Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
File: 2SEUWCD-zu889VJwMmxeEkPyQ1U.mft (raw, json)
Hash identifier: KQL83aQbOwoW0uEw01ph4UroMr8F9iVCzitpNHC6+zc=
Subject key identifier: 87:42:80:7E:77:AF:F8:78:E7:7D:54:1E:7F:3C:3A:37:71:21:29:BC
Authority key identifier: D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
Certificate issuer: /CN=d921145820feceef3cf55270326c5e1243f24355
Certificate serial: 019D382DC9099EB694F69DC281574D3216E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
Manifest number: 13E2
Signing time: Sun 29 Mar 2026 06:00:17 +0000
Manifest this update: Sun 29 Mar 2026 06:00:17 +0000
Manifest next update: Mon 30 Mar 2026 06:00:17 +0000
Files and hashes: 1: 2SEUWCD-zu889VJwMmxeEkPyQ1U.crl (hash: DCPLF1HIwfu4hNB+L8yTwvV5IXE+ipJn2XZi7ncg//s=)
2: i9hMEuJaBfT7lcapiz_ahkSHzcg.roa (hash: fw1KAABJZ7dzQA1QjS2gjeHAVGrrtjSeZ6MepK2bPQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:c9:09:9e:b6:94:f6:9d:c2:81:57:4d:32:16:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d921145820feceef3cf55270326c5e1243f24355
Validity
Not Before: Mar 29 06:00:17 2026 GMT
Not After : Mar 30 06:00:17 2026 GMT
Subject: CN=8742807e77aff878e77d541e7f3c3a37712129bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:fe:75:f0:fa:96:51:58:fb:d4:dd:52:ec:
65:d1:bc:8d:5e:1e:d8:a6:26:f2:35:31:a0:3c:35:
d6:09:aa:60:c7:5d:17:5e:a6:34:34:28:d6:72:82:
00:b9:8b:40:97:52:93:ea:70:11:13:c0:5f:5f:aa:
a6:12:e1:98:5b:a1:0f:81:e9:fd:1e:36:b2:de:92:
02:96:83:11:05:2e:18:ad:a9:34:a5:e9:c4:0c:18:
48:78:29:2b:b5:63:8d:63:af:52:15:35:74:bc:30:
5c:19:aa:7b:93:ec:22:b2:3d:d0:18:ad:8e:dc:74:
25:e9:b5:c7:68:7d:9b:6a:8d:dd:46:ce:28:8d:2b:
ac:f4:3d:12:9e:bb:44:9d:17:b5:f7:f4:2a:68:db:
75:af:d4:52:6f:cd:07:a8:d4:58:f9:d1:c1:d5:10:
d2:a0:d5:a4:c7:de:75:0b:ac:44:5c:8a:eb:8c:ac:
18:fb:64:38:c3:91:3c:93:7a:6b:97:6a:99:82:c1:
57:e5:39:c2:83:35:7e:21:70:c4:00:7d:ab:ea:b1:
19:97:78:ea:45:cb:09:9c:f2:a5:3c:7a:22:eb:cd:
bc:be:74:2e:25:b9:73:a3:7f:e5:df:12:1e:ab:7c:
1e:f6:81:fc:ad:ca:59:d0:ee:42:7b:38:11:44:b0:
7f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:42:80:7E:77:AF:F8:78:E7:7D:54:1E:7F:3C:3A:37:71:21:29:BC
X509v3 Authority Key Identifier:
keyid:D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ec:e4:ec:92:cc:26:86:8d:7d:45:e6:46:2f:c4:81:cc:42:
a5:ed:63:34:7a:73:0b:fc:9c:54:15:c1:d8:5f:fa:6e:4f:e2:
d4:33:f2:4f:f2:08:a3:a3:08:ec:d8:af:da:a4:73:6c:8e:00:
80:ef:46:c7:a3:eb:ad:d0:ec:9a:02:5d:02:c8:c3:0a:5c:33:
4b:c2:07:b8:34:70:00:8e:9e:4d:4d:da:17:4c:ab:09:15:95:
ed:ef:0f:4a:aa:da:04:58:4d:b7:9b:34:fe:c1:10:d6:d5:37:
59:aa:0e:88:3a:72:c7:22:a2:82:fa:13:33:7c:c2:74:6c:df:
60:bc:f6:73:2f:aa:12:11:d1:c3:47:f3:e4:ad:df:13:3e:a9:
d7:f2:67:b2:c3:a8:e0:75:27:58:39:ee:ed:42:4f:9e:8f:ed:
6e:78:95:b9:bc:18:29:86:7c:2d:4b:19:cb:fb:2c:16:d5:59:
ec:ba:7e:ba:96:4b:75:6a:cc:5f:c5:df:8a:f2:a0:43:47:86:
0c:d7:54:29:d9:98:33:c1:d3:09:1a:9d:96:a4:21:aa:b4:cc:
d6:df:05:29:3b:45:24:89:ea:a8:a0:85:45:22:32:04:60:9f:
2e:5f:ac:74:a4:b9:f8:71:5d:92:9e:f8:52:01:7c:a1:ec:32:
db:e3:07:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LckJnraU9p3CgVdNMhbhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MjExNDU4MjBmZWNlZWYzY2Y1NTI3MDMyNmM1ZTEyNDNm
MjQzNTUwHhcNMjYwMzI5MDYwMDE3WhcNMjYwMzMwMDYwMDE3WjAzMTEwLwYDVQQD
Eyg4NzQyODA3ZTc3YWZmODc4ZTc3ZDU0MWU3ZjNjM2EzNzcxMjEyOWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqb+dfD6llFY+9TdUuxl0byNXh7Y
pibyNTGgPDXWCapgx10XXqY0NCjWcoIAuYtAl1KT6nARE8BfX6qmEuGYW6EPgen9
Hjay3pICloMRBS4Yrak0penEDBhIeCkrtWONY69SFTV0vDBcGap7k+wisj3QGK2O
3HQl6bXHaH2bao3dRs4ojSus9D0SnrtEnRe19/QqaNt1r9RSb80HqNRY+dHB1RDS
oNWkx951C6xEXIrrjKwY+2Q4w5E8k3prl2qZgsFX5TnCgzV+IXDEAH2r6rEZl3jq
RcsJnPKlPHoi6828vnQuJblzo3/l3xIeq3we9oH8rcpZ0O5CezgRRLB/UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdCgH53r/h4531UHn88OjdxISm8MB8GA1UdIwQY
MBaAFNkhFFgg/s7vPPVScDJsXhJD8kNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zMWE3ZDQtNDlhNC00ZDZmLThjOGQt
ZDgxNTJiNTE1N2Q4LzEvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zMWE3ZDQtNDlhNC00ZDZmLThjOGQtZDgxNTJiNTE1N2Q4
LzEvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROzk7JLM
JoaNfUXmRi/EgcxCpe1jNHpzC/ycVBXB2F/6bk/i1DPyT/IIo6MI7Niv2qRzbI4A
gO9Gx6PrrdDsmgJdAsjDClwzS8IHuDRwAI6eTU3aF0yrCRWV7e8PSqraBFhNt5s0
/sEQ1tU3WaoOiDpyxyKigvoTM3zCdGzfYLz2cy+qEhHRw0fz5K3fEz6p1/JnssOo
4HUnWDnu7UJPno/tbniVubwYKYZ8LUsZy/ssFtVZ7Lp+upZLdWrMX8XfivKgQ0eG
DNdUKdmYM8HTCRqdlqQhqrTM1t8FKTtFJInqqKCFRSIyBGCfLl+sdKS5+HFdkp74
UgF8oewy2+MHcA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:33 2026 by rpki-client