Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.mft
File: SeUU57fWfZM3ObUWHT1iTzwjmvk.mft (raw, json)
Hash identifier: O+ZmI9sjhlRQDvfizkx9NqG/7bGzVQ0Sq7NC3GpNl/k=
Subject key identifier: B7:AB:79:76:45:C1:82:69:C7:D7:EE:2F:3D:44:E5:73:37:A5:3D:B5
Authority key identifier: 49:E5:14:E7:B7:D6:7D:93:37:39:B5:16:1D:3D:62:4F:3C:23:9A:F9
Certificate issuer: /CN=49e514e7b7d67d933739b5161d3d624f3c239af9
Certificate serial: 019D37C045C01285744B9B5A75B470FE12EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUU57fWfZM3ObUWHT1iTzwjmvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.mft
Manifest number: 01EC
Signing time: Sun 29 Mar 2026 04:00:40 +0000
Manifest this update: Sun 29 Mar 2026 04:00:40 +0000
Manifest next update: Mon 30 Mar 2026 04:00:40 +0000
Files and hashes: 1: RWC11FuxF6WyCSPWUej-WFk1psQ.roa (hash: ZJfN6gPetaNI1Lc0UZ/KjjvXNJHtMfkmm3Opxif9RM8=)
2: SeUU57fWfZM3ObUWHT1iTzwjmvk.crl (hash: mEbs2G+M6o2+hL50Hn3ZwptoQG3vS7AiwfMrBZH22YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUU57fWfZM3ObUWHT1iTzwjmvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:45:c0:12:85:74:4b:9b:5a:75:b4:70:fe:12:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e514e7b7d67d933739b5161d3d624f3c239af9
Validity
Not Before: Mar 29 04:00:40 2026 GMT
Not After : Mar 30 04:00:40 2026 GMT
Subject: CN=b7ab797645c18269c7d7ee2f3d44e57337a53db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:56:9c:68:23:b9:26:4f:67:4b:be:c9:3c:74:
08:99:0e:f1:cd:6f:63:da:5d:4a:5a:e7:89:27:82:
e8:5b:fa:a9:07:e6:56:2e:55:a5:32:a6:10:2b:5a:
c6:3e:f5:6d:96:af:d4:0d:84:9b:fe:a0:5d:bd:ca:
a8:e6:09:fb:e1:73:71:77:db:a4:1e:24:3a:f4:29:
1b:f4:f8:97:c5:2a:c1:59:ab:7d:cd:e3:fc:b8:eb:
d6:1b:bc:75:46:c8:ff:2b:51:b8:1c:6a:57:ff:64:
49:a5:e7:2f:e8:2c:be:d7:ea:0f:23:23:aa:86:41:
73:bd:ca:76:d0:c3:2e:27:c9:0c:23:58:4e:47:80:
e5:8f:b9:c1:88:00:70:7c:0b:57:56:8e:83:d0:f1:
5c:95:ea:c3:61:bc:39:bf:5e:e4:1b:0f:b4:95:ca:
5c:d2:55:15:b9:5c:0d:07:d9:45:7a:99:b8:37:ba:
47:0f:cd:2d:0f:bf:b0:0e:12:45:ea:99:c2:4c:81:
bd:9c:52:97:b2:7d:e5:0c:17:18:b4:d2:ae:3d:a3:
c0:49:0c:1d:11:68:1b:a9:9e:80:8d:94:77:9b:8a:
ca:0f:1f:5d:f0:66:53:ec:fc:7e:43:04:61:5a:0f:
9e:ed:b7:8f:92:cf:b2:38:1b:89:4b:d2:28:c8:21:
64:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AB:79:76:45:C1:82:69:C7:D7:EE:2F:3D:44:E5:73:37:A5:3D:B5
X509v3 Authority Key Identifier:
keyid:49:E5:14:E7:B7:D6:7D:93:37:39:B5:16:1D:3D:62:4F:3C:23:9A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUU57fWfZM3ObUWHT1iTzwjmvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:34:3f:96:4e:d8:ee:e8:ee:b3:44:4d:60:81:37:09:cb:c1:
4a:63:82:17:31:70:86:9e:ee:6e:3d:fe:e1:df:f5:ce:5c:41:
97:9c:31:f8:4d:a1:8e:26:b5:9f:e5:fc:03:28:0a:a7:38:ac:
5b:06:5e:7b:ac:14:bf:72:99:45:11:16:69:97:cd:91:7a:ce:
03:08:2d:ad:ca:a5:f4:b9:d3:f8:dd:9a:32:4a:59:a2:58:27:
47:43:7c:45:2d:b0:3c:6a:23:f2:1f:3f:45:f3:ef:46:12:44:
33:7e:2d:76:01:88:fa:cb:b1:bb:c2:3b:51:00:69:46:67:73:
93:f0:1c:52:cc:7e:96:3f:78:60:8d:04:75:d6:f4:ca:72:5f:
55:57:e6:5f:80:97:4d:67:07:49:47:b4:e3:da:cb:9a:d9:f6:
c1:e6:96:54:d4:f1:a6:ba:9b:2a:e2:75:8e:a8:7f:af:5b:17:
11:30:c5:f1:f7:82:af:dc:4b:0d:a9:a5:1f:d2:81:61:93:6b:
3c:df:76:2c:46:00:56:0a:fb:3e:43:2c:c1:ad:e0:73:c0:b9:
60:7c:fa:08:fc:c1:eb:d3:7d:56:ba:05:48:d0:2c:10:27:88:
07:ad:03:6f:40:b2:d1:97:36:1c:6a:03:57:9d:2d:4e:b9:90:
95:4c:8a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:41 2026 by rpki-client