Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
File: 8SEJSHr0AKY-PLARo9VJ51H9LBg.mft (raw, json)
Hash identifier: bjv2VVyxiQhdT1WTwY4CefOpGf9g22Vetku9fd5jmA0=
Subject key identifier: 2E:1B:DE:FE:EE:52:E9:00:D4:EA:80:55:E8:26:E3:D3:77:E4:38:71
Authority key identifier: F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
Certificate issuer: /CN=f12109487af400a63e3cb011a3d549e751fd2c18
Certificate serial: 019D37C0F3EDA6077C4A9ABEAAF03FA845A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
Manifest number: 0F71
Signing time: Sun 29 Mar 2026 04:01:25 +0000
Manifest this update: Sun 29 Mar 2026 04:01:25 +0000
Manifest next update: Mon 30 Mar 2026 04:01:25 +0000
Files and hashes: 1: 8SEJSHr0AKY-PLARo9VJ51H9LBg.crl (hash: tak6mRMK0x131deDF9P/OpRKbf9TqP7lEeG+IDuhQrM=)
2: FpQImozb1WQPa7ynxxGnFSr06JI.roa (hash: ifQklYq1Q4YF5Y36wrzWjlvtYcLa+HxFkFPijteQsCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f3:ed:a6:07:7c:4a:9a:be:aa:f0:3f:a8:45:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12109487af400a63e3cb011a3d549e751fd2c18
Validity
Not Before: Mar 29 04:01:25 2026 GMT
Not After : Mar 30 04:01:25 2026 GMT
Subject: CN=2e1bdefeee52e900d4ea8055e826e3d377e43871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:86:32:a8:52:bd:3a:2a:aa:b1:0b:b4:01:be:
f7:01:74:00:8d:4a:ea:66:dd:0a:b0:b0:98:c4:76:
35:21:82:70:c7:09:d4:8e:e2:fa:b7:95:d2:35:20:
25:fc:84:5f:22:06:1a:ae:c7:92:04:70:24:d1:db:
d5:b4:b5:89:9b:59:bf:4a:53:47:fb:8c:ac:82:71:
3a:e4:ff:99:62:b4:87:4d:10:63:29:9e:c3:d2:d3:
da:4e:1d:07:a6:c3:5d:94:cf:55:8a:a4:72:20:01:
b6:b7:80:6b:0e:2b:37:12:02:12:61:42:3b:95:c9:
32:06:5b:a1:00:49:37:7c:93:14:2d:7a:92:7b:f1:
23:d2:d0:dd:b3:2f:5f:38:5f:87:60:7d:44:a1:5c:
aa:75:1c:99:88:23:06:bc:37:ec:47:85:88:38:e0:
00:a9:23:8f:23:f1:93:b4:cd:5f:09:c5:40:a6:9a:
89:5a:44:a1:a2:66:a7:70:bf:6b:5e:63:99:09:2d:
f8:7e:7f:99:51:89:a6:22:45:3b:3d:ee:de:86:1f:
82:98:92:cd:54:2e:66:b9:3a:9f:dc:62:27:f3:6e:
e7:e6:0f:f8:04:65:c6:bb:3a:37:f9:b5:5f:f8:7d:
cb:0e:09:1f:0a:5d:21:17:73:91:42:ed:73:78:de:
4f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1B:DE:FE:EE:52:E9:00:D4:EA:80:55:E8:26:E3:D3:77:E4:38:71
X509v3 Authority Key Identifier:
keyid:F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e1:1a:26:f1:af:4c:36:99:eb:21:54:ca:b6:34:a2:4b:ec:
ee:55:33:8d:cd:bd:45:47:75:65:ba:82:26:6a:68:1e:c7:c1:
9f:f4:34:85:b2:c8:70:f6:28:c2:4f:0e:33:82:34:f1:b3:40:
b1:cf:8d:3b:06:4e:ad:f5:88:c6:fe:dd:e3:ae:54:02:f2:55:
93:bd:77:3a:0a:9e:3c:76:56:89:5d:f6:b2:f7:64:06:76:ee:
11:40:4c:2a:ac:27:d4:11:72:d5:39:c8:bd:f2:d0:59:fa:63:
69:f3:ba:19:6d:ec:2d:c7:8b:b6:c8:0b:01:9d:87:9e:83:39:
62:7e:ac:1b:f8:57:83:a5:16:5b:5c:56:c9:8f:d6:04:8e:65:
61:c8:8f:0c:a8:6b:f2:93:b5:75:4e:48:e4:81:27:d5:98:26:
a5:81:e9:38:95:7b:f1:db:2e:2f:4b:a6:13:bf:07:82:30:52:
d0:ea:7b:c1:d0:c8:16:d7:d5:00:6a:6e:53:ea:14:09:8d:6c:
dd:0e:af:99:54:29:f3:e4:fb:4a:59:fe:01:d8:83:2f:cd:6d:
4c:51:64:ca:5b:8a:9e:ff:0f:31:e0:b1:db:23:35:0e:bc:55:
83:65:85:05:d8:41:50:df:67:06:14:cd:eb:af:14:d9:2f:5f:
18:44:db:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:15 2026 by rpki-client