Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
File: sejPc4YgDf2psGfbnHfTBmDXTNo.mft (raw, json)
Hash identifier: Tp2WCcHDlIYYsOSokk3JieRXfz3lAxFW6UK39RYpw/Y=
Subject key identifier: 27:94:55:A9:D3:BB:EA:A8:26:F6:21:F5:C2:14:9A:FF:71:60:01:86
Authority key identifier: B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
Certificate issuer: /CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Certificate serial: 019CAB341363821B4E16BAD22A4536957995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
Manifest number: 0D60
Signing time: Sun 01 Mar 2026 21:00:42 +0000
Manifest this update: Sun 01 Mar 2026 21:00:42 +0000
Manifest next update: Mon 02 Mar 2026 21:00:42 +0000
Files and hashes: 1: hKDjaD83iRNw9KqUmwJ4dn-wayQ.roa (hash: 10/6EyjVD8LS9DDC/nxhOd/PoDCy15V9W7b4OpC/X6g=)
2: sejPc4YgDf2psGfbnHfTBmDXTNo.crl (hash: JqKOJnozOW3sx51DGmuqXaWGN3Eb5bRJVAlFQadUado=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:13:63:82:1b:4e:16:ba:d2:2a:45:36:95:79:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Validity
Not Before: Mar 1 21:00:42 2026 GMT
Not After : Mar 2 21:00:42 2026 GMT
Subject: CN=279455a9d3bbeaa826f621f5c2149aff71600186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:bb:61:37:d7:3d:53:9f:58:18:05:03:96:
6c:d1:61:21:01:84:cc:99:ba:18:47:d3:01:6d:9a:
47:fa:af:50:d8:0f:3b:af:ef:4d:83:d8:25:0d:68:
3b:a5:b0:27:2a:ef:31:1b:41:f9:87:6e:15:a5:0a:
31:98:94:03:e8:98:1e:de:d3:54:20:ae:94:dc:6d:
b1:33:f7:75:0d:06:56:ee:9a:94:47:05:f2:af:e4:
69:3d:f4:6e:1f:f4:da:cd:ab:12:20:2e:98:bc:ea:
74:63:08:3c:f0:8c:33:45:68:45:8a:60:33:18:2d:
71:b7:fb:74:3e:9b:51:17:69:f5:10:57:06:b5:c2:
bb:ee:d3:9a:cc:6c:09:b7:20:01:4b:67:f9:bc:5e:
1f:8e:ea:20:22:e6:14:ab:e2:85:fa:41:1d:6b:84:
5d:41:fb:c9:a7:26:e7:51:bc:a9:c0:8d:0b:5e:c0:
43:6b:87:66:79:e4:25:c0:17:a3:c4:fe:07:98:2b:
14:7b:8c:f2:09:15:87:fc:a1:38:83:db:de:a6:5a:
83:28:e8:f1:91:e3:5a:2e:71:e6:de:e3:42:a1:92:
1d:e7:39:39:c7:3c:9f:43:6c:02:d6:9e:9c:0e:2b:
c9:30:21:6c:01:a0:de:a7:47:5f:b0:da:23:15:fe:
df:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:94:55:A9:D3:BB:EA:A8:26:F6:21:F5:C2:14:9A:FF:71:60:01:86
X509v3 Authority Key Identifier:
keyid:B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d5:40:46:e9:b5:e5:36:21:e4:6b:13:8e:89:ee:e4:6b:0c:
1c:88:64:62:47:5c:12:46:08:aa:c9:ad:d8:4d:f9:93:fa:d6:
27:ea:35:43:f4:8f:71:17:0c:c4:50:78:e9:83:64:6b:15:94:
75:4f:10:b5:74:2e:c6:20:a7:1e:32:de:02:ee:96:c3:e9:da:
86:7d:5e:62:7e:0a:69:38:8f:0f:fa:f8:5b:0a:33:53:6c:d0:
23:8c:00:92:a2:d7:0d:01:22:9c:a7:7a:05:6a:46:43:c0:38:
06:7b:7a:88:a6:18:87:7b:3e:b8:b4:c8:4c:89:f5:1a:20:ab:
35:b6:ea:ab:ea:58:6b:3f:aa:45:2c:aa:3d:9a:cc:1e:75:90:
f3:13:ab:c8:53:84:a1:65:77:14:46:02:9b:6b:5a:99:2b:7b:
c5:00:e0:a8:4d:e8:c9:d8:b5:1c:ff:4d:3d:59:91:e1:2b:37:
91:1e:13:9d:3d:a4:21:84:24:c4:47:4c:82:7c:27:a1:78:8a:
70:6d:a5:30:7a:3d:35:53:29:e2:03:79:90:a9:ad:b3:e1:e9:
36:7f:57:1c:eb:ea:5a:95:cf:0b:4e:c5:7a:e8:bf:d9:b3:89:
f4:0b:38:42:4b:a2:ec:45:5a:1d:03:70:f4:94:e5:e3:b5:f8:
a3:86:51:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:07 2026 by rpki-client