Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
File: Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft (raw, json)
Hash identifier: CCN5w0hfELWnszaLMPHhnp74PB2um7udvJQtPWAYuf4=
Subject key identifier: 49:F6:93:52:1C:B1:32:1A:E3:8E:F6:75:7E:A2:97:DA:90:E2:DC:74
Authority key identifier: 49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
Certificate issuer: /CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Certificate serial: 019D26CD7B15E0B0A848DF169AC2EAD004F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
Manifest number: 042E
Signing time: Wed 25 Mar 2026 21:01:33 +0000
Manifest this update: Wed 25 Mar 2026 21:01:33 +0000
Manifest next update: Thu 26 Mar 2026 21:01:33 +0000
Files and hashes: 1: 8T3acIHbQX8fyEJ5mkqPUIJ9D9Q.roa (hash: WRS8pShL0FkQT8FXDUYCk0fdYgGKAZRSkFncH1hi1cg=)
2: Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl (hash: 9zRMOzaZ+pv96IPzu4fMOKfm8Aj5/MXBgkMjyPcNi+Y=)
3: SzzN2_utFSlvLUqgvOUxnZyU9VQ.roa (hash: eMVjdl3Mgz85B4WMxfHAJkDWuvHzhFy3/1YUmCiTiuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:7b:15:e0:b0:a8:48:df:16:9a:c2:ea:d0:04:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Validity
Not Before: Mar 25 21:01:33 2026 GMT
Not After : Mar 26 21:01:33 2026 GMT
Subject: CN=49f693521cb1321ae38ef6757ea297da90e2dc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2e:41:4c:1c:d5:92:f0:b1:c4:78:3d:f0:96:
7b:ab:12:6c:67:31:8b:11:7d:6f:e8:a2:8d:8c:a0:
19:36:0a:dd:2d:3f:4a:d5:65:02:09:86:11:59:12:
d1:e3:f6:97:01:ac:c7:52:48:c7:92:8c:f7:1b:7e:
61:53:6a:32:30:24:31:a7:22:de:85:3f:3b:bb:30:
fc:b3:ca:c8:00:a6:5c:1e:6c:67:15:43:d3:3e:2d:
b4:f7:97:cb:08:07:eb:02:b7:2a:d0:e7:3c:06:66:
5f:fb:ba:7b:74:ee:0b:d2:0e:27:c0:4a:a1:af:4d:
62:46:d5:ea:92:fa:cb:a2:8e:72:34:7d:50:1c:03:
72:b2:cd:85:3d:ef:62:92:88:6b:95:66:a9:68:5d:
a4:8d:30:b5:89:c1:38:5b:3f:b0:42:3b:d3:f5:34:
93:8d:92:da:d6:b8:54:a3:0f:13:7e:8b:ae:9a:dc:
fe:be:8d:b4:1d:fe:e2:22:c8:09:73:4e:b6:6a:8f:
cf:a2:87:6d:14:73:d1:a8:af:3b:48:24:a9:a9:15:
ba:1d:b2:48:20:bd:7d:61:92:8c:a1:0a:90:6f:60:
22:fc:ba:e7:8c:9f:dd:58:e4:86:1a:93:2f:a1:bc:
be:f8:df:cb:6e:3f:85:f0:19:7c:a5:e7:40:76:c0:
83:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F6:93:52:1C:B1:32:1A:E3:8E:F6:75:7E:A2:97:DA:90:E2:DC:74
X509v3 Authority Key Identifier:
keyid:49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c9:42:87:4e:89:f9:30:4a:84:61:f4:69:57:1c:96:37:01:
a0:47:b7:a8:50:4e:11:04:5c:16:6b:26:d0:4f:4a:ac:7b:31:
4e:e6:b3:a3:78:8c:3a:be:cc:da:93:13:28:91:d6:9b:54:e3:
a9:4a:c9:b5:66:8e:b4:48:67:b5:1e:92:a1:e7:d3:4f:8c:5a:
97:07:40:12:a4:6c:be:86:d5:00:2c:d7:c2:7a:bc:b4:3a:8d:
e1:69:4f:22:f4:52:42:cd:13:cf:78:25:5d:88:ef:2f:60:87:
2d:81:58:ac:b7:83:ce:87:c7:d5:cb:cb:26:2e:d0:34:e3:20:
3e:48:d2:ca:d5:aa:af:3c:c0:c2:40:50:37:73:ed:7b:0a:c1:
ec:ef:2e:e9:ba:32:b7:19:1e:56:5e:21:5d:6b:7e:8d:0c:c5:
d1:9c:c3:03:8c:7b:19:27:1e:fa:7e:04:31:58:05:2f:00:fe:
f9:77:ab:f6:79:07:32:d1:9f:bd:c8:82:11:49:3f:a8:2f:b6:
3b:fe:3f:13:5d:14:fc:97:84:e3:33:8a:4b:08:46:ef:0f:09:
82:5c:7b:6d:15:d9:65:56:f7:30:5a:45:be:b2:4c:f8:14:22:
a2:ac:05:80:ee:41:64:bb:20:df:12:8b:2a:76:f8:82:a3:a2:
1e:37:5d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:17 2026 by rpki-client