Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
File: SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft (raw, json)
Hash identifier: h+2LyTpDCjyJA1WgJPsBLDKi0zuFvm/wiXn1b7LhkAA=
Subject key identifier: 47:69:93:72:42:E6:27:0A:8A:D5:18:00:24:58:1A:47:17:27:B9:7F
Authority key identifier: 49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
Certificate issuer: /CN=490957f79e6c28146643f49d9fe17fc4f163776c
Certificate serial: 019D3A54A2B38AF9BADC0083C9956A4DBB7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
Manifest number: 0F73
Signing time: Sun 29 Mar 2026 16:01:58 +0000
Manifest this update: Sun 29 Mar 2026 16:01:58 +0000
Manifest next update: Mon 30 Mar 2026 16:01:58 +0000
Files and hashes: 1: SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl (hash: IXk/OWBnbOmfGoCabSM0anBtmLmgSncQ+AOP2jvNtnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:a2:b3:8a:f9:ba:dc:00:83:c9:95:6a:4d:bb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490957f79e6c28146643f49d9fe17fc4f163776c
Validity
Not Before: Mar 29 16:01:58 2026 GMT
Not After : Mar 30 16:01:58 2026 GMT
Subject: CN=4769937242e6270a8ad5180024581a471727b97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e9:f5:9d:b1:a7:5e:56:1d:ec:07:8a:cf:5c:
bb:cc:53:18:54:f4:db:81:e5:ac:3a:1c:f2:a9:37:
b3:1d:a0:f9:f6:65:fd:2c:0a:b9:07:4d:63:27:21:
0c:37:5e:4e:94:1c:e3:e7:99:38:02:0d:39:61:8d:
2e:e6:13:88:d4:c0:d1:d3:c2:ed:45:c1:e6:41:6c:
14:b7:15:d9:52:90:a0:e1:e4:7f:60:85:db:02:99:
34:91:68:a1:f1:6d:cd:3f:aa:c0:65:2b:9b:12:3f:
02:86:98:2e:87:57:b6:d2:c6:73:74:11:64:1b:cb:
63:b9:b9:12:88:81:f8:9d:16:bd:c0:b0:af:d9:b4:
86:02:55:26:b3:bd:92:54:7b:ed:44:c3:af:a7:14:
c4:ff:8b:a1:50:b5:41:18:e4:88:b4:93:05:90:c9:
fd:44:89:72:05:18:5f:86:4a:0d:af:6e:a2:6e:88:
48:bc:00:d4:4d:3d:6b:71:a1:74:40:2d:6d:9c:99:
6f:14:a8:2a:d5:0a:92:d7:43:4e:06:af:9d:fa:dd:
7b:86:17:2b:29:02:82:a6:c3:d9:19:88:55:a1:93:
da:87:f4:31:6e:92:37:d3:57:1c:3e:48:08:b7:43:
a7:b6:e5:48:57:2f:85:1d:03:35:7a:82:c7:83:ae:
7d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:69:93:72:42:E6:27:0A:8A:D5:18:00:24:58:1A:47:17:27:B9:7F
X509v3 Authority Key Identifier:
keyid:49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:59:fc:2d:fe:ba:9b:ac:6f:0f:b4:26:0b:7e:da:df:2f:d4:
e0:71:da:3b:7e:15:b2:2e:f4:16:83:e1:73:4d:37:85:c6:5e:
16:15:a4:98:e3:b1:fe:fd:ff:fb:92:f4:c3:6a:4e:8e:67:87:
6e:eb:cf:5a:59:cd:fd:4f:8e:ec:d4:0a:89:eb:16:15:7d:b9:
41:56:4e:fb:cc:f9:5a:04:65:0e:31:c6:46:77:38:a9:bf:d5:
70:f6:31:7f:61:a4:6d:0c:8b:7c:d3:ed:0d:9b:a0:00:58:08:
cd:fa:6e:05:ff:fb:95:53:dd:52:40:a4:5d:a3:78:fe:ca:a2:
81:ef:5c:d2:15:50:f3:ff:a0:fa:9d:3f:60:e8:19:07:ac:7b:
ca:92:5a:34:30:ff:3c:da:44:f4:d3:62:59:f7:d0:22:31:ba:
ff:f6:e1:6c:82:18:e2:84:6d:15:6d:5b:e1:bb:8e:67:60:b3:
7b:52:dc:43:c6:3f:aa:16:a0:91:ef:79:8c:5a:4e:26:ab:fd:
5d:ee:33:3a:17:1c:ca:7f:a7:80:64:49:6d:f3:5d:8f:f3:a5:
96:49:c3:f7:c2:bf:28:eb:9f:7d:24:00:65:36:8f:3b:a9:6a:
94:4e:22:c3:47:6f:55:20:33:11:84:51:e6:e5:14:bb:74:e2:
b1:15:06:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:55 2026 by rpki-client