Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
File: seWdsb2vITytIQJfd4-slhj9TpE.mft (raw, json)
Hash identifier: i8sW1fz5ctKICwcJSvHUUYU2GoHE+XmsRD59jQ5gd9Q=
Subject key identifier: ED:2C:12:22:FC:91:30:5F:9D:B8:9F:AE:F0:45:FC:BD:F3:60:DF:85
Authority key identifier: B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
Certificate issuer: /CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Certificate serial: 019E344F02674141F94E53853AA6A45A773C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
Manifest number: 08C7
Signing time: Sun 17 May 2026 05:00:53 +0000
Manifest this update: Sun 17 May 2026 05:00:53 +0000
Manifest next update: Mon 18 May 2026 05:00:53 +0000
Files and hashes: 1: AfKCe3eoQWEy1uxfoPuR6eANwYY.roa (hash: 91ThPj8ugGh8/5I3Q1tQOs17cu6H9LI8ziMSoHRM8QQ=)
2: VDZj_D0mJdmuFpACF6pwxY8L5ps.roa (hash: SB8GonjijdreEO57BgHYG/lJRJLCZOlEr7Hgg460VeY=)
3: seWdsb2vITytIQJfd4-slhj9TpE.crl (hash: jRCKg2usDPCYSvNF2O+rXzzR57NrlfCKm1g4v44MDQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:34:4f:02:67:41:41:f9:4e:53:85:3a:a6:a4:5a:77:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Validity
Not Before: May 17 05:00:53 2026 GMT
Not After : May 18 05:00:53 2026 GMT
Subject: CN=ed2c1222fc91305f9db89faef045fcbdf360df85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:66:92:0b:d9:9d:5b:d8:9b:bd:71:c8:b8:
3d:34:3a:0e:ac:74:ae:65:a0:6f:03:49:13:76:90:
19:4d:5e:ab:cd:59:ca:c0:3e:a3:ba:3e:24:b2:9a:
9f:36:60:7f:7e:f9:5a:ed:9e:71:e9:34:a6:d1:19:
30:f8:d0:29:d9:cd:37:5e:11:76:fb:0a:1e:3e:93:
5f:e2:3d:31:41:be:f1:2f:60:4f:1d:be:9d:bb:bf:
22:2d:be:2c:49:94:6b:7f:ca:53:c1:09:d2:5b:67:
1e:9d:25:e0:59:bf:d6:fc:7b:18:fd:0d:f2:11:85:
33:73:f4:d1:37:09:b0:24:ba:05:e3:8d:f2:7c:64:
60:69:37:c1:68:a1:ee:63:e7:55:6a:38:35:af:91:
a1:fe:19:3f:19:da:9f:c8:2a:fc:7c:a7:fe:eb:e2:
a2:f9:74:2a:20:7a:7b:09:94:76:83:40:6d:3b:a8:
15:1b:b4:64:f5:6f:6f:7c:40:86:af:f6:54:10:39:
fb:10:2a:e6:c1:05:f5:50:b3:3a:0e:1d:f5:75:dd:
78:56:10:6b:1a:24:f0:79:a9:38:34:cc:5c:7d:22:
de:9b:cc:b1:b4:d7:3b:b9:3b:64:94:fb:87:84:fd:
7b:fb:6d:dd:41:31:95:32:c1:c4:9c:18:52:50:51:
bc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2C:12:22:FC:91:30:5F:9D:B8:9F:AE:F0:45:FC:BD:F3:60:DF:85
X509v3 Authority Key Identifier:
keyid:B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0f:e7:a8:ae:4e:4e:bf:65:3b:21:7c:fe:57:cb:86:0a:e1:
cb:3a:34:4d:6e:3d:a5:ba:67:14:1e:71:cd:47:02:3c:88:53:
69:18:80:dd:75:23:04:ab:b5:b2:f4:43:bd:73:ee:c3:8b:5a:
82:d5:e8:63:eb:cf:48:a7:4c:9f:e5:d0:03:4f:43:b0:c8:99:
f1:a9:19:91:80:c9:18:ca:e6:5d:e1:1c:97:1b:79:d5:c4:8b:
96:d4:88:14:b1:e5:aa:1f:f3:45:9a:ed:a0:6e:90:95:02:92:
91:1c:0c:65:4c:2d:81:5c:c9:ee:1a:82:88:0d:ca:e3:8c:67:
6e:e8:fe:6e:b5:2a:f4:37:17:53:87:88:04:9a:3f:12:18:96:
9d:51:c7:cb:2f:8e:94:13:f2:b2:95:40:96:3d:62:3a:9b:47:
a2:20:04:4f:79:55:8d:5e:5a:19:8c:8b:8b:c5:6f:4f:d3:6d:
1b:08:35:4b:00:43:64:0d:6e:0f:8d:e2:1e:48:10:7f:5c:39:
0d:42:a1:3b:84:bf:f1:d6:45:a9:33:51:ae:8d:4c:c9:fe:d7:
a0:d1:1c:ad:68:32:5c:e0:2a:52:a1:5e:86:9c:d7:19:68:fc:
f3:9d:cb:2c:54:91:eb:3e:05:54:b2:cf:8b:2e:26:ec:da:de:
97:b3:90:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 07:22:08 2026 by rpki-client