Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
File: sejPc4YgDf2psGfbnHfTBmDXTNo.mft (raw, json)
Hash identifier: wgrq7bkhxQnBrDoDCLOcjegP1aY9xJbwe/EC7bjs9Dk=
Subject key identifier: CF:07:FF:76:18:21:B2:77:D1:C8:ED:0D:BB:E3:2E:09:04:82:44:F2
Authority key identifier: B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
Certificate issuer: /CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Certificate serial: 019D26CD11BA8076BECD22128FFB95FB4092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
Manifest number: 0DA0
Signing time: Wed 25 Mar 2026 21:01:06 +0000
Manifest this update: Wed 25 Mar 2026 21:01:06 +0000
Manifest next update: Thu 26 Mar 2026 21:01:06 +0000
Files and hashes: 1: hKDjaD83iRNw9KqUmwJ4dn-wayQ.roa (hash: 10/6EyjVD8LS9DDC/nxhOd/PoDCy15V9W7b4OpC/X6g=)
2: sejPc4YgDf2psGfbnHfTBmDXTNo.crl (hash: 4tBXnwdYWWXHN4dN3ysH+Xr3eU4AOA6lgeG/ff5NDhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:11:ba:80:76:be:cd:22:12:8f:fb:95:fb:40:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Validity
Not Before: Mar 25 21:01:06 2026 GMT
Not After : Mar 26 21:01:06 2026 GMT
Subject: CN=cf07ff761821b277d1c8ed0dbbe32e09048244f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:6c:b6:b7:ec:79:62:49:e8:5b:1e:4e:f4:
16:0d:cd:d1:e9:b9:c6:c7:57:f2:bd:67:69:16:5e:
11:f8:f2:1c:d9:32:fc:f6:69:e7:19:35:e2:41:60:
d1:7e:43:e9:bd:3c:c7:ad:db:3a:8b:ac:b0:66:35:
03:fd:eb:c1:95:80:09:6e:40:ff:fe:30:90:53:71:
94:1d:ce:c5:1f:f9:6a:1e:79:e5:c9:4c:32:24:1c:
f3:08:22:6f:70:8b:df:02:d7:b4:53:21:3f:77:03:
91:5d:fa:b6:51:7c:f8:24:d4:f5:4b:b1:3d:ca:38:
82:a5:8f:ce:f6:ac:2e:3e:18:2c:46:f5:ab:d6:78:
54:c4:0c:61:71:9c:c2:7e:d9:cd:51:2a:27:f8:13:
bd:9b:0b:af:b2:41:e5:c1:53:95:0f:4a:f9:31:8d:
7d:ea:a8:ad:6a:a0:8f:49:5d:84:23:fa:85:41:69:
1c:65:27:49:7a:0b:e8:0e:f4:a9:8b:fd:71:fb:86:
17:e3:50:95:2e:cf:4f:e7:ca:1f:6f:25:a0:9a:29:
e9:83:cc:15:c3:56:12:86:f2:c8:a7:96:bf:af:d6:
81:93:09:4d:4a:95:5a:d1:dd:8d:52:db:89:70:1f:
be:e7:0e:93:4a:1a:4c:d2:de:34:ae:bc:d2:5a:e3:
1d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:07:FF:76:18:21:B2:77:D1:C8:ED:0D:BB:E3:2E:09:04:82:44:F2
X509v3 Authority Key Identifier:
keyid:B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:84:d6:e3:a6:fd:ae:c0:e4:5e:be:ed:b1:7f:07:b1:c4:10:
a7:0d:c9:50:a9:95:c9:20:bb:b2:eb:f4:0c:06:16:8a:72:6c:
8f:a4:f4:31:f0:3e:eb:95:7e:91:12:77:25:8e:c0:16:af:20:
3d:17:22:98:d1:43:c3:68:10:f3:49:aa:5a:8c:f0:23:37:0c:
9e:58:9c:5c:0d:37:d4:2a:51:e1:a6:bc:4b:a5:9e:54:45:22:
85:c8:1c:3c:9a:5f:6a:76:3f:8a:ab:4a:52:32:aa:a4:49:2a:
45:5a:7a:ba:0c:15:c3:13:b9:05:d8:30:d8:c6:7a:4c:71:c1:
8b:48:61:47:3c:7b:3a:27:78:b7:30:88:11:1f:fb:5f:0d:1f:
14:8b:ce:5f:27:a6:85:d5:af:d9:11:aa:4e:e7:8e:b4:38:19:
ee:af:0a:0b:62:21:bc:ca:ef:79:d6:e7:14:eb:6e:6a:55:1d:
53:bd:31:73:63:35:63:69:40:cd:ca:f7:fb:f1:19:be:7d:81:
55:ca:59:3b:4b:2a:b7:27:7e:ca:98:74:04:80:cc:09:36:e2:
6a:75:49:90:5e:07:2b:2b:08:26:b2:05:38:c1:8d:ee:f0:51:
31:6d:89:3a:59:e4:c2:13:a5:d5:9e:21:08:76:fa:01:97:60:
40:33:4b:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzRG6gHa+zSISj/uV+0CSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZThjZjczODYyMDBkZmRhOWIwNjdkYjljNzdkMzA2NjBk
NzRjZGEwHhcNMjYwMzI1MjEwMTA2WhcNMjYwMzI2MjEwMTA2WjAzMTEwLwYDVQQD
EyhjZjA3ZmY3NjE4MjFiMjc3ZDFjOGVkMGRiYmUzMmUwOTA0ODI0NGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ1strfseWJJ6FseTvQWDc3R6bnG
x1fyvWdpFl4R+PIc2TL89mnnGTXiQWDRfkPpvTzHrds6i6ywZjUD/evBlYAJbkD/
/jCQU3GUHc7FH/lqHnnlyUwyJBzzCCJvcIvfAte0UyE/dwORXfq2UXz4JNT1S7E9
yjiCpY/O9qwuPhgsRvWr1nhUxAxhcZzCftnNUSon+BO9mwuvskHlwVOVD0r5MY19
6qitaqCPSV2EI/qFQWkcZSdJegvoDvSpi/1x+4YX41CVLs9P58ofbyWgminpg8wV
w1YShvLIp5a/r9aBkwlNSpVa0d2NUtuJcB++5w6TShpM0t40rrzSWuMdDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8H/3YYIbJ30cjtDbvjLgkEgkTyMB8GA1UdIwQY
MBaAFLHoz3OGIA39qbBn25x30wZg10zaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2VqUGM0WWdEZjJwc0dmYm5IZlRCbURYVE5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mNDk5Y2QtZmFkNi00ZmIwLTliZTct
NGE3OTA0ZmZjOGUxLzEvc2VqUGM0WWdEZjJwc0dmYm5IZlRCbURYVE5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mNDk5Y2QtZmFkNi00ZmIwLTliZTctNGE3OTA0ZmZjOGUx
LzEvc2VqUGM0WWdEZjJwc0dmYm5IZlRCbURYVE5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASoTW46b9
rsDkXr7tsX8HscQQpw3JUKmVySC7suv0DAYWinJsj6T0MfA+65V+kRJ3JY7AFq8g
PRcimNFDw2gQ80mqWozwIzcMnlicXA031CpR4aa8S6WeVEUihcgcPJpfanY/iqtK
UjKqpEkqRVp6ugwVwxO5Bdgw2MZ6THHBi0hhRzx7Oid4tzCIER/7Xw0fFIvOXyem
hdWv2RGqTueOtDgZ7q8KC2IhvMrvedbnFOtualUdU70xc2M1Y2lAzcr3+/EZvn2B
VcpZO0sqtyd+yph0BIDMCTbianVJkF4HKysIJrIFOMGN7vBRMW2JOlnkwhOl1Z4h
CHb6AZdgQDNL0w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:42 2026 by rpki-client