Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.mft
File: SeuKtOPXneJ90f1pIZbi454aO6M.mft (raw, json)
Hash identifier: Kmbch78d2pOxaX/a7G95LL4ReKWkSmpzVOwF+uYANkw=
Subject key identifier: D1:99:2A:24:6F:1B:84:EE:59:F7:7A:2C:23:61:26:93:29:8B:D0:A0
Authority key identifier: 49:EB:8A:B4:E3:D7:9D:E2:7D:D1:FD:69:21:96:E2:E3:9E:1A:3B:A3
Certificate issuer: /CN=49eb8ab4e3d79de27dd1fd692196e2e39e1a3ba3
Certificate serial: 019D37890F02542673E9EE42CBF4681C9ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeuKtOPXneJ90f1pIZbi454aO6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.mft
Manifest number: 15A2
Signing time: Sun 29 Mar 2026 03:00:22 +0000
Manifest this update: Sun 29 Mar 2026 03:00:22 +0000
Manifest next update: Mon 30 Mar 2026 03:00:22 +0000
Files and hashes: 1: 3mVMIwWinwhNORtODy_r-N2Xls0.roa (hash: XHUV/Re+ghhyWr64uMx1SGsxkWzcob0PUdM0zrRp3nA=)
2: SeuKtOPXneJ90f1pIZbi454aO6M.crl (hash: k2E9T0XOlQG41fIpucoKmSRqvI3F+EU5Qrtl2pNKJY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeuKtOPXneJ90f1pIZbi454aO6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:0f:02:54:26:73:e9:ee:42:cb:f4:68:1c:9e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49eb8ab4e3d79de27dd1fd692196e2e39e1a3ba3
Validity
Not Before: Mar 29 03:00:22 2026 GMT
Not After : Mar 30 03:00:22 2026 GMT
Subject: CN=d1992a246f1b84ee59f77a2c23612693298bd0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:8b:22:43:a6:82:f1:a5:ed:58:dd:ec:1a:
bf:6e:75:28:5d:bb:a1:bb:e1:be:d4:97:97:be:3e:
1d:45:b8:51:a9:6b:49:18:d5:34:d3:93:8e:b0:78:
65:5c:b7:0f:27:6a:95:bd:0e:b4:ad:33:e2:70:41:
7b:5f:2a:96:af:ae:f3:ca:5e:d5:b5:68:85:0d:fb:
a9:35:fb:4b:ad:80:c1:72:9f:46:cc:26:a7:15:4d:
7d:a5:3b:94:27:b2:4b:54:84:ea:e0:12:e9:33:44:
6a:a9:f1:b3:a6:f2:e8:6e:c8:bb:16:b4:8c:fa:a2:
98:9b:dd:7c:f5:84:21:d2:48:1f:02:fd:a6:b8:86:
93:c0:d1:d8:39:51:be:41:a8:f8:ce:27:1f:1f:18:
7c:07:fe:a1:a9:ef:cd:72:d1:90:4b:a1:72:29:af:
e3:db:18:76:96:b8:5c:4b:15:c9:0b:a1:a5:69:fc:
24:a8:d8:18:66:03:0a:82:0a:9c:fb:43:53:10:7e:
a1:07:1b:f5:98:32:48:8b:d1:5c:2a:22:76:82:e6:
22:9b:75:2f:9c:99:55:3e:43:cc:70:b1:63:61:d8:
88:76:b1:49:c9:59:a9:ba:c6:a5:62:65:ac:93:d2:
42:f8:8e:4d:45:3c:5c:40:66:a1:43:48:de:c1:d6:
cb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:99:2A:24:6F:1B:84:EE:59:F7:7A:2C:23:61:26:93:29:8B:D0:A0
X509v3 Authority Key Identifier:
keyid:49:EB:8A:B4:E3:D7:9D:E2:7D:D1:FD:69:21:96:E2:E3:9E:1A:3B:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeuKtOPXneJ90f1pIZbi454aO6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:07:56:b1:5e:b6:20:29:ca:89:8c:56:56:3a:ed:dc:c6:9a:
3a:47:63:cd:06:45:31:8f:d2:8f:ea:90:26:f7:b0:e3:7f:bd:
57:c4:c8:a3:d6:57:c3:bc:45:d5:38:7e:9d:68:9e:dd:fe:6e:
df:3d:11:7e:47:fb:43:3f:0d:70:69:c6:53:a6:6c:62:1c:b2:
39:63:64:6e:1a:bd:17:b3:a9:71:7a:54:d6:60:be:3d:b3:ac:
53:1a:e2:37:82:00:32:ac:0f:9e:a0:e4:57:2c:d5:16:53:e4:
28:4f:2a:1e:f6:7b:65:bb:d7:17:9b:8e:87:c6:57:d3:ed:f1:
06:5e:9b:d1:db:a9:df:37:93:0c:5d:c0:d3:44:fd:8c:92:a0:
39:0b:27:36:e4:91:80:73:1c:9f:54:96:51:ec:63:71:9a:b9:
6d:4c:88:30:e2:10:b2:0c:3b:6d:09:3f:72:24:de:a5:bb:89:
84:30:12:1a:5c:21:ea:8f:bf:56:e6:93:36:c8:4c:fe:9d:20:
75:28:c4:0d:83:46:5a:3a:d9:e4:c5:90:fc:52:0e:3e:0d:56:
ff:90:d9:16:06:78:9c:1c:b1:29:e8:27:ca:b6:61:a9:bf:11:
8e:8b:de:80:e6:76:06:9d:1d:a2:6f:7d:1b:b4:1a:ea:91:d0:
c1:36:2d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:50 2026 by rpki-client