Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
File: sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft (raw, json)
Hash identifier: jwBRdCNDVDChNkkEE8WTLU4KBcfpz7ItjprxPuUYloo=
Subject key identifier: 3D:AE:6E:2B:C2:46:67:19:4A:CE:1C:B3:9A:EB:02:27:E5:3A:19:E6
Authority key identifier: B0:43:E6:21:FE:10:09:70:1F:63:66:84:3C:0A:BC:41:E1:80:C1:44
Certificate issuer: /CN=b043e621fe1009701f6366843c0abc41e180c144
Certificate serial: 019D2772CE7B287D104F9CD4485837F0C673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
Manifest number: 0F6E
Signing time: Thu 26 Mar 2026 00:02:08 +0000
Manifest this update: Thu 26 Mar 2026 00:02:08 +0000
Manifest next update: Fri 27 Mar 2026 00:02:08 +0000
Files and hashes: 1: OgmO1-eTgD9dDZrWj316OjI4JBA.roa (hash: 2J65qaET21q0mAcovvv6olsnYJM+JIut2vJCZjhvWr4=)
2: sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl (hash: ynr6uSSKBsKBaAZfbS4HnYvxGp5RGPoEiixo60uh2F4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:ce:7b:28:7d:10:4f:9c:d4:48:58:37:f0:c6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b043e621fe1009701f6366843c0abc41e180c144
Validity
Not Before: Mar 26 00:02:08 2026 GMT
Not After : Mar 27 00:02:08 2026 GMT
Subject: CN=3dae6e2bc24667194ace1cb39aeb0227e53a19e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:af:c4:53:04:37:1f:3d:e4:81:58:ea:05:dd:
f3:76:c9:0b:a5:5f:fe:29:7a:f9:74:08:e7:8a:67:
32:8c:af:65:ef:67:76:ab:01:84:6f:93:c4:55:c7:
1f:42:4c:a9:da:d6:19:e6:1a:df:76:fa:9a:4b:77:
8d:81:34:11:ee:63:e4:3d:69:12:cc:80:f8:41:0d:
8a:5c:2e:9e:2f:42:de:13:6c:38:28:d0:8f:3b:06:
ee:e3:cf:de:8f:58:73:2c:41:2d:a2:73:4b:d0:16:
6b:db:b0:00:c6:38:f8:94:f9:04:ef:22:f1:60:3e:
10:7d:56:a3:47:4f:d5:97:eb:40:3c:5f:df:e2:dc:
4e:9c:67:00:e8:40:d4:00:62:11:e8:27:d8:6f:04:
a7:07:c0:b9:1c:0e:a5:2e:70:01:56:ae:84:52:14:
8e:5a:02:47:31:cd:9b:57:31:71:99:68:de:a2:68:
8c:c4:c3:31:9c:88:4b:32:f1:31:5e:9d:13:97:d3:
9d:97:cb:69:c8:00:cf:ff:52:e5:a3:eb:a3:99:44:
69:59:04:74:40:2c:b9:81:f0:93:cf:5e:d2:90:c5:
a5:5d:6e:98:af:ef:3c:fb:e4:10:21:34:0c:00:6b:
ca:ce:5c:d7:88:ca:ce:52:da:fc:09:88:67:48:c3:
74:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AE:6E:2B:C2:46:67:19:4A:CE:1C:B3:9A:EB:02:27:E5:3A:19:E6
X509v3 Authority Key Identifier:
keyid:B0:43:E6:21:FE:10:09:70:1F:63:66:84:3C:0A:BC:41:E1:80:C1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f9:3d:52:56:20:2c:b3:fc:d1:4f:5c:0e:ff:7d:af:1f:f5:
c0:e1:3d:a6:3c:15:8c:c9:d8:98:c8:a8:8e:3a:17:5e:b8:84:
87:f5:c6:e6:6d:14:0e:7e:0c:19:85:0e:a7:07:40:7d:76:a9:
be:40:bd:e8:77:7d:91:ba:75:95:4b:db:95:2e:ca:ce:4f:d4:
93:81:0f:58:a6:cc:11:0a:e1:f1:71:19:8f:29:19:89:33:f4:
e3:39:d2:46:c8:21:97:91:a5:49:87:f0:02:3b:36:76:b7:cb:
d1:b5:43:87:ee:8c:56:e6:94:d2:be:21:a1:fe:59:f1:1b:fc:
65:91:50:11:21:96:45:06:25:8f:d5:6b:c9:4a:07:40:bb:4a:
03:ec:ce:4d:44:60:92:1b:9c:c7:54:03:28:2f:f9:45:bf:1a:
74:88:e5:1f:d6:44:c2:2c:69:72:bc:11:67:7b:87:1c:32:fa:
6f:29:c5:95:ae:d7:39:a1:58:3c:7f:3d:6e:17:1e:24:a7:92:
b7:9c:7f:6d:fc:80:76:ba:bc:5f:b2:13:0d:af:bb:51:b1:bf:
57:8a:0a:3f:a3:49:07:1b:bf:13:35:b6:c5:85:c3:3f:53:64:
d0:3e:ce:d2:1f:e2:1f:5b:9a:9b:80:0e:4f:a7:6f:b4:87:ec:
b4:83:86:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:06:22 2026 by rpki-client