Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
File: SeMF15ys2--_HoMrNNfAa7tfYno.mft (raw, json)
Hash identifier: 45XudvJCmoqYrHV7MF9bweB1tPUs9sGPZYecAiH7tZI=
Subject key identifier: 9F:2E:25:33:D4:EF:7D:62:86:B6:AE:DE:EF:79:9E:A7:58:FD:D7:11
Authority key identifier: 49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A
Certificate issuer: /CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a
Certificate serial: 019D265EDAF465074041B3C7C9F62FB7E9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 19:00:43 +0000
Manifest this update: Wed 25 Mar 2026 19:00:43 +0000
Manifest next update: Thu 26 Mar 2026 19:00:43 +0000
Files and hashes: 1: Cg3-GLroUHPLqy0MDoy8qVDXjIo.roa (hash: ObFrv+qFlIMnwkBakSA2410HJwiAq/Uwxqer92VRQ5c=)
2: SeMF15ys2--_HoMrNNfAa7tfYno.crl (hash: NkrPaWsY000VV9/vyauvvugXzUy7Qv5KpXZTrTof1yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:da:f4:65:07:40:41:b3:c7:c9:f6:2f:b7:e9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a
Validity
Not Before: Mar 25 19:00:43 2026 GMT
Not After : Mar 26 19:00:43 2026 GMT
Subject: CN=9f2e2533d4ef7d6286b6aedeef799ea758fdd711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e8:b5:dd:9f:b4:1d:f2:c6:89:bd:d4:8d:79:
85:2c:9a:dd:9a:a3:d5:ea:0a:ea:16:c8:e6:11:76:
d8:01:87:65:0f:e1:c5:af:9f:9d:48:da:d1:31:5e:
d1:e0:62:9c:a6:1a:f7:30:6b:4b:9e:52:8b:c5:a8:
89:eb:56:e9:24:4c:62:82:2b:22:ea:d8:36:7d:59:
b4:37:26:17:87:7e:3b:4b:ed:c7:00:c1:1e:73:48:
90:99:2e:45:fd:9e:6e:5f:91:a3:ac:06:56:57:df:
ed:1e:9c:23:c5:fe:92:cb:c3:84:98:a8:37:99:b1:
ab:00:95:56:2b:66:7a:88:c2:47:23:7b:7f:71:55:
be:66:d6:0a:6d:42:3e:6b:2f:e0:d6:2e:25:36:fc:
25:d7:fc:73:dc:3e:2c:10:6c:6c:d1:5c:50:d8:d9:
42:ea:99:ea:4e:38:28:48:ec:82:8a:a0:ec:20:86:
57:9e:0d:fb:a6:23:9b:03:60:0d:52:d0:d1:fd:cc:
f2:a6:8c:93:d5:0a:6a:4e:9c:2f:15:6f:57:a0:2f:
40:f3:8a:e9:4c:b8:a4:9d:e6:88:a8:c9:0d:60:11:
f4:a4:a0:6a:06:1f:4b:e5:89:5c:28:5d:a1:25:9e:
a7:e1:47:0c:1a:79:ad:6c:86:da:b7:65:f1:44:12:
42:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2E:25:33:D4:EF:7D:62:86:B6:AE:DE:EF:79:9E:A7:58:FD:D7:11
X509v3 Authority Key Identifier:
keyid:49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:86:df:c5:53:7b:b3:f1:62:45:86:e7:4e:58:c3:c7:1f:07:
db:fe:4a:11:15:7b:e0:8b:5e:df:c5:9b:77:0c:73:e4:ac:45:
81:cc:6e:3a:98:92:49:9e:6d:51:2d:c0:d0:88:32:7c:ec:fa:
dc:a2:32:86:c6:f7:d4:c9:b7:b6:bf:a8:f5:1a:c6:8a:3b:98:
c5:e8:d4:f5:06:76:b9:66:a8:0f:6c:84:35:eb:fb:76:4d:88:
33:5a:7f:71:fc:85:85:fc:f9:60:5b:03:e7:3c:4d:ee:c4:c4:
07:d7:45:c5:2c:fb:27:ad:6e:b7:b8:82:2c:93:60:83:98:b9:
2b:25:3a:e9:b8:f2:16:88:d2:a4:3b:ff:ce:44:3f:fd:47:8a:
4f:b6:d0:f6:e7:a2:5e:f5:1f:fc:ef:0c:14:1e:9e:82:e0:9c:
6f:9b:9f:28:5d:15:c9:e2:b9:e5:ed:26:06:73:2a:99:73:ee:
5e:3f:60:a1:f9:2d:26:85:65:45:0e:ea:de:a1:95:a1:00:0b:
06:5b:a4:d5:c7:a9:7b:73:4f:9e:57:84:e1:15:4f:56:ab:db:
b5:82:c0:c8:45:9d:14:a0:ec:4f:cc:03:24:19:a4:95:19:4a:
eb:0a:d4:ed:f1:42:2a:73:93:6f:df:5e:56:a4:ba:dd:89:52:
87:80:8c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:48 2026 by rpki-client