Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
File: seUmQF1FF0JHmU_u2y1-XdQHk90.mft (raw, json)
Hash identifier: /hpXocsKUL/x3i21zGT/5UxHhSNKVvO4FGq7J/BxOLY=
Subject key identifier: 03:14:5D:7F:6A:38:13:9C:0D:89:AC:A6:67:FC:53:A4:39:62:75:F9
Authority key identifier: B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
Certificate issuer: /CN=b1e526405d45174247994feedb2d7e5dd40793dd
Certificate serial: 019D37BFF256BDD05315CEB7F365B4A5A5B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
Manifest number: 16DD
Signing time: Sun 29 Mar 2026 04:00:19 +0000
Manifest this update: Sun 29 Mar 2026 04:00:19 +0000
Manifest next update: Mon 30 Mar 2026 04:00:19 +0000
Files and hashes: 1: FR5mDqbGIKqjwVgFy82Hy4k-jQA.roa (hash: xCDxKjtGAFZwt/JvcP8eufx5NKzwBYPZJM1T0oTN85o=)
2: seUmQF1FF0JHmU_u2y1-XdQHk90.crl (hash: b91rWqDIcXUhvKTh8piDlPqZ5E/6iAkVatQ0nNqUFE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f2:56:bd:d0:53:15:ce:b7:f3:65:b4:a5:a5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e526405d45174247994feedb2d7e5dd40793dd
Validity
Not Before: Mar 29 04:00:19 2026 GMT
Not After : Mar 30 04:00:19 2026 GMT
Subject: CN=03145d7f6a38139c0d89aca667fc53a4396275f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:1b:d8:7f:0c:91:b5:a6:3b:c6:33:cb:e7:
8d:7d:47:15:f4:f5:29:b9:27:c2:f2:90:1a:07:57:
e5:3f:1a:a2:10:21:d3:a4:20:e6:07:05:fa:c1:ef:
7d:a0:13:43:9f:f7:6a:06:41:4a:77:8f:76:59:df:
f1:b2:ce:dd:18:d7:29:e7:d4:ac:13:25:76:1a:d9:
67:a9:6a:76:a0:4f:30:be:17:73:23:d7:1f:c3:14:
21:13:8b:a3:6d:27:e5:72:78:a2:27:d5:0b:b6:fb:
75:93:4c:0f:7a:62:4b:c4:81:7f:b9:7e:d1:4b:0a:
91:60:50:25:b9:45:2b:a0:a5:6b:79:33:6d:76:43:
0c:fa:b9:29:9c:8e:6f:15:34:ec:f9:d9:63:31:f8:
fa:d5:ab:80:d4:70:18:16:1d:b1:09:0d:b2:67:f7:
4b:aa:c5:9f:00:a1:30:9e:e3:b5:66:b2:6a:2c:1d:
f2:fa:8c:f5:b9:dc:2e:97:fd:1d:92:bc:09:ed:99:
3f:09:d7:93:9e:9b:48:0c:c8:5d:a5:c5:2e:0b:b3:
ad:ec:14:d0:cc:27:a7:a4:c7:ba:6c:a7:69:dc:e7:
0d:ca:02:65:c7:f3:dc:a9:f3:ed:ba:6c:81:ca:61:
cd:f2:50:07:40:2a:56:90:e1:16:a3:0b:c1:86:32:
78:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:14:5D:7F:6A:38:13:9C:0D:89:AC:A6:67:FC:53:A4:39:62:75:F9
X509v3 Authority Key Identifier:
keyid:B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6b:57:a4:7d:bf:a6:0f:6b:0e:e1:0e:01:82:db:80:da:b5:
5a:9b:f4:fc:1a:ff:11:95:89:a7:b2:c3:2c:33:bc:20:c8:90:
a7:16:d5:e3:5e:5c:71:b1:67:af:5b:9b:4f:04:4e:6e:65:17:
ef:8f:9f:8f:ce:f2:6a:a4:85:47:1c:3c:c6:e2:81:95:99:c4:
c4:1e:ef:dc:5e:54:5d:c8:75:5b:12:14:e5:be:e2:c8:5b:04:
67:23:25:f6:79:27:7f:fd:53:00:5e:ce:89:73:8e:27:aa:2e:
ff:39:10:f0:25:fa:5b:54:fc:91:4d:5f:08:f6:8d:c0:be:50:
e6:f2:6c:ff:2b:92:28:fc:83:15:8f:15:50:7c:d2:84:20:56:
ce:fc:8c:1a:c8:38:b9:35:97:6b:eb:62:75:87:2d:ad:53:51:
a5:b8:b0:d4:64:2c:31:a7:39:a3:16:fa:89:b8:95:0a:28:8f:
b4:88:a9:98:1c:65:df:d9:b6:9e:40:87:de:4f:0d:c3:a4:8b:
72:02:32:7f:89:a2:52:fe:28:0c:49:d1:57:03:f0:ab:3f:ce:
78:6d:9a:06:15:21:d2:9d:5f:a0:b2:4b:3e:0b:2e:62:5c:1a:
4f:2e:21:f4:bc:44:1a:d3:60:5a:47:8a:6b:95:78:d5:1a:da:
3f:40:83:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03v/JWvdBTFc6382W0paWyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZTUyNjQwNWQ0NTE3NDI0Nzk5NGZlZWRiMmQ3ZTVkZDQw
NzkzZGQwHhcNMjYwMzI5MDQwMDE5WhcNMjYwMzMwMDQwMDE5WjAzMTEwLwYDVQQD
EygwMzE0NWQ3ZjZhMzgxMzljMGQ4OWFjYTY2N2ZjNTNhNDM5NjI3NWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvccb2H8MkbWmO8Yzy+eNfUcV9PUp
uSfC8pAaB1flPxqiECHTpCDmBwX6we99oBNDn/dqBkFKd492Wd/xss7dGNcp59Ss
EyV2GtlnqWp2oE8wvhdzI9cfwxQhE4ujbSflcniiJ9ULtvt1k0wPemJLxIF/uX7R
SwqRYFAluUUroKVreTNtdkMM+rkpnI5vFTTs+dljMfj61auA1HAYFh2xCQ2yZ/dL
qsWfAKEwnuO1ZrJqLB3y+oz1udwul/0dkrwJ7Zk/CdeTnptIDMhdpcUuC7Ot7BTQ
zCenpMe6bKdp3OcNygJlx/PcqfPtumyBymHN8lAHQCpWkOEWowvBhjJ4fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMUXX9qOBOcDYmspmf8U6Q5YnX5MB8GA1UdIwQY
MBaAFLHlJkBdRRdCR5lP7tstfl3UB5PdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2VVbVFGMUZGMEpIbVVfdTJ5MS1YZFFIazkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8zOGI0ZGUtNjhjNC00ZGY4LTllMGMt
NDBlZTU2NDZjNzQ3LzEvc2VVbVFGMUZGMEpIbVVfdTJ5MS1YZFFIazkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8zOGI0ZGUtNjhjNC00ZGY4LTllMGMtNDBlZTU2NDZjNzQ3
LzEvc2VVbVFGMUZGMEpIbVVfdTJ5MS1YZFFIazkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAomtXpH2/
pg9rDuEOAYLbgNq1Wpv0/Br/EZWJp7LDLDO8IMiQpxbV415ccbFnr1ubTwRObmUX
74+fj87yaqSFRxw8xuKBlZnExB7v3F5UXch1WxIU5b7iyFsEZyMl9nknf/1TAF7O
iXOOJ6ou/zkQ8CX6W1T8kU1fCPaNwL5Q5vJs/yuSKPyDFY8VUHzShCBWzvyMGsg4
uTWXa+tidYctrVNRpbiw1GQsMac5oxb6ibiVCiiPtIipmBxl39m2nkCH3k8Nw6SL
cgIyf4miUv4oDEnRVwPwqz/OeG2aBhUh0p1foLJLPgsuYlwaTy4h9LxEGtNgWkeK
a5V41RraP0CDHg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:07 2026 by rpki-client