Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.mft
File: se4XrCBsEG7SQBvOtJJZHUVmBfg.mft (raw, json)
Hash identifier: A3e4+rTSZIwB/C/omoGUG40RASdtWZfrqODR/h3KtT4=
Subject key identifier: 9F:8E:B6:84:D9:D9:3E:2C:BC:50:E8:07:66:C4:F5:82:4C:EF:4D:6A
Authority key identifier: B1:EE:17:AC:20:6C:10:6E:D2:40:1B:CE:B4:92:59:1D:45:66:05:F8
Certificate issuer: /CN=b1ee17ac206c106ed2401bceb492591d456605f8
Certificate serial: 01A1231DA3831A5E0B382E584F454CE7CBAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se4XrCBsEG7SQBvOtJJZHUVmBfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.mft
Manifest number: 0110
Signing time: Sat 10 Oct 2026 00:01:47 +0000
Manifest this update: Sat 10 Oct 2026 00:01:47 +0000
Manifest next update: Sun 11 Oct 2026 00:01:47 +0000
Files and hashes: 1: TlPz1MKXq4927Vc3_arKhGUAAcA.roa (hash: YOYsyfWYAf/3wOj2WHCnmybZslDaiohPCuzvv0FjhwU=)
2: se4XrCBsEG7SQBvOtJJZHUVmBfg.crl (hash: Fo17BoU8svYd5p2rUV3bM68TLlHfE4AQRM8cdr9+fNM=)
3: xM1ul4upUlfNqC1LZpTiGwRaQe0.asa (hash: 2vRsqcA8DqO742FWr7CKeCb9NF5neXP8F//7xElEHqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/se4XrCBsEG7SQBvOtJJZHUVmBfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:1d:a3:83:1a:5e:0b:38:2e:58:4f:45:4c:e7:cb:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ee17ac206c106ed2401bceb492591d456605f8
Validity
Not Before: Oct 10 00:01:47 2026 GMT
Not After : Oct 11 00:01:47 2026 GMT
Subject: CN=9f8eb684d9d93e2cbc50e80766c4f5824cef4d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:fe:30:37:b3:0d:9b:bf:10:2c:6f:d0:f0:
10:c0:59:ea:57:d4:66:45:56:92:31:20:99:54:bf:
55:49:79:68:21:ba:9f:c0:fc:06:c7:f8:d1:0e:b8:
41:58:13:99:a2:80:7c:1b:73:32:c4:14:01:df:d7:
65:ed:f0:de:b5:85:43:e9:ad:93:a2:36:d7:e9:3d:
bc:71:30:c0:c6:98:96:1e:0f:7a:67:88:98:de:34:
9e:0f:2b:33:7e:c1:8d:b7:8b:8d:e1:c3:83:2a:48:
6d:9b:fb:ae:a3:ce:a2:60:ae:5a:66:66:3b:bc:c8:
eb:d6:13:cd:ee:26:b3:f8:53:00:49:16:2f:0e:51:
81:0e:fb:6c:8c:43:fa:d7:60:7b:bd:96:20:ae:32:
d9:b8:8f:c2:58:8f:43:00:e6:25:69:1e:84:cc:a5:
ec:ec:19:07:4e:d0:24:5f:52:2e:9f:5c:d3:f5:57:
26:55:c5:53:73:c1:33:4c:66:13:cb:04:74:1d:1b:
47:8d:fc:37:c6:f1:9f:88:33:52:66:89:a2:be:24:
8b:ed:fb:bd:e8:1a:76:fd:13:c4:b8:de:cf:0a:8a:
87:5b:56:43:a5:6d:fb:c3:b2:d9:ca:57:82:a2:1a:
ce:ff:d3:5a:e6:00:ca:3e:fc:d0:40:52:84:fd:26:
ec:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8E:B6:84:D9:D9:3E:2C:BC:50:E8:07:66:C4:F5:82:4C:EF:4D:6A
X509v3 Authority Key Identifier:
keyid:B1:EE:17:AC:20:6C:10:6E:D2:40:1B:CE:B4:92:59:1D:45:66:05:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se4XrCBsEG7SQBvOtJJZHUVmBfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ae:58:7d:ec:d8:1c:c9:a4:d7:36:dc:ff:4c:6a:f2:f2:97:
3d:91:8a:22:eb:db:a2:58:10:37:4c:09:aa:c7:0a:f7:b0:7d:
97:cf:54:73:a4:d6:0c:30:b6:bc:fb:d7:27:92:a2:00:4a:41:
02:3c:2a:19:15:26:46:3e:a1:ca:5c:d0:45:57:b4:02:84:f1:
3f:cc:d0:45:85:d2:1e:6d:e9:ca:92:99:71:2d:89:e7:a8:7e:
80:cc:9e:94:06:54:ec:f6:d4:69:10:a8:28:cb:21:38:ba:73:
64:8b:58:03:f6:49:5d:bc:d6:2c:04:b3:50:5b:44:15:dd:f2:
5f:fb:51:b2:9a:2e:25:1c:3e:11:d1:ce:62:ab:b0:f0:26:ee:
4b:9d:1b:0f:ab:e3:95:0f:a0:f8:48:9d:82:da:16:c1:fa:16:
76:61:10:a0:ee:5e:1a:67:bf:8b:72:f7:e0:b2:b9:5a:e1:fa:
ab:b1:21:85:01:c4:73:c4:62:c3:c4:b3:bf:ea:18:43:df:48:
b2:e3:a7:a0:51:e4:60:c3:66:96:90:93:a2:b0:e4:62:3b:eb:
db:bf:6a:8c:41:6b:e1:fe:47:d8:f2:56:22:d5:14:61:eb:9e:
21:0e:71:87:3f:d9:f2:4f:6f:7d:da:0f:f3:34:b9:aa:ca:d4:
5b:c5:b2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:44:56 2026 by rpki-client