Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
File: se1mdqhXWQtjZbdsVYDXD8qNuqY.mft (raw, json)
Hash identifier: 9TdvPQuJBS+cmIFv+Z/0mnrZlpOvupND7nytolYznyw=
Subject key identifier: F2:69:42:0C:C9:07:9A:02:3C:F9:CD:2B:4A:B5:23:D0:BF:5D:1B:94
Authority key identifier: B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
Certificate issuer: /CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Certificate serial: 019D37C0FE241F92E96D106C16AB1DE93D31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
Manifest number: 0DEA
Signing time: Sun 29 Mar 2026 04:01:27 +0000
Manifest this update: Sun 29 Mar 2026 04:01:27 +0000
Manifest next update: Mon 30 Mar 2026 04:01:27 +0000
Files and hashes: 1: Fve8k_OZNdjUkZnIqvSmNlcd0Lg.roa (hash: UBZQn4YtqRGaTXDZC6SHIOianNxT0DmdDIUesthKpiY=)
2: se1mdqhXWQtjZbdsVYDXD8qNuqY.crl (hash: 0Em2cI6ihzeESHaz+3ccV5QkaMF9++HPZRbMa6ROEjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:fe:24:1f:92:e9:6d:10:6c:16:ab:1d:e9:3d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Validity
Not Before: Mar 29 04:01:27 2026 GMT
Not After : Mar 30 04:01:27 2026 GMT
Subject: CN=f269420cc9079a023cf9cd2b4ab523d0bf5d1b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a0:ff:9b:71:c0:61:6a:9b:4c:79:39:3b:3f:
33:d8:fb:7e:63:26:7d:86:ab:58:42:c8:9c:5e:bf:
cc:10:51:de:b1:80:97:eb:c6:54:87:8a:9f:ef:47:
13:7c:0c:f5:42:f0:9a:7a:1e:19:9c:ad:15:64:98:
f3:6d:95:ed:c0:45:51:67:2d:51:0c:77:50:8b:a9:
a2:97:38:85:48:66:46:82:82:fe:0a:4f:c4:9a:7b:
5a:9e:1e:bd:d2:ab:a3:00:25:4b:c9:c5:1d:77:ed:
8d:d2:e3:a1:ff:36:77:d2:86:9f:2a:42:c3:12:2b:
49:54:bf:11:13:b8:96:54:13:ed:6d:97:cc:d2:8a:
c8:2e:f6:e9:be:ed:e9:b2:59:83:6d:8f:58:01:96:
05:fd:b6:6b:ed:05:d6:70:91:8e:c9:f4:50:30:7e:
c6:01:7c:c1:47:ad:3c:b3:8c:f9:32:3d:d7:14:0d:
9c:5a:60:af:94:43:5d:7a:2b:7a:03:2f:ed:0e:dd:
94:1f:32:ba:96:ad:3c:06:a3:3d:12:32:06:78:66:
6f:0a:5f:29:38:bd:71:97:03:43:c8:06:87:f9:e5:
b0:4c:b6:ea:6a:91:2f:af:da:5b:90:ac:ca:6d:89:
af:5e:f6:ed:fc:64:17:0e:a5:61:3f:d5:ed:0e:bc:
cd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:69:42:0C:C9:07:9A:02:3C:F9:CD:2B:4A:B5:23:D0:BF:5D:1B:94
X509v3 Authority Key Identifier:
keyid:B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4c:af:4b:87:e1:7a:94:93:aa:09:92:5a:78:6d:30:cb:48:
20:3b:49:1b:a9:f8:6b:16:7d:45:71:76:80:12:61:2c:2a:ef:
c4:14:84:06:6b:33:d7:97:e0:9e:95:4e:1f:e6:bf:23:1e:23:
5a:33:64:db:b9:cc:0e:a9:a3:45:10:6e:3a:53:20:77:13:fd:
96:b1:07:76:a0:f2:1a:85:cf:00:82:75:d0:f0:18:ce:dc:df:
d1:b8:74:2d:cc:2c:ee:c8:b5:af:25:65:5b:63:85:e6:00:cf:
87:bb:47:73:50:13:96:e1:a8:12:7b:0e:d0:f2:c6:11:7d:89:
db:75:52:70:3a:b8:9a:59:3b:b2:2c:97:f4:66:cd:4c:3e:47:
f6:38:58:e2:6b:5a:35:70:ea:08:bb:7c:98:3f:b6:e5:e7:97:
c4:6b:95:33:fe:a0:68:5e:1a:92:52:0d:83:55:93:9b:4c:cc:
44:05:a2:58:42:43:3d:7e:ae:ff:d4:31:53:04:96:fb:fd:b9:
4c:17:1f:2e:40:ba:3f:e7:8e:91:d3:32:ff:57:cd:88:61:81:
83:bc:ed:98:16:e3:9d:31:f5:ee:5d:02:d8:4f:4c:8f:74:0e:
b8:ac:9d:7d:7d:c3:29:44:20:0f:3e:20:e0:45:f1:91:03:ed:
ce:f1:07:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:43 2026 by rpki-client