Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
File: sEAqOILi-MUlQrB73sCypQ1ZgNs.mft (raw, json)
Hash identifier: kb6fUjusdynBdRsvKm8mUqHUH453Ec8oh6GydDS+bJw=
Subject key identifier: CB:FB:34:8C:C1:B4:A4:F3:5C:FA:61:03:C7:10:3B:B3:4C:47:31:52
Authority key identifier: B0:40:2A:38:82:E2:F8:C5:25:42:B0:7B:DE:C0:B2:A5:0D:59:80:DB
Certificate issuer: /CN=b0402a3882e2f8c52542b07bdec0b2a50d5980db
Certificate serial: 019CADC7DFAB1DC447E317A63594B17752FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
Manifest number: 1120
Signing time: Mon 02 Mar 2026 09:01:23 +0000
Manifest this update: Mon 02 Mar 2026 09:01:23 +0000
Manifest next update: Tue 03 Mar 2026 09:01:23 +0000
Files and hashes: 1: sEAqOILi-MUlQrB73sCypQ1ZgNs.crl (hash: jKVmL3ugHTvhBvm2VUWaJvC15cFtzRh1yIvw9nPULhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:df:ab:1d:c4:47:e3:17:a6:35:94:b1:77:52:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0402a3882e2f8c52542b07bdec0b2a50d5980db
Validity
Not Before: Mar 2 09:01:23 2026 GMT
Not After : Mar 3 09:01:23 2026 GMT
Subject: CN=cbfb348cc1b4a4f35cfa6103c7103bb34c473152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6a:b2:6e:f3:0d:6f:2a:8a:08:6f:5b:fb:f7:
b3:ce:7d:15:e2:39:64:fd:c1:01:f9:61:79:4a:27:
a2:98:e9:d2:9a:dd:0e:96:02:3a:0e:76:0d:fe:1a:
db:3f:f4:3e:1d:fb:33:d9:15:4b:76:f0:34:00:64:
ed:1f:dc:76:1e:25:dd:1b:29:ca:e8:a5:e6:84:a1:
11:a3:2f:dc:62:43:10:49:af:ac:40:dd:18:72:20:
3c:91:f6:ff:a7:41:e1:e9:3d:7c:d0:cc:f2:50:95:
80:a8:9f:d3:31:46:6b:cc:b5:ac:20:80:6e:a6:0a:
6f:49:41:1d:66:57:ef:76:d2:40:90:ba:8e:d7:b9:
4c:6a:16:53:7e:46:8f:4c:ea:66:35:f7:c7:99:ea:
06:34:e5:cf:95:2c:47:33:e1:d0:99:56:c5:b6:5f:
b7:99:f0:31:80:7e:e8:72:7c:b5:3e:7d:ad:ab:bf:
ee:89:62:a4:b3:4a:99:92:41:a0:d5:b0:ea:b5:7d:
c4:3d:5a:d7:a9:1e:85:c2:54:0b:04:30:c6:92:83:
7c:23:e6:9a:59:e2:31:f5:9c:a6:ff:18:71:32:37:
32:24:03:8c:5b:70:3d:66:dc:1f:6d:31:f4:a6:f2:
a8:c9:35:df:76:be:34:fb:79:09:3c:0d:96:72:de:
9f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FB:34:8C:C1:B4:A4:F3:5C:FA:61:03:C7:10:3B:B3:4C:47:31:52
X509v3 Authority Key Identifier:
keyid:B0:40:2A:38:82:E2:F8:C5:25:42:B0:7B:DE:C0:B2:A5:0D:59:80:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:57:56:4c:95:3e:56:c3:63:73:f4:ba:7d:6e:11:2e:06:a4:
f5:01:1c:33:3b:d8:6c:35:f4:3f:57:f1:15:bd:4f:dd:90:e0:
5f:9d:47:42:64:26:17:41:b0:a5:49:0f:c6:04:9a:83:f5:00:
f1:ba:da:bb:c3:ca:92:05:77:23:b2:b1:53:12:cb:a6:4b:7d:
b5:dd:0c:c4:f5:11:d5:3d:21:40:dd:9f:be:b1:db:6a:93:69:
62:c8:fc:5d:2c:f6:62:6b:6c:35:a7:57:12:78:fa:34:fd:9c:
f1:3d:db:d3:52:2f:a9:60:74:53:3f:63:f5:01:84:ef:fc:c0:
d8:f5:90:0f:35:45:d9:4f:5c:b9:b1:38:aa:3f:b6:cf:e9:6b:
49:58:f5:d4:e6:11:05:4c:a6:66:f4:b7:3e:b5:57:7b:d2:2d:
ca:04:87:ef:b4:e9:cc:c2:60:91:9f:2b:04:95:46:9e:e4:ab:
83:61:f2:64:09:b3:79:6d:02:a6:a0:30:1a:4f:95:4f:d6:46:
19:28:04:e1:1f:c7:c7:74:7c:4f:bc:f2:92:fe:fe:18:43:2f:
19:ca:31:f2:13:2c:3e:73:ce:68:f5:91:f1:57:e5:5f:8c:d8:
fa:c3:2e:43:20:81:68:8e:c1:32:d5:86:c3:ce:72:63:3e:45:
40:06:ae:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:48 2026 by rpki-client