Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
File: se1mdqhXWQtjZbdsVYDXD8qNuqY.mft (raw, json)
Hash identifier: X9SxHSrcxdZ0FGJ5vVQXG4aANGkveMkYKOXquNjgbXQ=
Subject key identifier: 2E:A5:4C:06:71:ED:7C:3F:BA:72:4C:CD:0F:DF:79:9F:3A:20:81:85
Authority key identifier: B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
Certificate issuer: /CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Certificate serial: 019CACB54C312A57A35F520E74766F84FE08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
Manifest number: 0DA2
Signing time: Mon 02 Mar 2026 04:01:28 +0000
Manifest this update: Mon 02 Mar 2026 04:01:28 +0000
Manifest next update: Tue 03 Mar 2026 04:01:28 +0000
Files and hashes: 1: Fve8k_OZNdjUkZnIqvSmNlcd0Lg.roa (hash: UBZQn4YtqRGaTXDZC6SHIOianNxT0DmdDIUesthKpiY=)
2: se1mdqhXWQtjZbdsVYDXD8qNuqY.crl (hash: 7mP/Z80lBWYnlQecYFtbo3ekbXXY07izZjE3edB/4BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:4c:31:2a:57:a3:5f:52:0e:74:76:6f:84:fe:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Validity
Not Before: Mar 2 04:01:28 2026 GMT
Not After : Mar 3 04:01:28 2026 GMT
Subject: CN=2ea54c0671ed7c3fba724ccd0fdf799f3a208185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:2a:78:4a:2b:b8:84:ff:09:ba:e7:e1:8a:04:
9e:b6:b9:f6:32:2d:37:53:6e:af:5e:8d:a1:b9:fb:
ef:a5:9d:36:ef:1b:ca:12:36:2f:8c:19:9e:21:08:
c0:b1:ec:ae:2a:88:11:9c:10:75:d2:9c:a8:40:75:
8b:15:2c:6a:27:3c:68:61:32:f1:81:92:be:6b:78:
e1:96:df:8d:54:fe:24:6a:e7:23:60:e9:39:b5:84:
72:32:1a:94:1d:db:64:ba:20:c8:f2:c6:98:57:71:
19:dd:b4:7a:75:20:ea:31:10:cc:83:87:8b:36:e6:
5e:63:83:33:8f:ca:bd:5f:eb:56:7f:dd:7d:63:f0:
5b:24:a1:56:3a:8a:e4:cc:bd:d7:f3:d9:d3:81:9b:
ae:79:ce:1b:0d:47:b9:5c:9f:d7:03:a7:8b:b5:ab:
0f:eb:a8:b9:a7:2a:b3:37:60:07:c9:7d:b1:4f:66:
c0:74:0b:06:c9:fc:28:8d:16:68:ac:33:66:ca:b5:
ac:f0:f0:1b:fe:19:e5:e1:43:70:fa:88:93:f7:58:
6e:5c:50:29:a6:1a:eb:ff:02:d9:af:30:d7:b9:1d:
d0:7b:37:a9:a7:65:b5:a6:a0:57:52:26:90:b3:eb:
4a:76:3b:83:31:cf:15:b3:c4:79:b1:44:db:f3:02:
75:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A5:4C:06:71:ED:7C:3F:BA:72:4C:CD:0F:DF:79:9F:3A:20:81:85
X509v3 Authority Key Identifier:
keyid:B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:36:4c:08:88:85:06:a4:8f:ba:5d:f0:a7:5e:b0:5e:bd:a2:
41:d7:a4:ea:d1:41:05:ed:d8:37:6e:43:89:b5:74:81:e2:96:
82:4b:3a:c7:5a:45:b2:ea:1e:ad:37:90:2e:91:73:e7:f2:e9:
8a:bd:fd:60:58:29:a5:a4:77:07:29:19:1c:9b:b4:f6:2e:02:
68:f4:df:9d:2e:6a:d8:47:95:13:3c:3d:df:88:54:96:38:6f:
fc:43:eb:42:a2:d4:fb:88:9a:3d:2e:02:6f:64:19:89:a4:64:
0c:eb:e8:57:f9:eb:19:9b:d4:fd:e0:99:c8:c1:b5:fe:9f:02:
80:bf:11:db:e1:6f:4e:d3:f0:ea:66:78:91:2d:52:39:59:08:
95:05:cb:eb:3f:10:05:a3:ab:0c:0f:ef:1d:34:cb:c4:0c:3a:
8a:f8:6e:11:ce:da:04:51:4e:b6:a6:5f:07:3d:17:ac:f4:6e:
4a:a7:ad:9c:7e:2c:98:d4:9e:b1:f6:41:fa:21:01:82:a3:e2:
f1:f1:fc:99:01:7c:ea:00:24:c4:88:ab:f1:2b:1e:e7:17:86:
0a:18:d9:52:8d:da:88:05:db:cc:32:32:53:08:42:74:d3:10:
ca:fc:d1:47:2f:99:ea:95:44:f5:7f:41:e5:48:59:b3:f5:64:
64:aa:f9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:18 2026 by rpki-client