Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
File: SEhV5wGTloY1rESSrXAqgkjgM-g.mft (raw, json)
Hash identifier: wmevJYwOeAGyg89HHTylbonCeWRjwl+ShEsxTI15hKs=
Subject key identifier: D4:DB:79:86:45:70:F7:3F:9A:75:E9:AC:45:C2:78:9A:75:C7:40:30
Authority key identifier: 48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
Certificate issuer: /CN=484855e70193968635ac4492ad702a8248e033e8
Certificate serial: 019D39411BBD2665A3210897866799C63FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 11:01:01 +0000
Manifest this update: Sun 29 Mar 2026 11:01:01 +0000
Manifest next update: Mon 30 Mar 2026 11:01:01 +0000
Files and hashes: 1: SEhV5wGTloY1rESSrXAqgkjgM-g.crl (hash: s2QtAC2qoVVTdP0JKb+hd9tqcgK1QyyE0aatda+1ypE=)
2: hcaVaeZvXztSf4aHj-qxa48q3bE.roa (hash: ugFszP+ktrSBaKI2i2I8QwNOIyOBse0/3j0sK41gSeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:1b:bd:26:65:a3:21:08:97:86:67:99:c6:3f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484855e70193968635ac4492ad702a8248e033e8
Validity
Not Before: Mar 29 11:01:01 2026 GMT
Not After : Mar 30 11:01:01 2026 GMT
Subject: CN=d4db79864570f73f9a75e9ac45c2789a75c74030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:74:f6:26:4c:e7:bc:72:14:6f:7a:77:25:f7:
92:4c:33:8a:ed:ad:12:c8:0c:e6:59:88:9f:d6:4b:
f6:a8:8c:16:c6:ed:dc:b0:51:0a:a9:9e:8c:f5:d0:
1a:c3:81:3c:ed:2e:71:2f:9d:35:e9:a2:b5:ae:ca:
93:f7:bf:9e:46:64:93:99:de:d8:96:57:77:95:2a:
6a:c0:78:3a:83:d9:05:01:2e:7c:9a:b3:0b:2f:12:
73:10:d1:2c:55:4e:18:54:26:6a:e4:bd:07:47:93:
e8:2e:80:0c:dc:7c:3b:5e:ad:60:7d:2c:73:f4:6a:
c1:f8:aa:31:fc:40:8b:95:7f:30:40:53:bc:82:e8:
d5:b4:6a:24:54:71:88:98:17:ed:6f:07:a8:79:0e:
4d:bb:a5:1a:2b:e2:8a:0d:5d:d7:da:66:ba:d2:ce:
9f:55:77:20:8c:27:5e:fb:40:c2:eb:ab:1b:0a:68:
64:64:76:00:50:95:b5:b9:c2:b2:d7:d7:60:9e:df:
9c:1f:af:6a:37:33:d1:1d:bd:58:e7:03:54:b5:a3:
ff:7f:bc:f7:e6:d9:6d:b0:fc:20:6e:c1:32:5b:1c:
92:95:e7:23:39:d3:69:6e:00:f1:2f:c2:ab:b0:ed:
81:6d:67:1b:a1:1e:3e:e0:63:c9:7b:48:6b:00:89:
c1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DB:79:86:45:70:F7:3F:9A:75:E9:AC:45:C2:78:9A:75:C7:40:30
X509v3 Authority Key Identifier:
keyid:48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:56:58:30:e1:94:cf:54:a8:85:e9:65:90:c1:a9:11:53:9f:
02:0a:c4:96:98:55:65:ab:ec:c5:e2:88:99:8e:c1:72:fe:8b:
43:a2:cd:5d:68:69:a7:f9:9f:63:9b:28:64:0a:4d:34:d7:aa:
5c:41:17:87:69:4d:a2:fc:19:2f:60:23:bf:96:dd:47:ca:6d:
d2:e7:06:c5:98:da:6e:81:87:ee:44:b4:ad:f7:06:b7:b3:94:
a7:4b:51:56:dd:a1:f9:83:a2:88:89:7e:f0:07:b2:f9:3c:68:
15:6f:3f:d4:f6:98:35:0b:af:32:a3:ee:ed:53:b0:cc:c6:f8:
e0:f5:ab:22:9d:9e:cc:ac:61:b5:ec:44:4b:ff:22:8b:00:11:
a5:c7:99:41:ce:05:cc:e6:d4:2d:2e:71:3a:0f:d1:4a:4d:e0:
7e:62:9c:61:52:23:9e:68:89:c4:4b:23:f4:d0:27:1c:97:cc:
27:2f:98:56:28:e6:e9:f4:4f:22:38:eb:ce:6b:e4:fc:ad:63:
dc:97:a1:eb:43:69:b0:50:7a:63:7e:65:4c:27:db:cb:40:15:
3b:39:18:5e:a0:2f:58:64:37:9a:5f:01:1f:8d:2e:79:0e:8b:
b1:10:6b:98:2e:83:9c:33:83:d3:b7:8a:ec:bd:98:fd:33:e4:
9d:e0:cc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:31:49 2026 by rpki-client