Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
File: se1mdqhXWQtjZbdsVYDXD8qNuqY.mft (raw, json)
Hash identifier: QP2GxNKheaxys295uEF0EYYyZYEr02QY9yhf5KdTsGg=
Subject key identifier: F1:52:F3:8F:00:18:E0:7D:30:03:F8:93:C9:0D:A9:F8:33:E7:5A:21
Authority key identifier: B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
Certificate issuer: /CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Certificate serial: 019D9A3EE6A49B5ABAE7C9AF348A4171E58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
Manifest number: 0E1D
Signing time: Fri 17 Apr 2026 07:01:46 +0000
Manifest this update: Fri 17 Apr 2026 07:01:46 +0000
Manifest next update: Sat 18 Apr 2026 07:01:46 +0000
Files and hashes: 1: Fve8k_OZNdjUkZnIqvSmNlcd0Lg.roa (hash: UBZQn4YtqRGaTXDZC6SHIOianNxT0DmdDIUesthKpiY=)
2: se1mdqhXWQtjZbdsVYDXD8qNuqY.crl (hash: hPUcRViINc5iJUc4Q1fE5kibKZV1PyzlQn6pxLaZfXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e6:a4:9b:5a:ba:e7:c9:af:34:8a:41:71:e5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Validity
Not Before: Apr 17 07:01:46 2026 GMT
Not After : Apr 18 07:01:46 2026 GMT
Subject: CN=f152f38f0018e07d3003f893c90da9f833e75a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e1:7e:9f:02:69:26:c5:fc:5c:38:52:54:1a:
1e:21:6c:d5:57:c8:16:43:fb:ab:3c:40:99:55:a0:
c4:a4:fe:30:2a:90:20:53:1d:7d:c4:e2:1d:00:d1:
ce:ba:0d:1d:8c:ce:f2:61:4d:33:45:16:d0:42:6c:
fb:d2:1a:af:d2:ff:e5:57:d0:d0:69:31:d1:0d:34:
24:c0:20:13:f0:43:d7:61:60:31:6f:53:1e:6a:b0:
54:83:ca:9e:4c:4f:06:c7:26:45:5a:8e:ef:c3:72:
7d:60:d8:ba:90:68:ea:db:46:03:fe:10:88:1d:00:
90:85:03:51:3b:7b:59:89:c8:50:7a:5c:9d:71:44:
a7:71:ea:4c:c6:ed:c6:14:76:da:62:03:69:52:dd:
5a:e5:5e:e3:88:68:de:2a:02:10:9e:c0:30:13:66:
2c:f3:64:82:4e:af:40:88:e3:b2:b2:aa:b0:13:2f:
f2:f7:e1:58:28:34:af:8f:e3:55:9d:a7:3b:0d:85:
81:27:7d:e3:7b:e1:2d:28:86:ca:92:ce:ff:9b:2c:
8f:cf:3f:ed:22:43:f7:aa:01:38:c1:c6:2c:2e:66:
a3:4b:94:57:d6:c9:23:96:ab:b6:60:2f:7c:f4:88:
3a:dc:9b:dc:61:76:4d:b5:3e:59:1c:80:e7:7a:01:
0e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:52:F3:8F:00:18:E0:7D:30:03:F8:93:C9:0D:A9:F8:33:E7:5A:21
X509v3 Authority Key Identifier:
keyid:B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:81:5b:2a:7d:80:75:42:42:af:88:04:cd:fd:0c:d3:71:f0:
f3:09:62:e9:e4:4c:52:e5:9e:6b:df:a2:f3:ba:c8:47:6c:38:
28:8e:af:c7:b7:23:01:db:9b:b7:2c:66:f4:37:3b:c6:2e:21:
97:66:1e:5c:6d:7c:f2:f9:7b:c2:43:fd:5f:7c:4a:98:90:72:
b3:95:21:32:d1:15:28:a8:db:95:fc:f8:bb:96:b7:9b:7e:b3:
ce:01:31:e1:12:16:20:3d:52:69:a6:1d:0c:3a:14:fb:a9:c9:
66:fe:27:8d:61:7e:09:74:de:56:0d:a1:61:24:c5:3c:40:f9:
d2:47:0d:18:e5:a4:28:41:5b:4f:3d:26:e2:46:69:2d:45:04:
a6:8f:04:2d:a2:c7:1d:00:6c:46:1a:c9:2c:d5:88:61:18:71:
8d:97:ca:2c:e8:65:db:12:e9:81:09:18:bd:9f:73:a1:cb:81:
24:d6:5a:ed:67:b4:aa:9a:12:85:11:73:25:2e:b8:b0:3b:8e:
de:d0:0c:11:fe:7d:3c:4e:e0:29:2c:c4:05:a5:bb:8d:cc:2d:
7d:f8:e8:a8:72:24:bb:98:25:b4:03:f7:6d:79:3a:a4:c9:9d:
0a:a2:8e:e6:7e:7e:83:b1:58:0c:4c:47:fe:df:77:64:31:00:
e0:31:e4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:20:14 2026 by rpki-client