Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
File: seWdsb2vITytIQJfd4-slhj9TpE.mft (raw, json)
Hash identifier: MGyDQXRRT+rVslFH+FA/VaizobgheSA6FW/JsK2o8Cc=
Subject key identifier: 79:D7:F9:B6:38:09:34:1B:BD:38:1A:44:C3:3F:9B:DF:B3:F6:31:74
Authority key identifier: B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
Certificate issuer: /CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Certificate serial: 019D27E047819FAF3389CC36DC80650B5A80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
Manifest number: 083C
Signing time: Thu 26 Mar 2026 02:01:42 +0000
Manifest this update: Thu 26 Mar 2026 02:01:42 +0000
Manifest next update: Fri 27 Mar 2026 02:01:42 +0000
Files and hashes: 1: AfKCe3eoQWEy1uxfoPuR6eANwYY.roa (hash: 91ThPj8ugGh8/5I3Q1tQOs17cu6H9LI8ziMSoHRM8QQ=)
2: VDZj_D0mJdmuFpACF6pwxY8L5ps.roa (hash: SB8GonjijdreEO57BgHYG/lJRJLCZOlEr7Hgg460VeY=)
3: seWdsb2vITytIQJfd4-slhj9TpE.crl (hash: /B0SZnjFa4GDOFRuNI6wDblen1p5d6dKh7m7oCWHOIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:47:81:9f:af:33:89:cc:36:dc:80:65:0b:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Validity
Not Before: Mar 26 02:01:42 2026 GMT
Not After : Mar 27 02:01:42 2026 GMT
Subject: CN=79d7f9b63809341bbd381a44c33f9bdfb3f63174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:5d:25:c9:ef:e1:5d:05:e7:89:2e:4e:4c:
1b:e8:05:c2:a1:78:70:da:72:a8:1b:74:16:24:80:
0a:0a:98:11:29:31:94:04:1f:45:ba:0a:f1:db:96:
b7:35:5d:6b:39:40:5e:20:a1:d9:7b:bc:12:e7:13:
c2:15:32:2e:97:9e:fd:8a:d6:f1:9c:48:42:a4:94:
9b:76:e0:a2:54:5b:75:8a:ec:6c:1d:36:75:df:c6:
09:d0:21:71:c9:57:7f:8f:19:20:a5:ed:2c:a9:56:
4d:84:23:4b:3e:fd:6b:7d:b4:fa:3a:32:93:d9:dc:
29:29:1c:ab:a9:c9:26:c3:a2:13:ac:91:b8:89:a7:
18:e3:96:9f:7e:c0:88:9f:80:24:c8:ca:1f:48:ea:
71:04:0d:bf:de:ff:be:2b:8c:7e:28:66:8a:04:eb:
31:d0:f0:4b:96:b5:01:9e:16:a6:07:24:5d:f6:99:
2e:5b:51:85:0c:3f:89:00:86:0c:7b:df:c1:a0:36:
e8:e5:ca:de:a3:f3:3d:5e:bc:8d:e2:3c:e1:7c:7b:
2c:76:1e:92:dc:70:1d:ef:b8:4f:43:a9:50:7e:91:
bf:e9:84:56:5f:67:8a:07:7d:0d:55:7c:f8:00:62:
cf:94:d3:a4:97:17:fc:a4:5d:35:65:07:42:80:a0:
8e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D7:F9:B6:38:09:34:1B:BD:38:1A:44:C3:3F:9B:DF:B3:F6:31:74
X509v3 Authority Key Identifier:
keyid:B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:cf:fd:59:ec:33:96:3f:3c:44:23:82:d2:a1:84:ba:e7:cc:
cf:61:bc:5c:b4:cc:af:45:fa:b1:cf:1c:82:e6:b3:88:eb:db:
e3:ed:9e:b2:0b:26:fb:79:11:13:b9:0e:f4:ce:85:bb:67:88:
9e:2d:b2:01:62:ce:56:c8:0d:5a:e1:55:d9:b9:fa:36:92:7e:
e5:df:d4:dc:6a:3f:70:cf:8b:6d:05:b4:d4:fe:6e:4b:25:25:
27:e6:fb:fe:0e:d5:8a:b9:18:4f:93:31:7d:24:f5:49:7a:5b:
1f:de:59:7e:27:8b:76:d8:29:7c:09:e7:5d:1e:83:a4:5a:45:
75:27:85:84:53:de:8f:c1:2c:9b:04:14:92:2c:e6:e9:18:b1:
49:de:bd:97:de:10:f3:1f:c2:5e:fd:21:c1:ad:fd:2e:4b:f3:
55:c6:88:dd:f4:69:ff:58:fa:6e:f7:f9:9e:fa:c0:12:60:90:
67:1d:82:48:89:0b:81:22:a2:c7:49:c3:55:a8:92:ce:14:76:
c8:e2:12:3d:66:67:cc:0a:62:55:46:01:5b:0f:1e:49:d1:04:
c4:6b:54:0c:0b:f7:26:8f:7a:2e:40:8e:ae:a7:f4:6c:24:a6:
09:ed:6c:23:1f:c3:8d:df:c5:6b:47:76:5a:62:09:dd:15:ef:
fc:80:90:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:39 2026 by rpki-client