Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
File: SEhV5wGTloY1rESSrXAqgkjgM-g.mft (raw, json)
Hash identifier: /Vl/mVAaVlX5rn17xjKF7tWP2jtJRa1d6azkiqf2e04=
Subject key identifier: 60:E1:A2:82:85:5B:ED:A5:D6:68:30:C1:37:2C:30:E8:EA:FA:13:25
Authority key identifier: 48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
Certificate issuer: /CN=484855e70193968635ac4492ad702a8248e033e8
Certificate serial: 019D25F1BB18DB0BC7B12827B9FF40215A29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 17:01:32 +0000
Manifest this update: Wed 25 Mar 2026 17:01:32 +0000
Manifest next update: Thu 26 Mar 2026 17:01:32 +0000
Files and hashes: 1: SEhV5wGTloY1rESSrXAqgkjgM-g.crl (hash: rOHBWZqE3lU5665e8Yz3KVmkvfrf7kgWaMxQ0JxfO3Y=)
2: hcaVaeZvXztSf4aHj-qxa48q3bE.roa (hash: ugFszP+ktrSBaKI2i2I8QwNOIyOBse0/3j0sK41gSeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:bb:18:db:0b:c7:b1:28:27:b9:ff:40:21:5a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484855e70193968635ac4492ad702a8248e033e8
Validity
Not Before: Mar 25 17:01:32 2026 GMT
Not After : Mar 26 17:01:32 2026 GMT
Subject: CN=60e1a282855beda5d66830c1372c30e8eafa1325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:db:4a:39:8f:93:f8:80:ab:00:dc:04:2b:62:
d1:b5:f0:f6:3d:b1:84:a8:11:5a:6e:58:9b:fd:61:
be:dc:52:01:9d:ea:96:e8:45:4f:c4:77:8c:8e:4a:
56:3f:67:09:1f:c0:37:3c:84:30:45:44:79:6f:dd:
26:86:66:2d:2c:5b:88:ae:98:7a:9c:3e:bd:9b:52:
7f:34:cd:af:0b:8b:c6:f1:c5:d0:13:68:ef:3d:18:
f3:dd:7a:e2:8c:85:83:a3:69:40:d1:9f:a7:91:9d:
42:58:cf:0f:a1:77:7c:ea:2b:80:69:eb:5a:f5:f5:
3a:af:8f:59:17:88:03:09:e6:fa:b7:ef:0d:73:43:
13:11:2e:09:4b:68:01:b9:0f:c0:ab:2b:5e:35:16:
fc:6d:95:c2:4d:8d:da:5e:90:b8:9f:6b:45:1e:4f:
bf:b4:96:a6:9f:e9:ff:9e:ba:1e:b9:8a:e3:f0:b0:
4f:29:a0:b3:24:bd:63:cd:40:f1:13:f7:71:93:18:
e5:d7:94:cd:41:2b:62:61:0c:54:f1:ba:d0:ff:d5:
2b:de:36:c4:bf:8b:20:70:75:aa:ad:84:75:30:61:
58:c6:20:44:f0:8c:ea:dd:72:e2:4b:c8:f4:bd:f0:
6b:22:72:da:52:db:46:9d:f6:35:51:a3:d3:3d:af:
e4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E1:A2:82:85:5B:ED:A5:D6:68:30:C1:37:2C:30:E8:EA:FA:13:25
X509v3 Authority Key Identifier:
keyid:48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:36:f7:5e:8e:5a:4e:71:fe:c2:69:e5:8f:1c:a9:1b:e9:ee:
4e:41:77:d8:e4:8e:85:b4:82:0f:ec:ef:17:b9:bf:1e:13:e6:
da:89:7f:24:04:d8:ba:25:21:6b:1e:44:17:f0:96:62:41:64:
13:0d:8f:65:d2:5a:a9:92:8d:f9:7e:cc:14:dd:35:94:6e:a0:
4c:94:2f:74:a3:79:c1:8f:63:d0:83:01:0d:05:cb:24:6c:9c:
45:10:1e:ed:1a:82:10:25:91:15:a7:35:f5:5a:06:55:86:be:
e2:7b:69:ba:1e:c5:4b:39:af:16:a5:fc:c5:ba:6f:96:e1:98:
36:41:d0:74:53:86:94:3a:ff:e1:6d:67:06:b5:e9:14:7e:2d:
2b:39:27:ca:e4:4e:20:c2:5e:d0:d2:c2:35:c8:39:eb:9a:a1:
d8:8b:c5:fe:61:1c:6b:41:4b:13:df:bc:c5:22:c0:ff:c4:09:
a0:76:8b:16:1f:d1:d2:83:21:c3:c1:81:1e:4a:af:e2:1a:54:
d9:26:4f:b9:4d:5d:38:dc:d0:55:fb:b5:85:08:50:e7:b4:87:
ed:27:ff:36:ab:f5:ee:9b:6a:e4:2a:6a:50:f0:17:a0:8c:77:
f5:6f:82:8d:b0:ff:59:2e:72:87:95:96:e5:9e:3f:48:53:d2:
e7:4b:96:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:02 2026 by rpki-client