Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.mft
File: se4XrCBsEG7SQBvOtJJZHUVmBfg.mft (raw, json)
Hash identifier: 1kz2KG8Z63av/EwPykT47+CrHO44+ytdOZmE+qdIhGU=
Subject key identifier: C7:EC:84:20:49:5D:27:D0:1D:42:09:E8:D4:42:70:83:B6:33:CF:FF
Authority key identifier: B1:EE:17:AC:20:6C:10:6E:D2:40:1B:CE:B4:92:59:1D:45:66:05:F8
Certificate issuer: /CN=b1ee17ac206c106ed2401bceb492591d456605f8
Certificate serial: 01A10FCC9E45A3BECB2D990A5E8B0CBA9E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se4XrCBsEG7SQBvOtJJZHUVmBfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.mft
Manifest number: 0106
Signing time: Tue 06 Oct 2026 06:00:30 +0000
Manifest this update: Tue 06 Oct 2026 06:00:30 +0000
Manifest next update: Wed 07 Oct 2026 06:00:30 +0000
Files and hashes: 1: TlPz1MKXq4927Vc3_arKhGUAAcA.roa (hash: YOYsyfWYAf/3wOj2WHCnmybZslDaiohPCuzvv0FjhwU=)
2: se4XrCBsEG7SQBvOtJJZHUVmBfg.crl (hash: lTfKi79gxCs9kyaHlHNqsXcXjQUnUm54cCUldIXowls=)
3: xM1ul4upUlfNqC1LZpTiGwRaQe0.asa (hash: 2vRsqcA8DqO742FWr7CKeCb9NF5neXP8F//7xElEHqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/se4XrCBsEG7SQBvOtJJZHUVmBfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:cc:9e:45:a3:be:cb:2d:99:0a:5e:8b:0c:ba:9e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ee17ac206c106ed2401bceb492591d456605f8
Validity
Not Before: Oct 6 06:00:30 2026 GMT
Not After : Oct 7 06:00:30 2026 GMT
Subject: CN=c7ec8420495d27d01d4209e8d4427083b633cfff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c3:ed:0c:01:fc:fb:3c:4a:be:11:6d:13:f2:
4c:1b:01:7e:d6:fc:08:f4:5c:c0:8e:f3:c6:78:0a:
0e:39:30:bc:37:4b:00:e7:bb:23:b6:0a:a2:43:cb:
be:f1:45:92:05:76:74:c3:de:ac:f2:44:89:b6:2d:
dd:04:08:28:ea:dd:ae:d6:44:35:41:da:52:b2:c1:
f4:5d:d2:e0:05:20:5a:aa:fd:78:2f:1d:2a:01:cc:
3a:63:2b:6c:a9:5f:97:a2:40:6d:b5:39:a8:d6:f7:
20:19:62:8c:96:e7:08:2c:bb:19:a0:10:91:7e:1c:
32:41:f5:b8:28:8a:49:d3:b0:17:fd:21:44:ba:d4:
47:6e:d3:7a:22:2f:ff:74:43:0c:07:fc:e1:85:e4:
a0:0d:6c:29:9f:87:1f:10:0f:e2:73:1f:91:ce:38:
34:c1:be:ff:60:18:1d:b5:ac:de:04:ba:e6:cd:96:
be:1a:66:75:b7:c2:c9:3b:8b:1d:6d:b2:1e:42:4c:
3e:14:c9:b1:30:eb:a8:1c:b6:52:3d:c5:09:31:1f:
8b:6c:94:fe:cd:22:19:6d:12:bd:89:c1:da:1e:15:
bb:1f:35:bb:37:4c:ef:5b:07:99:18:9c:d7:ac:7d:
b1:26:97:44:7a:de:ac:c3:12:6f:1d:e7:d0:7b:18:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EC:84:20:49:5D:27:D0:1D:42:09:E8:D4:42:70:83:B6:33:CF:FF
X509v3 Authority Key Identifier:
keyid:B1:EE:17:AC:20:6C:10:6E:D2:40:1B:CE:B4:92:59:1D:45:66:05:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se4XrCBsEG7SQBvOtJJZHUVmBfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b3:fd:95:12:f5:47:56:1d:56:cd:d3:a4:f5:82:8b:12:e7:
53:b1:8c:ed:36:90:e7:33:54:5f:5f:c5:33:9f:58:46:72:4c:
6a:37:40:43:95:46:e2:a4:8d:32:1b:4b:ec:2a:5f:35:23:2f:
bb:fe:e7:9a:6c:3a:aa:f1:ad:ea:f2:90:d9:cc:45:61:d9:c1:
57:fe:96:5d:ca:9f:b1:48:17:bc:66:12:aa:bf:66:8a:75:dc:
3a:05:f3:d9:08:2a:b6:51:1e:e4:22:e3:af:ed:b1:ec:71:8f:
06:5e:b2:2c:4b:53:76:ff:26:a7:2b:b0:c2:ed:64:0f:8b:21:
57:bb:f9:73:a1:98:6e:0c:55:99:3a:7c:95:4b:a9:32:c7:11:
bb:b3:04:41:05:6d:56:3b:b9:3e:bc:ee:3e:b3:32:5e:cc:79:
bb:55:20:c5:ab:89:97:9e:70:2b:67:32:4b:1e:bf:70:30:dc:
ae:7a:10:de:e1:22:b8:50:c4:03:04:06:fd:18:04:f4:00:8b:
b9:d4:df:67:9f:48:62:8b:b8:fc:e8:7b:bf:d6:0b:87:68:e2:
77:e9:e5:73:9c:69:c3:4a:c0:5e:f8:5a:3a:9a:89:4a:9f:79:
11:cb:8b:e9:1b:45:bb:86:b5:44:e6:a2:a6:28:35:28:c6:1f:
f2:85:6a:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEPzJ5Fo77LLZkKXosMup6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZWUxN2FjMjA2YzEwNmVkMjQwMWJjZWI0OTI1OTFkNDU2
NjA1ZjgwHhcNMjYxMDA2MDYwMDMwWhcNMjYxMDA3MDYwMDMwWjAzMTEwLwYDVQQD
EyhjN2VjODQyMDQ5NWQyN2QwMWQ0MjA5ZThkNDQyNzA4M2I2MzNjZmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMPtDAH8+zxKvhFtE/JMGwF+1vwI
9FzAjvPGeAoOOTC8N0sA57sjtgqiQ8u+8UWSBXZ0w96s8kSJti3dBAgo6t2u1kQ1
QdpSssH0XdLgBSBaqv14Lx0qAcw6YytsqV+XokBttTmo1vcgGWKMlucILLsZoBCR
fhwyQfW4KIpJ07AX/SFEutRHbtN6Ii//dEMMB/zhheSgDWwpn4cfEA/icx+Rzjg0
wb7/YBgdtazeBLrmzZa+GmZ1t8LJO4sdbbIeQkw+FMmxMOuoHLZSPcUJMR+LbJT+
zSIZbRK9icHaHhW7HzW7N0zvWweZGJzXrH2xJpdEet6swxJvHefQexgZYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMfshCBJXSfQHUIJ6NRCcIO2M8//MB8GA1UdIwQY
MBaAFLHuF6wgbBBu0kAbzrSSWR1FZgX4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2U0WHJDQnNFRzdTUUJ2T3RKSlpIVVZtQmZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80ZWE4NzMtZmFmYy00MGQxLWFhZWIt
YTEzOTc4NzBiMTY2LzEvc2U0WHJDQnNFRzdTUUJ2T3RKSlpIVVZtQmZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80ZWE4NzMtZmFmYy00MGQxLWFhZWItYTEzOTc4NzBiMTY2
LzEvc2U0WHJDQnNFRzdTUUJ2T3RKSlpIVVZtQmZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLP9lRL1
R1YdVs3TpPWCixLnU7GM7TaQ5zNUX1/FM59YRnJMajdAQ5VG4qSNMhtL7CpfNSMv
u/7nmmw6qvGt6vKQ2cxFYdnBV/6WXcqfsUgXvGYSqr9minXcOgXz2QgqtlEe5CLj
r+2x7HGPBl6yLEtTdv8mpyuwwu1kD4shV7v5c6GYbgxVmTp8lUupMscRu7MEQQVt
Vju5PrzuPrMyXsx5u1UgxauJl55wK2cySx6/cDDcrnoQ3uEiuFDEAwQG/RgE9ACL
udTfZ59IYou4/Oh7v9YLh2jid+nlc5xpw0rAXvhaOpqJSp95EcuL6RtFu4a1ROai
pig1KMYf8oVqig==
-----END CERTIFICATE-----
Generated at Tue Oct 6 14:47:19 2026 by rpki-client