Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
File: 2SEUWCD-zu889VJwMmxeEkPyQ1U.mft (raw, json)
Hash identifier: akGARM9A0GeZMdvW4zyUvEdNkzQjssU13HdiLr+oZj8=
Subject key identifier: E4:BC:45:17:C1:4D:3E:4F:07:F4:39:17:E8:FB:2F:8B:F1:DB:B1:75
Authority key identifier: D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
Certificate issuer: /CN=d921145820feceef3cf55270326c5e1243f24355
Certificate serial: 019D28BB0CA59B2736FE24B7FE34CEB2BA53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
Manifest number: 13DA
Signing time: Thu 26 Mar 2026 06:00:40 +0000
Manifest this update: Thu 26 Mar 2026 06:00:40 +0000
Manifest next update: Fri 27 Mar 2026 06:00:40 +0000
Files and hashes: 1: 2SEUWCD-zu889VJwMmxeEkPyQ1U.crl (hash: 74zNh+LBB0smV6FZ0wlYwjpEqAeqLKmGggIMkQLkAGY=)
2: i9hMEuJaBfT7lcapiz_ahkSHzcg.roa (hash: fw1KAABJZ7dzQA1QjS2gjeHAVGrrtjSeZ6MepK2bPQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:0c:a5:9b:27:36:fe:24:b7:fe:34:ce:b2:ba:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d921145820feceef3cf55270326c5e1243f24355
Validity
Not Before: Mar 26 06:00:40 2026 GMT
Not After : Mar 27 06:00:40 2026 GMT
Subject: CN=e4bc4517c14d3e4f07f43917e8fb2f8bf1dbb175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:39:dc:71:89:50:b5:b4:a4:6d:30:b0:a2:8f:
68:5a:d0:4c:b5:ec:36:83:06:84:57:cb:6c:8b:b8:
db:15:4e:22:e2:43:dd:42:1d:b2:d4:24:79:f0:a2:
91:76:6c:79:7a:5c:41:64:ad:ed:ed:60:9c:9a:6b:
c3:99:1a:bd:08:f9:6e:bf:f9:3b:6c:f1:bb:d0:a6:
5b:45:e1:87:82:d0:29:a8:9d:34:28:0c:e5:d8:06:
6b:98:9c:33:74:af:2e:9b:24:55:39:50:78:67:06:
4c:f8:8b:06:b8:df:38:a5:1e:41:d4:36:3b:49:e7:
c5:b7:c7:0b:fa:af:56:2a:db:b4:19:5f:7c:03:de:
bb:fc:58:08:67:f2:50:ef:78:85:a2:fe:d3:d7:03:
4e:34:7a:2e:19:a9:a0:be:7a:9d:4f:87:2f:81:2c:
27:d2:55:fe:fa:28:af:da:f3:e3:42:8c:d0:83:a0:
8a:eb:a9:bc:a4:eb:36:1c:ce:6d:46:80:08:67:e4:
d9:bc:f6:e0:61:ef:20:e4:b6:b4:e8:e2:ab:58:67:
20:57:65:78:d7:eb:a0:fe:d5:14:c8:da:9b:08:27:
67:d1:f4:82:31:f6:5f:f2:e5:9e:25:3c:9c:39:b0:
46:33:56:ff:5c:c8:74:df:51:54:9b:c5:d8:52:b5:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BC:45:17:C1:4D:3E:4F:07:F4:39:17:E8:FB:2F:8B:F1:DB:B1:75
X509v3 Authority Key Identifier:
keyid:D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:67:ea:d7:fa:4c:af:8f:cc:af:28:d8:36:73:49:5c:61:88:
a0:88:7c:c9:9e:08:28:2b:4f:2f:7d:45:82:36:12:19:21:3e:
c0:f2:be:db:4d:ee:d8:bf:96:db:66:2a:e1:b5:98:ae:ca:6c:
48:5a:3a:99:76:8c:c7:44:02:55:bc:ad:33:52:fb:7a:ec:1c:
a0:03:84:ef:9a:d8:e4:36:d5:50:0e:3e:52:89:37:30:51:7e:
35:ba:0e:d8:a4:79:4c:6d:2c:5c:56:27:44:2a:cb:18:b8:16:
13:f1:90:80:46:eb:b1:31:dc:1d:9c:20:74:39:f5:26:62:8b:
9e:d5:2b:41:30:3c:a2:7c:0f:e0:22:a4:bb:68:63:af:d9:af:
59:7f:9a:d2:90:5a:ca:c0:64:79:e4:0b:8f:23:5b:96:18:5c:
fb:d9:20:97:c7:71:78:e4:d4:24:98:e7:a8:64:de:4b:99:73:
9d:6a:e5:91:09:3f:ed:d4:f6:26:f2:cc:3b:68:c2:4b:d8:1b:
a4:83:30:e6:61:a9:0f:88:8e:f1:3a:20:40:32:0f:55:92:80:
cb:2f:ec:91:72:a9:f8:05:d2:45:6d:e5:a4:01:6a:e9:8d:59:
ba:4a:e9:93:64:1b:a6:11:1c:d2:41:e5:40:dc:78:ce:ef:89:
74:11:5b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:52:17 2026 by rpki-client