Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
File: 2SEUWCD-zu889VJwMmxeEkPyQ1U.mft (raw, json)
Hash identifier: KC4u6NLUpmzvOT1ENJN/FeZXrqyq5cvE3SRpeJUEQGo=
Subject key identifier: BD:5D:9C:77:F3:44:ED:A6:60:13:BB:97:80:79:DD:67:BE:A3:7A:E5
Authority key identifier: D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
Certificate issuer: /CN=d921145820feceef3cf55270326c5e1243f24355
Certificate serial: 019E1C0F90B14B1507F8DBC0729515BB3DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
Manifest number: 1458
Signing time: Tue 12 May 2026 12:00:42 +0000
Manifest this update: Tue 12 May 2026 12:00:42 +0000
Manifest next update: Wed 13 May 2026 12:00:42 +0000
Files and hashes: 1: 2SEUWCD-zu889VJwMmxeEkPyQ1U.crl (hash: hmyZq10aE7/Gc0wMo2eInYwzLBUbSvf6wtXkvyJyfcU=)
2: i9hMEuJaBfT7lcapiz_ahkSHzcg.roa (hash: fw1KAABJZ7dzQA1QjS2gjeHAVGrrtjSeZ6MepK2bPQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:90:b1:4b:15:07:f8:db:c0:72:95:15:bb:3d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d921145820feceef3cf55270326c5e1243f24355
Validity
Not Before: May 12 12:00:42 2026 GMT
Not After : May 13 12:00:42 2026 GMT
Subject: CN=bd5d9c77f344eda66013bb978079dd67bea37ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:13:ce:fd:19:15:69:65:34:e7:b0:21:78:16:
8e:58:c5:db:a4:11:9e:30:a6:0c:87:9a:99:24:d1:
a8:d1:3f:9b:aa:00:e7:fe:13:fb:62:29:0e:47:7e:
b4:0a:6f:8d:15:86:8f:7c:d9:c3:5c:44:d7:e6:7f:
4a:5a:29:b1:45:dd:6b:7c:ad:bd:ab:be:8a:41:98:
c2:c8:96:a2:3d:7f:5f:10:f1:3c:dc:f9:94:5c:0a:
e6:dd:f3:be:99:71:2e:bc:a6:c4:6b:16:5f:12:49:
fb:ea:d3:4b:cf:a5:75:84:5c:f8:c7:8a:48:7a:3e:
00:d0:d5:b0:36:15:3b:8b:4c:e9:5e:82:71:ab:a4:
c5:2e:a8:d4:91:d9:21:9a:d3:1b:1c:25:4a:03:2b:
0d:f1:01:22:ee:ee:c8:59:13:a6:78:72:ff:06:f0:
f3:30:cd:a2:4b:d7:a6:f7:59:b3:6a:03:96:1f:55:
c3:11:82:52:63:dd:6f:72:d0:e3:e8:b8:68:8b:fb:
64:a7:83:4b:00:e7:f9:9e:15:18:e9:6c:38:ba:a4:
e2:60:9d:4d:c9:8a:69:65:a8:c4:76:7a:14:c0:7b:
62:dc:f4:e8:33:17:43:e3:99:9b:e3:02:e8:d6:5b:
70:ef:74:68:6a:de:5b:19:5f:6f:f9:de:fb:cf:ae:
4c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5D:9C:77:F3:44:ED:A6:60:13:BB:97:80:79:DD:67:BE:A3:7A:E5
X509v3 Authority Key Identifier:
keyid:D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:31:e3:8d:69:6b:d7:b4:e6:f8:b2:7d:1a:5b:06:48:49:10:
fe:33:dd:c1:ca:6a:87:22:d5:07:fd:d1:85:9f:21:77:ae:8f:
74:b2:9f:84:ac:12:24:bc:ba:56:25:71:c0:fa:b7:ea:1d:cc:
d7:19:2b:1b:98:1c:c0:f9:69:bd:71:e2:8b:5e:ac:0c:7c:21:
b4:c0:09:88:9f:4e:bd:bf:7a:c6:ed:58:7a:19:63:e0:5c:73:
7c:7d:c4:a8:65:be:32:7c:b8:75:75:3a:38:3a:e8:fe:f3:01:
d6:ee:ca:3a:6d:b1:b4:68:30:18:d5:f0:a8:50:52:b8:e9:60:
14:f8:d1:54:bc:92:bd:21:16:6d:55:c9:08:da:85:38:77:63:
d9:6e:54:7d:76:06:e5:32:ca:63:ee:97:03:9a:9e:32:e5:1d:
13:46:e7:c8:90:3a:88:db:17:18:d3:7d:c5:97:f6:94:df:78:
48:84:35:04:61:2c:f6:ac:25:88:32:4a:49:66:dc:81:1d:2a:
ff:ad:16:20:41:3d:bd:f0:85:83:4b:9d:9d:3a:48:68:e4:67:
1f:36:14:4e:73:a4:23:ac:87:4d:f2:44:98:6c:a9:e5:8d:2e:
8a:1a:e0:2e:2b:19:a0:81:ba:16:70:d6:8b:5d:cc:c4:57:a5:
a0:ca:09:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:59 2026 by rpki-client