Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
File: SeMF15ys2--_HoMrNNfAa7tfYno.mft (raw, json)
Hash identifier: kXUIjeqco4AmwK3Q+IDqWx22WRpYHfpiluex5ncKxTs=
Subject key identifier: 63:59:69:AE:B6:85:80:2F:01:95:DD:E9:B6:B2:F9:82:FB:38:4C:38
Authority key identifier: 49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A
Certificate issuer: /CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a
Certificate serial: 019D37C0F56B75FD8A03D6FD2B77275E3CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:01:25 +0000
Manifest this update: Sun 29 Mar 2026 04:01:25 +0000
Manifest next update: Mon 30 Mar 2026 04:01:25 +0000
Files and hashes: 1: Cg3-GLroUHPLqy0MDoy8qVDXjIo.roa (hash: ObFrv+qFlIMnwkBakSA2410HJwiAq/Uwxqer92VRQ5c=)
2: SeMF15ys2--_HoMrNNfAa7tfYno.crl (hash: 1EdyBgXMk7SkoyKTBr8/YSW01DzzpUrQpM6j6i8Ubv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f5:6b:75:fd:8a:03:d6:fd:2b:77:27:5e:3c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a
Validity
Not Before: Mar 29 04:01:25 2026 GMT
Not After : Mar 30 04:01:25 2026 GMT
Subject: CN=635969aeb685802f0195dde9b6b2f982fb384c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:c3:1a:6c:33:f5:ae:cb:77:07:c3:ea:72:
3b:64:3d:b5:54:af:bb:5d:28:c1:7f:7a:27:91:0c:
e9:34:02:a7:5d:6c:6d:93:b4:79:51:a3:64:91:9f:
bf:0d:e5:bb:22:4f:06:23:9d:6b:f9:72:e1:ff:80:
08:08:7a:28:83:03:11:68:dc:37:e9:6e:47:49:06:
29:78:f2:11:de:a6:54:be:ea:11:d6:fc:aa:18:53:
3d:f8:ae:ac:51:1b:aa:91:09:dc:5c:e6:eb:33:37:
e8:ea:5d:d9:25:ef:6e:68:47:e9:18:09:d3:7c:a4:
ed:0c:bc:b6:a1:43:30:7d:1b:c7:8d:e4:fe:96:67:
ce:09:5b:23:ef:f0:1d:89:13:94:6b:2d:9f:a5:cf:
7f:bd:9c:f2:50:a3:bf:53:85:67:52:0f:20:fa:a4:
58:ae:48:82:e4:da:0c:ac:52:1f:53:30:18:3f:d5:
fd:ae:50:43:a1:35:d8:d7:0a:79:ff:28:74:95:8e:
6a:37:a8:7b:b5:4f:ef:75:13:cf:f6:87:e7:ac:41:
2c:27:31:cb:76:4f:ff:c8:28:81:b7:08:85:a3:55:
62:6e:31:af:55:47:31:f7:c0:71:52:f6:71:e0:5b:
88:1c:b8:02:40:9b:11:35:13:74:75:c8:c2:bd:0d:
11:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:59:69:AE:B6:85:80:2F:01:95:DD:E9:B6:B2:F9:82:FB:38:4C:38
X509v3 Authority Key Identifier:
keyid:49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ea:5e:07:70:8d:b0:16:48:00:c8:78:19:ac:2c:20:ef:eb:
d0:1a:33:6a:3c:46:fb:6f:5e:6c:0f:7d:02:a7:18:eb:49:53:
cf:0a:b8:2f:83:ca:d1:1b:f3:82:69:b6:6b:5f:c1:a4:b5:29:
6c:97:cf:6a:db:a3:4e:d3:b1:de:3f:c4:9b:f6:9c:45:cd:a7:
6b:9d:8b:00:5a:71:f9:92:7b:14:63:9f:ff:2a:cd:d6:d9:3c:
f9:f6:df:05:b1:37:2c:86:d5:64:a8:75:79:db:61:10:55:da:
66:49:d3:e4:0f:f4:f6:c0:0d:de:6e:e6:2c:26:30:f1:ed:a5:
5b:ff:28:01:96:cf:20:64:b8:7e:aa:f3:6c:44:08:d3:27:69:
a8:a0:16:f4:c4:ab:ac:d0:84:14:e7:d1:69:42:83:0f:5c:03:
2c:f4:9e:82:18:f1:00:ab:8c:5a:92:98:f1:65:eb:3e:75:9f:
19:06:e4:c5:ee:85:6b:ce:0f:82:61:8f:b1:2d:2f:d5:99:ba:
1d:70:a6:95:1c:c6:70:70:d0:aa:ad:7c:40:69:8f:3f:81:46:
16:c7:b2:eb:2b:07:e9:6b:17:ba:5c:7c:85:47:36:0a:0c:f1:
fa:46:23:d6:3c:50:09:07:bb:d8:8a:1b:b4:68:42:e2:23:fe:
da:f1:46:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:21 2026 by rpki-client