Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
File: se1mdqhXWQtjZbdsVYDXD8qNuqY.mft (raw, json)
Hash identifier: 0DAYDXwkUo/vbX72G4QV8TjoO5/xDrN/AN0xuzht/to=
Subject key identifier: 00:85:AB:CB:F8:88:51:93:83:BC:22:1D:05:7C:6E:7E:6A:93:6B:1D
Authority key identifier: B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
Certificate issuer: /CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Certificate serial: 019D265F8B4E9CE4357ABBF639FAFE00C385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
Manifest number: 0DE1
Signing time: Wed 25 Mar 2026 19:01:28 +0000
Manifest this update: Wed 25 Mar 2026 19:01:28 +0000
Manifest next update: Thu 26 Mar 2026 19:01:28 +0000
Files and hashes: 1: Fve8k_OZNdjUkZnIqvSmNlcd0Lg.roa (hash: UBZQn4YtqRGaTXDZC6SHIOianNxT0DmdDIUesthKpiY=)
2: se1mdqhXWQtjZbdsVYDXD8qNuqY.crl (hash: YjjFfSyV+0PIeseEGRQWAiFFrBZCBwLoPXaR46jcjig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:8b:4e:9c:e4:35:7a:bb:f6:39:fa:fe:00:c3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Validity
Not Before: Mar 25 19:01:28 2026 GMT
Not After : Mar 26 19:01:28 2026 GMT
Subject: CN=0085abcbf888519383bc221d057c6e7e6a936b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:89:2e:06:78:dd:ba:d1:4d:43:c3:c9:8a:a4:
b3:23:42:61:b7:71:1a:0b:bf:a4:5a:a1:6a:1f:69:
f2:7e:6d:21:51:01:db:48:78:38:d2:15:a2:14:d2:
16:c2:4c:6d:7b:4c:13:d0:7d:6f:ed:be:a4:23:64:
07:a4:e2:3f:30:dd:67:3a:fc:50:8f:2b:72:f4:f3:
2e:0b:0a:98:e9:38:67:01:8c:f2:81:6a:10:09:1f:
55:1a:c8:c2:e2:50:27:45:18:fd:d1:29:39:13:51:
b5:37:d6:b4:36:0a:d6:97:32:d9:49:cf:c9:2c:d7:
8c:39:d1:fd:24:7f:e4:dc:1f:aa:17:1d:d3:28:91:
6a:87:98:e7:99:b8:24:5f:1d:c4:bd:e3:17:44:d7:
4f:a4:00:91:20:95:58:2d:4c:2e:26:82:fd:2e:4a:
e2:38:cb:15:7b:c7:a0:16:d9:81:40:bd:f4:8f:b5:
f7:f4:da:53:58:22:1c:66:67:52:16:bb:7f:6f:56:
b8:60:00:ce:06:69:9e:29:cd:43:55:aa:26:61:7a:
37:2b:34:8f:32:48:4a:45:15:35:84:20:e7:61:ec:
60:15:7f:63:53:2b:c1:b3:1b:8b:28:79:6c:bf:33:
ed:d2:79:aa:66:15:3c:e4:75:76:70:45:72:14:40:
89:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:85:AB:CB:F8:88:51:93:83:BC:22:1D:05:7C:6E:7E:6A:93:6B:1D
X509v3 Authority Key Identifier:
keyid:B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c1:4b:b2:47:01:3a:24:7f:61:58:1c:74:c3:c8:b5:70:47:
84:25:8d:49:de:59:b8:65:ee:91:a2:2a:31:ad:85:6e:76:e0:
d9:6b:a9:c4:e6:6a:9c:d3:5e:e6:33:e8:de:3a:93:80:6e:aa:
bf:a9:67:28:41:ec:d5:db:c7:53:dc:97:d3:10:0b:01:71:83:
51:65:c5:a8:41:17:6a:a4:cc:fa:93:9d:2c:ed:45:c7:33:07:
e4:6e:0c:b8:1d:ca:a1:30:75:fe:cb:de:36:eb:15:61:03:d9:
2c:9f:1e:1f:7e:48:f6:ee:9c:ee:e7:07:4c:50:3b:1f:e6:07:
eb:d9:0b:74:10:ca:ce:6d:7b:56:fb:80:0f:fa:fc:ec:54:c3:
78:17:e9:91:67:84:f4:74:d3:07:db:f3:23:0b:10:e4:3d:e1:
2f:fc:4f:87:e3:c9:b0:71:02:ed:8e:87:66:2e:3a:ef:97:47:
9a:e7:50:f6:fc:ce:0b:d7:97:85:0e:f7:26:17:43:24:7d:63:
83:a7:af:06:97:cd:24:68:87:1f:5c:67:96:11:39:6a:9c:6d:
d6:d5:7c:75:78:3d:4c:50:ba:07:3e:b1:16:e6:d9:59:59:24:
5b:e2:ea:f5:ab:0e:7a:90:f5:bf:3d:69:b9:f6:85:1b:66:40:
ff:bd:0b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:41:44 2026 by rpki-client