Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
File: se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft (raw, json)
Hash identifier: p5XMypSkW2kUxl2i+I53VWxa6Tb8V4ASKt41XoWhakM=
Subject key identifier: 37:4C:49:43:AE:41:FC:3F:6F:D1:DA:D8:C8:47:3C:38:5C:CB:95:46
Authority key identifier: B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4
Certificate issuer: /CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4
Certificate serial: 019D3865F328B18F6E1385377B9D0EDD4A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
Manifest number: 120D
Signing time: Sun 29 Mar 2026 07:01:38 +0000
Manifest this update: Sun 29 Mar 2026 07:01:38 +0000
Manifest next update: Mon 30 Mar 2026 07:01:38 +0000
Files and hashes: 1: se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl (hash: stNgZF2pozeMTGI8sNvTSuC1fOugkvc0VU8NlJTDTTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f3:28:b1:8f:6e:13:85:37:7b:9d:0e:dd:4a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4
Validity
Not Before: Mar 29 07:01:38 2026 GMT
Not After : Mar 30 07:01:38 2026 GMT
Subject: CN=374c4943ae41fc3f6fd1dad8c8473c385ccb9546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:6e:84:06:1e:92:50:36:28:b5:8f:ba:a1:
72:91:96:cb:ac:4f:fe:a4:06:d2:a3:8f:ad:4d:8b:
9b:83:ac:a4:5f:95:aa:aa:58:f9:3e:f8:6f:f1:70:
e6:ad:cb:da:1e:0c:93:45:2e:3e:28:f1:cc:93:59:
55:09:a5:af:ee:cc:9e:b6:ae:5e:ca:30:50:56:8f:
32:6f:00:77:dd:82:2e:69:9a:6c:a2:30:ef:ef:67:
26:aa:11:c1:86:ba:20:27:0c:7c:61:86:7c:1c:0b:
ec:47:ba:53:8a:12:d2:8b:ab:20:ab:2f:6b:e1:48:
8b:46:47:a4:bc:d2:6f:a6:91:0c:0f:35:6c:f3:72:
3a:0c:ec:52:48:f4:51:b8:4a:d2:6a:1e:ba:d0:e6:
90:5e:06:71:bb:d2:7c:81:23:bf:c8:fa:73:28:2f:
ee:0f:dd:ea:b8:45:36:78:32:d6:9e:ef:12:33:ec:
3f:3a:51:e1:4e:15:7f:95:5c:2c:77:ef:33:a6:7c:
d5:0f:3a:27:a7:35:e4:34:a0:0e:6c:02:97:5c:65:
b6:10:bf:03:df:11:7f:97:6d:7e:7f:86:de:66:c2:
1a:26:0d:5b:00:b7:0a:6c:50:4c:78:0d:e5:f4:02:
8a:68:e4:d6:ae:9a:0e:6d:b7:25:fd:88:f3:d6:af:
c8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4C:49:43:AE:41:FC:3F:6F:D1:DA:D8:C8:47:3C:38:5C:CB:95:46
X509v3 Authority Key Identifier:
keyid:B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:64:9e:df:0a:f6:00:03:92:15:fb:06:46:5b:bd:8f:63:e9:
68:40:c2:d6:38:83:ff:fe:5f:e5:a0:fa:1a:59:7a:20:5c:c4:
7d:61:8e:24:15:7c:58:63:69:97:ce:7e:84:b8:23:52:76:24:
6f:d1:be:69:3d:47:e7:f0:8e:97:c1:a8:0b:ae:53:2f:0c:00:
9c:7f:62:fb:b5:15:9a:74:ac:7e:87:f9:ee:ea:e0:a5:67:f5:
e4:28:71:68:14:de:4f:23:2b:63:9a:ae:89:6f:12:df:32:66:
97:0b:bc:a1:5b:e0:73:52:8e:39:78:6d:47:f1:49:b8:12:01:
19:0f:14:08:e2:27:2b:3b:c7:0c:6a:91:0a:fc:42:d9:45:4e:
06:21:79:64:a7:4c:b3:bc:aa:0d:e6:0b:a9:9f:fe:22:32:6f:
7b:8a:a1:f5:77:56:67:40:38:2a:dd:77:e1:8b:74:78:ec:73:
20:3f:49:c3:36:2b:d3:c4:66:70:0e:ee:cc:48:0d:61:a3:ed:
58:49:44:56:b0:3f:d9:4e:58:1e:b2:f2:ad:32:85:5c:bb:4a:
b2:fa:0d:f1:ee:46:db:73:b8:58:d8:89:07:63:1d:28:81:bb:
ee:60:45:c6:e0:60:75:20:3d:93:07:e5:b5:8e:ee:0f:b5:37:
78:66:15:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:15 2026 by rpki-client