Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
File: Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft (raw, json)
Hash identifier: FNBNFlkwglEsQcoMgQpipBBsEIyC+xbRM0DdlRCYdHk=
Subject key identifier: 02:34:08:54:FD:60:06:FA:72:BB:AB:13:11:63:9B:F6:36:3B:85:EB
Authority key identifier: 49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
Certificate issuer: /CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Certificate serial: 019D382EA62DA109A675C7DE472F25E0B276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
Manifest number: 0437
Signing time: Sun 29 Mar 2026 06:01:14 +0000
Manifest this update: Sun 29 Mar 2026 06:01:14 +0000
Manifest next update: Mon 30 Mar 2026 06:01:14 +0000
Files and hashes: 1: 8T3acIHbQX8fyEJ5mkqPUIJ9D9Q.roa (hash: WRS8pShL0FkQT8FXDUYCk0fdYgGKAZRSkFncH1hi1cg=)
2: Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl (hash: daf4dhtABQJ8SaVg86RQQydSyHvtXKAmuJ56zZANOk4=)
3: SzzN2_utFSlvLUqgvOUxnZyU9VQ.roa (hash: eMVjdl3Mgz85B4WMxfHAJkDWuvHzhFy3/1YUmCiTiuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:a6:2d:a1:09:a6:75:c7:de:47:2f:25:e0:b2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Validity
Not Before: Mar 29 06:01:14 2026 GMT
Not After : Mar 30 06:01:14 2026 GMT
Subject: CN=02340854fd6006fa72bbab1311639bf6363b85eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3a:41:41:0d:00:b5:ad:9c:f5:85:57:4f:fc:
2c:0f:48:6f:25:53:40:99:56:93:2e:8c:e2:8c:a4:
15:ca:0d:e4:a7:98:4f:be:1e:13:4a:f6:c7:8e:81:
9f:80:20:bd:9b:bd:65:a8:f7:69:38:59:15:0a:80:
58:dd:61:aa:75:1a:72:df:53:9e:37:d6:3a:2e:f6:
76:90:3e:7a:77:70:41:5d:e0:b6:a6:49:d1:8e:da:
61:6a:4d:db:b6:25:e0:7f:90:7a:9d:bc:58:77:3c:
3b:6b:17:a7:ce:78:3b:c4:fa:f7:0a:19:19:cb:f2:
7b:d8:d5:8f:00:57:51:bb:4a:a6:11:89:c0:37:10:
ab:02:1f:c1:ae:3c:68:78:67:c6:c1:91:61:d6:b5:
19:7e:01:b5:70:de:09:12:ce:6d:55:bc:7d:0a:59:
1c:9e:7a:0c:ad:2a:d5:5b:09:b8:3c:41:e7:f7:40:
e0:6e:09:cc:2c:2c:b3:6c:22:6e:87:18:12:d5:d1:
7c:d0:98:47:91:0b:45:29:d1:94:10:9d:c7:ef:c7:
72:6c:09:74:67:86:49:b5:7a:35:20:cd:94:01:f7:
12:7d:11:52:28:1f:5b:4e:eb:d7:13:d7:6b:8d:20:
7c:a5:59:b0:51:26:da:72:91:9f:60:b9:7f:4a:ad:
95:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:34:08:54:FD:60:06:FA:72:BB:AB:13:11:63:9B:F6:36:3B:85:EB
X509v3 Authority Key Identifier:
keyid:49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1c:32:ce:f6:07:39:da:3e:86:ca:8d:d9:f1:37:5b:4b:26:
ed:86:79:5d:36:96:be:45:d1:3e:97:85:c5:3e:73:d1:97:d3:
78:a8:19:1d:a5:da:77:4e:c0:4b:11:00:74:b2:53:82:9b:48:
0e:4f:59:09:59:95:8e:8f:64:39:29:59:bc:61:13:1c:3a:8c:
d4:af:97:81:58:a0:cc:2d:a9:92:d4:f0:0a:69:dd:df:7f:54:
c7:6f:11:c8:d4:92:24:b3:93:6c:07:5e:d2:4d:c3:9b:83:0b:
3a:0a:8b:6b:47:7f:54:3e:f6:56:8c:ab:fa:13:63:69:db:3f:
d2:7f:70:f8:a4:d1:3f:30:80:94:43:e4:0d:83:c0:40:94:ec:
6d:7a:6d:3f:86:a0:24:33:8b:30:7d:e5:9f:51:8a:db:05:1f:
ec:62:e1:e0:b1:e9:c0:75:2e:44:d7:54:5f:ae:d0:b9:f2:3a:
1c:3f:55:dc:17:83:ef:e8:20:b6:16:c3:f9:f6:e2:d6:80:0e:
96:2a:91:a3:ae:4e:19:ea:63:38:3f:64:05:ad:c1:38:b6:6e:
7e:8a:49:e1:5d:6c:cf:ec:36:92:0e:6d:8a:52:a9:53:fa:bd:
a2:52:b5:44:c4:cc:ea:3a:96:a1:b0:0a:0b:3f:41:d8:09:a3:
b8:f8:74:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:03 2026 by rpki-client