f3:0f:e7:0f:cf:6c:fb:
21:33:ac:7a:da:b5:bd:aa:5f:54:13:b2:9b:e6:d9:be:f7:ba:
62:76:c4:d4:a3:bf:31:1a:93:8c:02:ef:c6:73:d9:8a:fa:ea:
ca:48:b3:99:bc:11:c5:01:b0:0c:fc:79:ea:f9:e5:c5:01:3c:
8c:5b:ee:01:43:f2:fd:e1:8f:2e:61:53:87:ff:b3:18:c7:a1:
41:e8:b6:80:df:5e:3f:e5:28:6f:06:62:c6:e9:e4:b5:76:ee:
e7:7d:f9:cc:74:b8:84:50:67:e9:93:e4:c9:ba:4f:77:93:42:
d5:72:3c:cb:e5:c6:3a:b8:ee:41:dc:e0:35:42:f7:18:45:1e:
dd:fe:e5:10:8f:8b:39:17:ce:48:40:a8:f7:02:0d:71:b5:80:
41:45:5c:b9:45:ce:d9:11:3c:ed:a7:d6:db:95:0e:cd:34:2f:
2e:02:c2:17:08:5a:c6:5b:5a:6b:64:f8:82:1e:78:f3:24:5e:
7a:ed:52:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:01 2026 by rpki-client