Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
File: seWdsb2vITytIQJfd4-slhj9TpE.mft (raw, json)
Hash identifier: grqVH0BnMTvJ2mjrH4FSxq8CQV70aqNorxzZOEMhsWI=
Subject key identifier: CC:00:87:75:A9:45:9D:D9:47:07:BE:1E:03:ED:C8:0E:A6:2F:2E:E6
Authority key identifier: B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
Certificate issuer: /CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Certificate serial: 019E20FF0A9E1A7261FFE905B9E37B0E7E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
Manifest number: 08BD
Signing time: Wed 13 May 2026 11:00:45 +0000
Manifest this update: Wed 13 May 2026 11:00:45 +0000
Manifest next update: Thu 14 May 2026 11:00:45 +0000
Files and hashes: 1: AfKCe3eoQWEy1uxfoPuR6eANwYY.roa (hash: 91ThPj8ugGh8/5I3Q1tQOs17cu6H9LI8ziMSoHRM8QQ=)
2: VDZj_D0mJdmuFpACF6pwxY8L5ps.roa (hash: SB8GonjijdreEO57BgHYG/lJRJLCZOlEr7Hgg460VeY=)
3: seWdsb2vITytIQJfd4-slhj9TpE.crl (hash: uS90z5cL+h8kyARAj8OQFeZW+tuqqxxf+XJ2K5l6WDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:0a:9e:1a:72:61:ff:e9:05:b9:e3:7b:0e:7e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Validity
Not Before: May 13 11:00:45 2026 GMT
Not After : May 14 11:00:45 2026 GMT
Subject: CN=cc008775a9459dd94707be1e03edc80ea62f2ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:38:20:a1:c7:7e:55:18:c9:42:8f:89:34:10:
86:29:27:40:37:42:c7:4f:ee:74:0c:43:7f:2c:57:
4b:b3:22:30:fd:dd:8e:fd:44:d2:05:42:ad:06:f6:
70:ce:50:69:b3:78:52:04:19:fe:c0:d5:f3:39:f9:
40:df:c4:2c:63:db:f3:17:96:61:10:fe:f2:fd:a5:
52:87:7f:27:1e:36:66:4b:94:be:de:27:fe:b0:69:
8e:7f:5f:5f:6d:a1:6f:01:d4:b2:76:22:14:40:a3:
da:00:10:32:85:ee:e2:82:b1:76:0b:a4:9a:36:49:
c9:b7:7e:87:19:ee:60:56:88:2c:16:fd:b6:b5:39:
b9:38:b9:fd:8e:d8:8f:c6:9d:f0:60:71:a6:21:51:
db:9c:b0:bc:cc:8e:6a:fc:b7:4c:22:be:00:8c:26:
7b:cf:5e:9f:b0:c5:f9:81:a3:44:4c:ac:65:02:88:
26:7c:1c:aa:05:6d:4c:f4:46:6b:00:86:a6:e4:87:
00:df:2a:b8:bf:e9:cf:bc:e7:79:54:4c:32:7f:56:
e8:e2:18:f9:ec:69:e4:47:c3:59:45:86:de:32:85:
37:85:f2:b4:64:14:27:98:5e:80:ad:df:49:b9:79:
4a:06:d9:ae:78:d4:7f:fb:39:d4:5e:9b:d2:07:ad:
7b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:00:87:75:A9:45:9D:D9:47:07:BE:1E:03:ED:C8:0E:A6:2F:2E:E6
X509v3 Authority Key Identifier:
keyid:B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9a:d5:9e:ee:81:7a:1d:fd:ca:82:be:84:a9:ac:80:bb:d2:
f5:b0:b5:24:c1:79:5d:46:98:46:8a:07:d1:9e:e3:af:5e:e0:
74:98:b3:47:3f:35:9a:ae:75:54:10:aa:61:41:37:31:04:00:
83:eb:dc:ee:aa:6f:6e:5e:ca:8f:3b:5a:7b:b3:e6:04:0f:b8:
25:c4:a0:e8:ad:24:a3:f0:a7:e6:81:f1:0b:bb:cf:e8:16:22:
19:61:5f:21:7d:91:68:d9:95:20:6d:4b:6b:a2:c5:05:7d:ef:
99:d1:6f:f7:b4:b1:c0:71:c6:f5:4d:2e:e4:d4:bb:83:a8:5b:
5b:f8:0e:b8:25:d5:ae:b8:6b:46:95:05:db:27:c7:63:8b:94:
b5:ce:3f:3e:51:90:e5:96:e5:4c:cb:9f:00:a2:d3:b6:7a:15:
f7:2b:d4:88:2c:90:af:62:00:69:ca:9c:11:29:71:b3:50:34:
04:70:aa:8a:76:9e:fe:39:bb:fe:50:4d:50:c0:20:5c:49:9b:
6f:0f:ea:8a:53:af:f8:07:3f:95:57:0e:41:52:19:25:5f:9b:
32:e2:9d:24:38:e8:e1:6a:4b:3c:af:41:ca:9b:c4:0b:b4:b8:
e9:db:85:9b:15:f6:af:0d:b1:06:a1:d0:bc:53:09:98:61:74:
53:c7:29:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:37:56 2026 by rpki-client