Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.mft
File: se4XrCBsEG7SQBvOtJJZHUVmBfg.mft (raw, json)
Hash identifier: fxw+pXBSo65hHX89AGYllTVpA1DK8wh46JGKWnociwQ=
Subject key identifier: E6:CA:FA:74:25:5D:91:4B:5A:13:90:C8:3A:85:97:7E:05:20:38:CA
Authority key identifier: B1:EE:17:AC:20:6C:10:6E:D2:40:1B:CE:B4:92:59:1D:45:66:05:F8
Certificate issuer: /CN=b1ee17ac206c106ed2401bceb492591d456605f8
Certificate serial: 019F935C17D4A2BF3C840ADFA03B1AF4F043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se4XrCBsEG7SQBvOtJJZHUVmBfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:53 +0000
Manifest this update: Fri 24 Jul 2026 09:01:53 +0000
Manifest next update: Sat 25 Jul 2026 09:01:53 +0000
Files and hashes: 1: TlPz1MKXq4927Vc3_arKhGUAAcA.roa (hash: YOYsyfWYAf/3wOj2WHCnmybZslDaiohPCuzvv0FjhwU=)
2: se4XrCBsEG7SQBvOtJJZHUVmBfg.crl (hash: pxbFf/T9KcqiVAtuSUFJHlQJPp5HTPnRBdkvchEsfvc=)
3: xM1ul4upUlfNqC1LZpTiGwRaQe0.asa (hash: 2vRsqcA8DqO742FWr7CKeCb9NF5neXP8F//7xElEHqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/se4XrCBsEG7SQBvOtJJZHUVmBfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:17:d4:a2:bf:3c:84:0a:df:a0:3b:1a:f4:f0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ee17ac206c106ed2401bceb492591d456605f8
Validity
Not Before: Jul 24 09:01:53 2026 GMT
Not After : Jul 25 09:01:53 2026 GMT
Subject: CN=e6cafa74255d914b5a1390c83a85977e052038ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:5a:6d:dc:6b:38:cb:f8:f9:87:05:bd:b6:
2d:6f:69:e4:53:20:23:0d:36:c5:f5:b8:6f:67:cc:
6c:56:da:24:7d:c2:b4:09:95:e3:f5:fa:4c:ca:e4:
f6:0d:cf:88:93:db:89:b4:d2:fa:67:f6:c5:55:e3:
0b:79:97:61:24:75:ea:b5:5d:e2:08:4f:d7:54:a3:
ba:f6:4f:69:a6:e5:30:3a:87:8e:ff:f9:d2:b9:9c:
3e:bd:69:e5:ab:5a:f0:a8:9f:86:fa:b0:76:b0:d9:
10:d6:ca:d4:94:f1:32:f8:2b:41:fe:7a:32:f1:ca:
ee:83:5e:b7:52:27:ee:2d:3d:eb:9f:95:fa:2f:97:
2f:3a:0d:3d:f5:0c:22:f1:ab:91:b4:02:e3:0e:97:
e2:45:c4:f7:24:37:a7:c4:de:59:ca:78:e9:2e:4b:
96:f4:5f:bc:7b:26:17:0c:4e:17:ed:fb:05:44:68:
56:f4:7c:fe:6f:f6:14:30:b3:0a:34:6a:d2:a2:9d:
64:aa:16:e7:19:f0:63:14:77:23:2e:47:f1:ac:b6:
90:0b:5d:18:f4:e0:54:59:f6:c9:84:73:b0:c8:3a:
6c:4c:9b:78:e2:43:ff:d7:dd:ce:67:23:80:26:9d:
36:42:1b:06:a0:cd:83:81:26:e0:9d:5f:39:30:26:
12:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CA:FA:74:25:5D:91:4B:5A:13:90:C8:3A:85:97:7E:05:20:38:CA
X509v3 Authority Key Identifier:
keyid:B1:EE:17:AC:20:6C:10:6E:D2:40:1B:CE:B4:92:59:1D:45:66:05:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se4XrCBsEG7SQBvOtJJZHUVmBfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a7:a5:47:60:bf:fc:55:e4:6e:da:4c:2d:54:db:48:59:99:
a9:57:de:d9:24:ab:e3:26:a3:e1:84:67:87:a7:1f:a7:6d:7f:
a7:ee:9c:47:20:0c:96:6d:70:15:6d:db:e7:6e:1b:d5:11:30:
cb:cb:e6:96:86:ff:f5:42:12:4a:56:12:96:93:70:44:a4:c0:
e1:2b:2e:07:2c:70:9f:c0:fc:4e:2d:49:4f:38:51:ef:4f:ec:
59:23:96:09:0f:67:03:62:be:bf:1a:19:b6:50:76:15:f8:61:
f8:dd:f3:6e:fc:ab:bb:78:9b:0d:be:a4:8e:24:d6:51:e5:06:
59:10:12:12:3e:dc:a9:22:17:19:6a:5a:b3:bf:1e:68:aa:ca:
d5:5a:30:57:17:e6:4e:98:1b:bc:e9:77:e6:c3:cb:c4:1c:ff:
5a:56:54:64:3e:7f:3b:2b:7e:33:cd:e7:2d:96:3f:7b:1a:da:
9b:0e:b9:c9:d9:62:d0:ae:72:bc:30:39:49:1a:81:43:e7:ec:
7f:c5:c7:aa:9d:b8:25:e0:08:21:5c:da:69:a8:2a:81:e5:77:
15:d8:33:44:b5:28:3d:2e:ce:bf:51:fc:6d:09:67:f9:f5:db:
b8:50:c3:4e:eb:7f:46:66:d8:50:7c:3f:c9:23:ea:e4:37:22:
78:03:10:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:26:46 2026 by rpki-client