
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
File: seUmQF1FF0JHmU_u2y1-XdQHk90.mft (raw, json)
Hash identifier: fnY9wSSkWk4yefiwg8h6X0m8dbDGUcIdI5YLwJw4l4I=
Subject key identifier: EE:87:50:AB:9E:11:C4:D3:BE:7D:37:54:F6:44:96:61:19:BB:82:78
Authority key identifier: B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
Certificate issuer: /CN=b1e526405d45174247994feedb2d7e5dd40793dd
Certificate serial: 01A129C3C43BEBA42B95FE7F9BA36B343CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
Manifest number: 18E8
Signing time: Sun 11 Oct 2026 07:00:57 +0000
Manifest this update: Sun 11 Oct 2026 07:00:57 +0000
Manifest next update: Mon 12 Oct 2026 07:00:57 +0000
Files and hashes: 1: FR5mDqbGIKqjwVgFy82Hy4k-jQA.roa (hash: xCDxKjtGAFZwt/JvcP8eufx5NKzwBYPZJM1T0oTN85o=)
2: seUmQF1FF0JHmU_u2y1-XdQHk90.crl (hash: 2Xfrxa1otjCICLAARsr9WMoDXgeuYWJV4txo+DisWmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:c3:c4:3b:eb:a4:2b:95:fe:7f:9b:a3:6b:34:3c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e526405d45174247994feedb2d7e5dd40793dd
Validity
Not Before: Oct 11 07:00:57 2026 GMT
Not After : Oct 12 07:00:57 2026 GMT
Subject: CN=ee8750ab9e11c4d3be7d3754f644966119bb8278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:19:96:c7:53:97:ac:f7:97:e6:d2:33:32:
f8:c2:65:7a:59:b9:21:f0:4e:5d:17:67:b9:9a:61:
fe:45:03:49:b2:9a:5d:70:e0:1e:0a:93:a8:9b:94:
55:dc:4d:2f:1e:f8:04:16:03:ee:94:e8:71:94:c5:
bf:2f:c5:13:14:74:27:0a:6d:93:81:ed:34:c8:54:
16:4a:5b:91:02:63:fa:02:d0:f0:25:7d:94:4f:0b:
ea:97:da:40:d5:36:8f:4a:2f:fa:44:c5:82:82:76:
7c:8f:02:22:55:21:8d:bf:59:cf:a3:65:84:da:c9:
86:ef:0d:26:12:01:7d:79:c8:bf:74:77:48:08:44:
18:ef:8c:c2:e0:a2:76:a0:96:93:fe:c7:23:3e:10:
cd:40:98:8b:54:ec:ba:26:97:95:f9:d2:f4:ea:d9:
fb:d2:9d:5a:38:ba:32:86:da:da:78:32:51:e4:3f:
62:b3:06:77:3d:2c:70:94:eb:e3:05:e4:98:80:ce:
1f:91:0c:85:dc:d4:14:20:41:9d:aa:02:2a:2f:9b:
b9:75:82:f2:9f:61:cb:c6:3a:25:13:61:c0:ed:c2:
f4:5a:b2:42:e6:44:77:23:d0:96:24:dc:a9:01:38:
0c:b1:8f:18:94:b8:13:33:fa:65:4f:b9:04:d2:98:
fc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:87:50:AB:9E:11:C4:D3:BE:7D:37:54:F6:44:96:61:19:BB:82:78
X509v3 Authority Key Identifier:
keyid:B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:91:67:2e:3e:0a:a4:f5:dc:b3:6e:5f:5f:19:e8:d8:e7:04:
0f:90:47:6d:a9:02:17:45:79:c2:00:de:21:c3:fa:5b:d9:89:
a9:5e:06:af:21:59:d4:4e:56:0a:12:64:7a:f0:8e:ec:d6:7c:
52:72:3a:be:df:cf:05:10:48:3f:d1:3b:85:7b:05:9a:62:6c:
16:c6:72:4c:2a:3c:f9:38:01:69:83:da:54:fa:11:d8:4d:cf:
26:ed:fd:14:4b:48:54:37:16:ac:f3:fb:2c:14:d7:ac:96:ec:
89:97:e3:aa:33:35:ae:e8:31:52:3c:f2:ee:bb:0a:62:fb:aa:
5f:73:ea:04:27:f4:56:8b:e4:7e:ab:3c:60:df:5a:c9:46:1c:
c3:85:45:61:89:4d:41:d4:0a:56:e8:d7:8e:80:9b:17:a6:ae:
c6:71:72:ce:9c:b0:d6:df:a8:5e:a9:10:57:ec:ef:9e:68:fe:
5b:37:bd:f6:a5:b6:db:0e:da:9a:4e:92:f3:ea:a8:53:e8:65:
39:59:1a:cd:93:c6:aa:2f:19:7d:30:83:d8:f2:26:d6:c4:54:
76:f1:73:3e:d1:31:6e:9a:71:49:66:e5:9a:6c:4b:8f:0c:00:
73:be:be:91:98:37:4b:89:d7:75:2f:e1:a3:30:9c:af:03:f1:
44:1a:b9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:19:57 2026 by rpki-client