Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
File: sejPc4YgDf2psGfbnHfTBmDXTNo.mft (raw, json)
Hash identifier: OJ3RlioJs0Fqpv1aCQAVqmQrbNR4xTB79ocQLUruUhM=
Subject key identifier: C4:3B:AB:45:71:0C:08:6A:71:06:20:D6:FE:0B:E0:44:65:67:C6:B0
Authority key identifier: B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
Certificate issuer: /CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Certificate serial: 019D98BD6527C86B4E2B99D8A2BB9780C6EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
Manifest number: 0DDB
Signing time: Fri 17 Apr 2026 00:00:42 +0000
Manifest this update: Fri 17 Apr 2026 00:00:42 +0000
Manifest next update: Sat 18 Apr 2026 00:00:42 +0000
Files and hashes: 1: hKDjaD83iRNw9KqUmwJ4dn-wayQ.roa (hash: 10/6EyjVD8LS9DDC/nxhOd/PoDCy15V9W7b4OpC/X6g=)
2: sejPc4YgDf2psGfbnHfTBmDXTNo.crl (hash: A21jv4o7ZOvvqn+YthNbKdnl/7s8p3unh9UkHimZ2kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:65:27:c8:6b:4e:2b:99:d8:a2:bb:97:80:c6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Validity
Not Before: Apr 17 00:00:42 2026 GMT
Not After : Apr 18 00:00:42 2026 GMT
Subject: CN=c43bab45710c086a710620d6fe0be0446567c6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:2d:6c:20:24:09:c8:5b:53:17:54:7f:6f:
81:f8:c0:f5:c8:b7:41:0f:bb:18:2e:7f:49:04:64:
9a:ab:4c:1f:f6:4a:9f:b5:03:e6:52:15:3c:42:e9:
75:80:4f:c8:d5:b7:04:70:f4:bb:e8:51:23:43:55:
d2:3c:08:7a:cf:f4:90:48:ba:fd:3d:d1:46:04:07:
1a:82:a4:d2:87:17:4d:d2:8c:cb:d1:21:06:35:c2:
c0:e2:33:f3:c5:04:fa:e8:2c:d4:8c:e2:63:de:b2:
c0:f4:b3:35:7b:aa:ac:b7:4d:1e:af:2e:8f:c6:1d:
f8:01:35:fb:2f:29:88:df:d1:c1:2b:77:01:9f:9c:
52:48:08:3b:51:05:91:d9:c2:1f:a8:84:5f:c5:0a:
a2:34:1e:45:f8:21:55:43:57:fc:35:a0:b4:43:c2:
de:47:60:7b:c9:97:7f:1f:25:01:58:66:e9:11:ee:
e1:1d:88:35:dc:de:3d:6a:86:35:4f:14:f6:1f:9b:
11:f8:7c:c4:95:09:59:7b:ce:b4:5b:64:63:38:b9:
c3:e2:4e:28:7d:9a:8e:af:25:55:1a:c4:95:fc:a5:
2b:b6:ed:f2:50:67:5a:f1:34:f6:c2:85:f0:3b:74:
50:9a:a8:4e:ea:40:a5:98:7b:41:f2:d3:aa:83:67:
11:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3B:AB:45:71:0C:08:6A:71:06:20:D6:FE:0B:E0:44:65:67:C6:B0
X509v3 Authority Key Identifier:
keyid:B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:eb:e5:01:52:5f:3a:c9:16:73:22:0f:dd:e2:bb:2f:68:87:
98:a4:43:27:63:4f:f9:4e:b6:eb:df:e0:96:22:c2:1d:96:ee:
68:34:c0:8a:c8:f7:91:ab:06:af:4d:36:7e:58:a0:60:a5:91:
31:13:ff:71:3f:1a:99:86:5b:bf:b1:42:df:42:b5:30:d1:bf:
66:be:79:a6:3d:85:e9:30:5d:e9:c6:7a:d8:29:3a:46:c7:8e:
13:6a:19:37:50:24:61:cf:ec:16:16:da:26:5b:63:ab:f5:fb:
d0:3a:83:60:ba:99:5e:59:6d:77:83:7b:82:0a:33:03:2a:b0:
2e:d5:80:f9:54:c1:ef:96:f6:9a:f2:cc:87:c1:49:a9:3c:f8:
dd:ba:f5:48:58:d7:80:c9:ba:4d:56:df:c9:8c:f1:9b:d9:57:
34:4b:05:bf:ce:7c:e5:65:bf:31:21:77:a7:f2:28:a0:8a:7a:
af:f8:b2:6d:1a:7e:e8:90:cf:6f:7a:a7:c1:21:95:97:92:71:
ba:4a:83:d8:dd:1b:c2:54:7e:25:4a:f0:67:59:8b:a2:29:ba:
d3:a1:bb:85:87:2a:2d:c7:b7:0b:58:d7:88:aa:13:90:ed:5f:
78:8d:1d:b9:eb:2f:ed:30:92:d9:c6:c5:0f:ab:d0:af:a3:59:
ef:2d:15:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:56:20 2026 by rpki-client