Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
File: 2SEUWCD-zu889VJwMmxeEkPyQ1U.mft (raw, json)
Hash identifier: 0AI77TlUj7SFdAbF62GrdcJ/y8Gel1pE9zteeMKa/e4=
Subject key identifier: 13:DC:9B:F2:24:09:69:78:4C:21:E6:02:F0:82:B5:C5:C9:6B:41:EF
Authority key identifier: D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
Certificate issuer: /CN=d921145820feceef3cf55270326c5e1243f24355
Certificate serial: 019DA454257E70975C1BB8A60C6C50D36F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
Manifest number: 141A
Signing time: Sun 19 Apr 2026 06:01:11 +0000
Manifest this update: Sun 19 Apr 2026 06:01:11 +0000
Manifest next update: Mon 20 Apr 2026 06:01:11 +0000
Files and hashes: 1: 2SEUWCD-zu889VJwMmxeEkPyQ1U.crl (hash: BaEIDvNzh6d7aQs00w7c/WbaoYD2vVGos5/QGJtG6Ww=)
2: i9hMEuJaBfT7lcapiz_ahkSHzcg.roa (hash: fw1KAABJZ7dzQA1QjS2gjeHAVGrrtjSeZ6MepK2bPQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:25:7e:70:97:5c:1b:b8:a6:0c:6c:50:d3:6f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d921145820feceef3cf55270326c5e1243f24355
Validity
Not Before: Apr 19 06:01:11 2026 GMT
Not After : Apr 20 06:01:11 2026 GMT
Subject: CN=13dc9bf2240969784c21e602f082b5c5c96b41ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1c:ba:ec:5d:ef:dd:2d:bb:64:29:19:c3:29:
a8:ac:9d:e1:c6:17:2d:f0:67:96:d3:e4:ff:61:75:
54:48:65:f0:c7:70:ec:c6:c2:0d:cc:cc:93:d7:b1:
73:fe:5c:8f:ac:77:5c:7f:8e:54:57:a8:8d:7e:09:
6b:12:7a:26:b5:65:a6:f3:33:40:89:02:f5:d5:ea:
3a:d3:7d:f9:c6:b1:9b:39:d0:90:e9:e9:39:c8:f3:
75:2e:1d:c1:31:88:ef:d9:fa:6a:89:9e:bc:b1:9d:
97:42:9c:e6:43:23:81:1e:45:d2:8e:44:cf:49:0a:
12:21:97:83:67:ac:de:57:13:05:14:fa:93:ac:3e:
bf:8b:d0:2c:4e:1a:88:e2:ab:e3:44:0e:29:c8:56:
93:43:75:2f:58:23:eb:8c:43:bf:d7:49:5a:c4:72:
1c:30:3a:a9:07:e2:bf:e5:75:ff:af:a5:15:57:72:
65:20:bf:2d:96:f5:ac:10:2c:d5:96:1c:b3:a2:0d:
e2:f7:5a:aa:7c:9a:d5:0d:1f:5f:20:b8:84:30:ef:
48:4b:ee:a1:0a:1b:12:24:25:97:ea:93:2d:cc:39:
03:f6:f3:b0:7d:c7:9b:3d:5c:49:5c:df:fa:11:57:
2d:bb:8e:3b:0c:e3:fa:dc:d8:d2:81:6c:ec:22:95:
a8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DC:9B:F2:24:09:69:78:4C:21:E6:02:F0:82:B5:C5:C9:6B:41:EF
X509v3 Authority Key Identifier:
keyid:D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a5:11:a8:48:b9:45:c3:46:86:57:50:4e:c2:71:ab:6d:a7:
49:79:52:de:77:2b:c7:8f:49:c1:ca:88:19:1f:e5:a7:39:c5:
f4:9e:50:63:ef:b8:b8:aa:ff:19:b7:04:59:ee:2b:80:da:01:
a2:f8:33:87:e0:6c:a1:54:4c:52:ee:76:b8:b0:06:19:04:7e:
49:b1:9f:de:f4:5b:54:5d:58:58:b0:24:21:7c:5d:07:7d:5f:
f4:04:37:d1:b9:5c:c1:3b:7a:49:74:a1:fc:6f:25:41:72:c0:
13:87:68:16:16:c5:c2:19:59:8b:46:0d:4f:79:4e:a9:6c:38:
8f:56:d0:c8:8a:4a:69:0b:3a:db:30:fb:9c:df:e2:d4:e9:af:
d8:a6:87:fb:ad:65:57:6a:7c:2d:89:0f:91:a1:58:9c:e5:ed:
d6:3e:60:7d:96:31:95:48:10:d4:61:57:22:5d:8e:ea:70:15:
ec:e0:c6:8f:03:c0:9c:f8:7f:32:09:7a:0d:51:c0:8c:50:55:
5e:8a:4e:04:3f:8f:cb:a9:1b:34:30:43:44:10:12:64:4e:df:
f3:11:10:bd:61:ff:48:3a:0a:52:30:95:a5:6e:e5:a7:8d:73:
57:f8:e8:08:c9:b2:c9:98:eb:bc:21:88:16:8e:49:21:f3:9d:
ed:73:1a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:46:29 2026 by rpki-client