Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ca71bf-ab7f-4a0e-a955-7efc5b751a7d/1/sqvY_cD-Jo47wgJu5expymu4nzU.mft
File: sqvY_cD-Jo47wgJu5expymu4nzU.mft (raw, json)
Hash identifier: Y1G2Ym8w4wl53V3tjtJhN22mdTYHp8EA5+AZ+lI4Hpg=
Subject key identifier: 82:A8:5E:61:3C:2F:A0:96:13:CE:C7:96:E1:1F:5B:78:D0:C1:C2:77
Authority key identifier: B2:AB:D8:FD:C0:FE:26:8E:3B:C2:02:6E:E5:EC:69:CA:6B:B8:9F:35
Certificate issuer: /CN=b2abd8fdc0fe268e3bc2026ee5ec69ca6bb89f35
Certificate serial: 019D38D2B969C335EA062DD750D2CE3D574C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqvY_cD-Jo47wgJu5expymu4nzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ca71bf-ab7f-4a0e-a955-7efc5b751a7d/1/sqvY_cD-Jo47wgJu5expymu4nzU.mft
Manifest number: 22
Signing time: Sun 29 Mar 2026 09:00:27 +0000
Manifest this update: Sun 29 Mar 2026 09:00:27 +0000
Manifest next update: Mon 30 Mar 2026 09:00:27 +0000
Files and hashes: 1: OLfmHw3G69CHlt6FQSGhdYd-jnw.roa (hash: St7w/S2np1OP5tS27B/HX6714X0a8f9dEC3Bn7ikgwc=)
2: sqvY_cD-Jo47wgJu5expymu4nzU.crl (hash: AHxaXhEwEqrtmQAaO02CNctdUvcAu2raNV9J4uxLmio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ca71bf-ab7f-4a0e-a955-7efc5b751a7d/1/sqvY_cD-Jo47wgJu5expymu4nzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/ca71bf-ab7f-4a0e-a955-7efc5b751a7d/1/sqvY_cD-Jo47wgJu5expymu4nzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqvY_cD-Jo47wgJu5expymu4nzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b9:69:c3:35:ea:06:2d:d7:50:d2:ce:3d:57:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2abd8fdc0fe268e3bc2026ee5ec69ca6bb89f35
Validity
Not Before: Mar 29 09:00:27 2026 GMT
Not After : Mar 30 09:00:27 2026 GMT
Subject: CN=82a85e613c2fa09613cec796e11f5b78d0c1c277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:79:bd:4f:7b:d5:72:52:9b:dd:e9:cc:6e:be:
92:18:77:0c:6a:a0:dc:81:3c:82:3c:21:c1:54:bf:
2d:50:2c:14:76:b6:08:e3:e6:21:99:0d:81:20:6f:
a4:5d:8f:7b:89:fd:69:ac:23:74:0e:5c:82:16:c2:
6c:2c:ab:8a:91:80:95:f8:e1:57:3e:05:23:60:c8:
65:94:b4:72:bb:61:35:3c:d8:cb:ee:cc:69:a8:ec:
5b:9b:f7:46:fc:ee:71:3d:b0:e1:b4:48:37:54:35:
a3:bd:30:f0:97:17:a6:95:11:c3:43:7f:1c:ea:18:
99:62:15:bb:9f:5a:a7:60:80:9d:50:85:ce:a5:89:
00:e0:a6:84:4d:64:7b:ed:b3:bd:6f:31:4c:81:28:
2f:3a:ad:e8:cf:72:82:5d:d3:0d:aa:72:4d:3b:bb:
ae:a4:0a:24:5e:32:11:1f:a6:6f:f2:f2:14:4c:3e:
5a:e8:eb:91:98:71:a8:82:34:82:ad:ff:b7:1b:07:
fb:55:03:ac:1e:b6:a3:78:30:5e:ff:b2:eb:c6:1c:
be:21:21:6d:36:62:58:27:8f:5c:78:c7:dd:19:30:
62:2f:ed:58:04:d7:ac:35:79:4f:21:ea:ac:81:31:
2a:ff:4f:81:db:dd:d7:8f:48:10:38:35:ea:e5:b1:
f1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A8:5E:61:3C:2F:A0:96:13:CE:C7:96:E1:1F:5B:78:D0:C1:C2:77
X509v3 Authority Key Identifier:
keyid:B2:AB:D8:FD:C0:FE:26:8E:3B:C2:02:6E:E5:EC:69:CA:6B:B8:9F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqvY_cD-Jo47wgJu5expymu4nzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ca71bf-ab7f-4a0e-a955-7efc5b751a7d/1/sqvY_cD-Jo47wgJu5expymu4nzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ca71bf-ab7f-4a0e-a955-7efc5b751a7d/1/sqvY_cD-Jo47wgJu5expymu4nzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7c:d0:9e:3e:46:0b:a2:56:fe:0c:1e:81:55:1e:ee:13:74:
c1:ea:a7:84:6a:20:71:39:f4:ed:a4:d6:ba:d2:53:c5:cf:24:
93:85:dd:aa:44:6d:94:2a:08:f1:3d:42:06:81:4e:ef:7d:0a:
17:e2:31:fa:7a:8c:57:c0:a6:f2:23:25:b3:c6:18:e8:44:3e:
45:99:7e:cb:77:75:50:14:73:58:3f:67:94:8c:c5:54:59:9e:
07:2e:e5:7b:70:cf:1b:7a:58:97:75:bf:66:fb:8f:11:e9:cd:
6c:04:6d:62:41:1d:f6:ad:92:65:7a:2e:e2:ff:54:66:db:2a:
4d:38:de:10:2a:8c:6a:0c:60:ad:e1:1c:39:1e:3c:4e:75:7b:
c5:3d:e2:98:4e:3b:a2:28:77:e7:1b:57:46:fc:bf:0f:7f:cf:
08:a7:dc:8e:01:df:a0:06:41:ed:ca:bd:56:80:71:bb:23:3e:
94:c1:7d:e5:3c:26:28:b6:35:89:45:71:53:5d:10:a7:1e:d3:
8b:86:2d:8c:6f:08:e2:ed:31:3e:e8:66:30:ad:08:12:35:67:
ce:f1:0a:18:44:3f:40:01:bf:b8:89:1b:3d:d4:9e:bc:eb:b1:
bd:79:a0:4b:ef:2f:1c:1a:19:44:2a:d3:06:2f:10:6c:14:73:
95:f6:18:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:39:09 2026 by rpki-client