Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.mft
File: SEAyWZVCgEO12QXY0sF8MCuLNGU.mft (raw, json)
Hash identifier: muUZnDSX54xnDWHNO6zDdqZ68rCOTBu/jQmMJ4SS1vc=
Subject key identifier: DD:49:2F:59:05:6F:17:C1:19:43:DE:39:D8:05:E8:16:BB:D4:0B:1A
Authority key identifier: 48:40:32:59:95:42:80:43:B5:D9:05:D8:D2:C1:7C:30:2B:8B:34:65
Certificate issuer: /CN=4840325995428043b5d905d8d2c17c302b8b3465
Certificate serial: 019CAAFD1753703C899FDA50433C4143B81D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEAyWZVCgEO12QXY0sF8MCuLNGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 20:00:39 +0000
Manifest this update: Sun 01 Mar 2026 20:00:39 +0000
Manifest next update: Mon 02 Mar 2026 20:00:39 +0000
Files and hashes: 1: 7MZulerbD7rrnRyO5pl6nQ4UWKg.roa (hash: JvSc1wrTWV3xUt9woo6ibl9xX/CG6GvitmSt5KHe+L4=)
2: SEAyWZVCgEO12QXY0sF8MCuLNGU.crl (hash: 6ZDS8DLUEIkKo/4Y+f4yWE/p8KAooDs2O1WC6tQ9cwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SEAyWZVCgEO12QXY0sF8MCuLNGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:17:53:70:3c:89:9f:da:50:43:3c:41:43:b8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4840325995428043b5d905d8d2c17c302b8b3465
Validity
Not Before: Mar 1 20:00:39 2026 GMT
Not After : Mar 2 20:00:39 2026 GMT
Subject: CN=dd492f59056f17c11943de39d805e816bbd40b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:00:37:1d:ee:05:34:53:17:81:35:e9:ca:3c:
9a:79:a8:9d:4a:19:31:1f:e9:c9:e0:f8:a9:ae:fa:
39:83:e0:e7:67:21:bf:b6:ce:39:e1:1c:82:4d:52:
8e:fb:b9:0f:04:0d:7d:7d:42:22:af:5f:8a:85:2d:
43:6e:8b:c1:47:69:07:3b:e8:7d:3c:e3:0a:f8:84:
e4:74:86:5d:5d:63:4e:14:f7:07:bd:6f:bb:be:bc:
32:65:d5:7d:cd:5b:82:58:35:9f:12:fd:f6:fc:37:
89:17:1f:6c:9d:34:aa:ac:f6:8a:e5:94:1f:9e:55:
7a:d2:ee:38:7e:86:f6:32:33:68:ef:a9:1b:55:53:
63:99:d3:eb:57:e3:31:bd:1d:22:c0:6f:bd:7e:7b:
a8:b2:bb:41:bf:dc:bc:c1:a6:6d:9b:e1:d5:39:af:
da:2b:15:12:8a:d4:81:c1:a3:97:73:5b:7d:56:96:
2b:b5:42:6e:e1:66:92:3f:1a:fc:dd:7c:31:de:ea:
99:36:7d:ca:d0:31:30:89:74:45:95:35:16:ea:be:
f8:d9:6f:04:50:2b:e8:5b:bf:a9:d4:eb:a2:b9:c1:
16:7d:21:dc:46:4d:08:5e:4c:44:4c:34:f2:04:04:
25:a0:31:54:ea:a2:86:49:8d:87:a7:11:80:9e:12:
1b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:49:2F:59:05:6F:17:C1:19:43:DE:39:D8:05:E8:16:BB:D4:0B:1A
X509v3 Authority Key Identifier:
keyid:48:40:32:59:95:42:80:43:B5:D9:05:D8:D2:C1:7C:30:2B:8B:34:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEAyWZVCgEO12QXY0sF8MCuLNGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:70:06:76:4c:aa:86:64:f3:72:44:61:f3:f2:8a:c2:6e:c7:
ed:44:dd:6b:fd:20:ee:5e:26:3d:ea:9d:25:e9:bb:80:0d:17:
b0:b8:b9:26:21:cd:25:47:10:23:64:8c:40:45:df:09:3d:7b:
f6:42:0c:38:bc:9c:02:a1:75:11:db:c0:02:54:e8:6f:95:b7:
fe:17:bc:ed:61:1a:7f:85:71:d0:fc:fd:c4:f5:3c:43:e0:9a:
d4:af:b2:00:af:bb:e2:02:96:e8:b3:36:bc:e5:49:34:4c:ab:
e4:d1:c9:9a:01:c7:e9:a4:13:8a:dc:32:76:af:38:23:fc:ef:
bd:0b:34:e4:68:0e:ea:55:01:5a:d9:9a:6f:d8:a3:a3:dc:68:
17:48:e6:ca:ae:c2:ce:18:89:19:e6:ad:60:29:14:79:06:55:
20:f1:b3:d1:11:b0:ba:e8:71:dd:ab:2e:cd:64:02:e7:81:b0:
9d:7f:dc:63:d3:dc:c6:66:9b:8f:39:85:15:97:b8:ea:91:3b:
3e:df:15:82:0e:f1:25:ed:f6:65:b8:3f:55:91:1b:5f:10:d8:
dc:45:cd:67:af:14:27:15:2c:87:e8:ad:21:2e:5e:74:7f:00:
fa:79:71:99:df:9d:7e:b3:a1:59:66:55:10:ab:5a:9a:e7:f2:
35:c9:76:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:21 2026 by rpki-client