Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
File: SEhV5wGTloY1rESSrXAqgkjgM-g.mft (raw, json)
Hash identifier: emhArvaKA/gLmWiHYPccKWP5mkG4C4k2e/G3Q9gwMg4=
Subject key identifier: 42:D7:27:C0:D4:62:AB:47:76:E4:1D:69:23:24:1F:16:3B:B9:5B:62
Authority key identifier: 48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
Certificate issuer: /CN=484855e70193968635ac4492ad702a8248e033e8
Certificate serial: 019D99D07D3E1B097BD0E1C56843F38F7C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 05:01:10 +0000
Manifest this update: Fri 17 Apr 2026 05:01:10 +0000
Manifest next update: Sat 18 Apr 2026 05:01:10 +0000
Files and hashes: 1: SEhV5wGTloY1rESSrXAqgkjgM-g.crl (hash: ryY7Napz+fKPRJ3+wvacHkXJNeb32d654tRSUqNni/k=)
2: hcaVaeZvXztSf4aHj-qxa48q3bE.roa (hash: ugFszP+ktrSBaKI2i2I8QwNOIyOBse0/3j0sK41gSeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:7d:3e:1b:09:7b:d0:e1:c5:68:43:f3:8f:7c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484855e70193968635ac4492ad702a8248e033e8
Validity
Not Before: Apr 17 05:01:10 2026 GMT
Not After : Apr 18 05:01:10 2026 GMT
Subject: CN=42d727c0d462ab4776e41d6923241f163bb95b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a6:15:4a:1f:c0:45:28:cc:d3:f1:3b:4a:91:
91:3f:87:64:d2:2c:3c:a8:6c:fc:09:85:a5:d2:9f:
30:2b:ba:4e:eb:ba:0e:6c:5a:9e:2f:42:81:cb:79:
75:dc:04:9f:43:e8:2a:6d:c1:57:22:0f:09:81:5e:
04:0c:05:a8:f0:98:45:4c:9e:7d:7e:c1:8a:0b:f1:
3e:e3:9b:36:9d:8b:10:2a:ba:89:87:ac:a0:f0:95:
43:06:4a:0a:73:53:f4:18:2c:a7:7a:5b:62:1a:65:
28:72:24:44:22:fd:2a:b8:32:b4:eb:6f:63:1b:6f:
12:86:bb:05:99:74:10:98:7d:7d:6e:0b:e2:3d:20:
56:8f:61:13:ef:6d:7c:d5:49:8a:e7:9a:b1:c8:70:
59:e3:96:b1:58:c0:bf:63:2e:1b:c6:a8:92:5b:25:
3b:eb:11:f9:e4:b4:d7:57:44:4d:44:e5:e4:74:01:
76:61:f2:4f:af:08:a4:44:0f:76:38:fb:ba:84:89:
06:41:7d:6f:85:f0:88:7f:4a:ca:a5:7f:14:15:d0:
d4:cb:f7:16:9f:63:cc:a7:ea:ce:2d:8e:b5:26:9d:
38:d4:61:0f:25:a3:40:90:40:0f:02:70:86:d1:55:
f2:4a:ba:4a:05:fe:fb:86:51:49:f1:91:4e:44:6b:
bb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D7:27:C0:D4:62:AB:47:76:E4:1D:69:23:24:1F:16:3B:B9:5B:62
X509v3 Authority Key Identifier:
keyid:48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:53:46:d7:32:50:82:39:ce:9a:94:43:c2:48:d5:55:a3:1d:
a3:e9:ed:3b:5a:c3:37:92:20:1d:69:fe:80:20:30:0b:d3:4a:
99:03:4f:1f:ae:c1:11:0d:a8:a5:f6:98:fc:31:91:dd:ca:fa:
17:d2:26:d4:e2:8d:a6:25:00:eb:0e:68:ab:12:e6:b8:1c:09:
31:28:f9:5a:ff:24:20:8b:5e:32:fb:d0:8c:e0:26:dc:c4:13:
41:32:6f:54:9b:db:c6:d1:11:84:04:ab:23:13:73:92:2b:61:
6e:9d:4f:e3:a8:81:6e:2b:b9:80:17:3c:34:da:9c:4f:b6:0e:
58:d6:0c:de:4f:ed:cf:72:b7:fa:ba:d8:5c:ee:f6:8d:60:8c:
2a:11:68:2a:7c:bc:62:73:0f:b2:7e:c0:e2:9b:ae:f2:82:bf:
24:a9:0d:6d:88:b2:32:38:78:de:b4:68:7e:8b:bb:b4:74:0d:
be:1f:76:9f:e8:80:84:4e:8d:66:89:85:93:cb:2b:57:5c:f9:
e5:78:4a:91:cc:47:23:c5:8a:ef:ce:4b:81:2a:d9:14:ee:c5:
0c:8b:93:29:fd:79:88:de:d5:08:9d:9a:01:42:7e:2c:e8:47:
b7:2c:7f:da:8b:8a:40:f8:a0:01:b6:8b:8b:08:45:b5:22:b2:
cf:7c:1e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:46:59 2026 by rpki-client