Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
File: Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft (raw, json)
Hash identifier: bug9VOuAuw4ARu8Mr0AfnhmVYa+0fj93s/MgdwtwqYo=
Subject key identifier: 80:02:8B:75:C2:C2:50:9B:66:6F:2A:73:E9:CF:E2:99:78:36:4E:34
Authority key identifier: 49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
Certificate issuer: /CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Certificate serial: 019CAD229FD2F61F55645190BD70F18A25D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
Manifest number: 03EF
Signing time: Mon 02 Mar 2026 06:00:53 +0000
Manifest this update: Mon 02 Mar 2026 06:00:53 +0000
Manifest next update: Tue 03 Mar 2026 06:00:53 +0000
Files and hashes: 1: 8T3acIHbQX8fyEJ5mkqPUIJ9D9Q.roa (hash: WRS8pShL0FkQT8FXDUYCk0fdYgGKAZRSkFncH1hi1cg=)
2: Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl (hash: /Oto7dA+sldXR6wqBxY8dTHykAlNuQD297ThSEhYhy4=)
3: SzzN2_utFSlvLUqgvOUxnZyU9VQ.roa (hash: eMVjdl3Mgz85B4WMxfHAJkDWuvHzhFy3/1YUmCiTiuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:9f:d2:f6:1f:55:64:51:90:bd:70:f1:8a:25:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Validity
Not Before: Mar 2 06:00:53 2026 GMT
Not After : Mar 3 06:00:53 2026 GMT
Subject: CN=80028b75c2c2509b666f2a73e9cfe29978364e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6f:53:dc:2a:f2:c6:11:3c:c9:4a:05:13:e8:
57:0c:2b:86:40:f8:3f:0a:73:52:09:00:22:ef:17:
a0:c1:6c:3a:3a:a3:c5:4c:ce:a9:06:a0:c7:43:c9:
4b:b3:bc:39:a6:50:13:22:bf:f3:52:53:81:80:e3:
68:79:b9:80:42:19:bf:dd:17:4c:92:aa:d2:06:93:
09:c5:c0:53:11:b7:f7:9d:ff:f8:b2:a9:91:39:5c:
8d:d4:58:6a:90:86:1c:50:8a:f6:25:84:c6:90:3e:
77:db:db:f3:cb:6b:65:c4:ea:0f:8a:72:53:19:02:
3a:81:00:c5:f3:ba:06:69:77:52:83:5d:a4:e5:ca:
2a:c3:be:87:b3:53:13:01:90:b5:c5:58:e9:ab:35:
92:e4:5b:1e:49:7c:bc:77:15:55:ef:0c:0c:6a:2d:
d7:53:06:f0:b9:4a:dc:6d:5b:16:67:ec:3a:92:ed:
01:5c:27:96:bb:f4:87:43:4a:1e:27:97:aa:6a:9e:
37:c2:c6:98:59:43:83:95:44:94:57:5b:c3:8c:93:
ee:e9:fc:07:03:c9:e8:19:b5:b7:55:37:b8:c1:5f:
1c:4c:2f:f9:fb:21:3c:6b:d6:e5:86:8f:37:58:bd:
d8:2c:ab:e9:1e:d7:6e:59:be:33:5e:04:41:bc:62:
c5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:02:8B:75:C2:C2:50:9B:66:6F:2A:73:E9:CF:E2:99:78:36:4E:34
X509v3 Authority Key Identifier:
keyid:49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f6:0f:33:71:d7:cd:41:e6:dd:8d:0d:98:6a:80:27:73:ac:
f9:43:8c:7c:b7:3b:9b:db:67:0c:67:48:88:7f:19:f1:a0:72:
59:f7:3f:17:85:aa:13:1b:e6:9a:b2:29:11:d1:ba:1e:2f:27:
b8:10:ec:7d:34:a2:71:5f:aa:d4:c8:ae:2c:39:b4:88:92:89:
5a:6f:4d:69:93:c2:0d:30:f8:72:bc:b7:d3:9b:57:49:4b:a5:
ae:a0:06:69:c9:7f:a9:e7:47:f2:45:06:cf:bc:46:37:99:55:
1d:d2:5e:2c:0f:7d:2d:e6:8a:e2:c9:4e:a4:20:6b:85:31:0c:
66:7b:49:da:52:91:4f:df:99:2e:a3:34:e5:27:47:b5:9c:f2:
4a:80:3e:40:57:11:59:7e:55:60:e5:4b:96:15:93:4a:69:98:
1b:c8:98:04:04:38:86:2a:8e:83:43:f3:9b:16:86:e5:c7:34:
1a:13:bc:e1:aa:b0:ac:27:07:e6:97:44:be:7f:d6:44:70:12:
be:15:a4:f0:29:94:c1:5a:b0:26:36:45:d8:90:3b:0f:34:8c:
bf:82:a1:f4:2d:6b:76:39:1e:26:c7:e2:ed:e9:10:89:72:1d:
85:a0:7c:db:08:a0:94:69:ff:d9:36:20:f2:62:ae:34:7c:47:
3d:fa:ee:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:32 2026 by rpki-client