Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
File: seUmQF1FF0JHmU_u2y1-XdQHk90.mft (raw, json)
Hash identifier: MJdD1LlMdYScX7Snq4u+1gG0cMQ/YhNPrum15K88U64=
Subject key identifier: 22:65:CB:40:10:54:D1:A9:C8:37:CC:F8:EA:93:0A:A5:0F:81:8B:DE
Authority key identifier: B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
Certificate issuer: /CN=b1e526405d45174247994feedb2d7e5dd40793dd
Certificate serial: 019D9850271A3CBB8BEF460476B394E72275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
Manifest number: 170F
Signing time: Thu 16 Apr 2026 22:01:22 +0000
Manifest this update: Thu 16 Apr 2026 22:01:22 +0000
Manifest next update: Fri 17 Apr 2026 22:01:22 +0000
Files and hashes: 1: FR5mDqbGIKqjwVgFy82Hy4k-jQA.roa (hash: xCDxKjtGAFZwt/JvcP8eufx5NKzwBYPZJM1T0oTN85o=)
2: seUmQF1FF0JHmU_u2y1-XdQHk90.crl (hash: Nvxeit1AFbWoYgPOgaKzakWVoaIPwPFxPoKuYduywxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:27:1a:3c:bb:8b:ef:46:04:76:b3:94:e7:22:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e526405d45174247994feedb2d7e5dd40793dd
Validity
Not Before: Apr 16 22:01:22 2026 GMT
Not After : Apr 17 22:01:22 2026 GMT
Subject: CN=2265cb401054d1a9c837ccf8ea930aa50f818bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0a:ed:2e:95:4d:5a:90:e5:13:df:00:36:47:
52:fb:d1:ef:2d:27:cc:29:39:d4:7d:04:42:e7:4d:
82:f1:1f:28:9b:77:90:d1:ea:f0:58:d7:8b:65:ba:
6f:83:07:93:3a:80:24:b2:b7:3e:04:a6:0b:47:7e:
18:41:dd:a3:0b:67:e4:6b:ad:fa:b9:6a:8f:74:6c:
81:5b:14:69:6c:8a:d1:e3:51:a8:ee:be:1d:66:1a:
7b:de:0e:28:d8:18:44:63:3c:0e:14:38:1b:7f:43:
f7:20:00:5a:2e:22:48:1a:44:97:0b:0a:c3:cd:9f:
d1:b5:46:52:35:c9:ae:a3:bb:f1:75:5d:43:a1:d2:
aa:31:03:37:0a:da:58:7a:7c:90:5e:f1:e7:79:64:
0f:3f:2d:b6:0c:d0:d8:08:a8:8a:82:28:86:8f:30:
3c:1d:19:1d:17:6b:61:bd:74:dd:80:46:4b:73:7c:
eb:df:c6:f7:79:00:85:1b:f8:58:ad:79:d8:fb:74:
e7:2c:f9:e2:7b:dc:01:44:dd:26:0a:3d:d4:11:f7:
50:fe:4c:aa:23:2d:da:b4:48:91:f0:36:16:eb:90:
c7:db:8f:9f:5c:b1:a5:c2:8d:eb:62:11:43:01:1f:
00:ef:6f:5d:e6:c6:59:c8:19:91:f1:20:a3:14:c3:
8d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:65:CB:40:10:54:D1:A9:C8:37:CC:F8:EA:93:0A:A5:0F:81:8B:DE
X509v3 Authority Key Identifier:
keyid:B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f6:fd:dc:19:9b:40:bc:9a:66:ea:3f:23:14:95:e5:e2:a6:
52:e2:e1:af:31:6a:73:b7:b1:ae:e4:7f:11:0c:41:d5:11:db:
db:46:2a:12:38:90:d0:13:e0:52:28:2c:50:5b:31:8e:ce:02:
83:fd:8e:27:fd:32:a1:81:4f:e1:d6:16:7f:5f:8e:cd:23:f8:
84:43:11:98:cb:71:bf:26:e4:13:67:67:44:31:de:e4:24:cd:
f9:ac:de:93:7e:ad:b2:97:af:1d:30:b8:9a:01:2c:3d:ed:bf:
25:e4:20:1c:b1:c1:02:5a:3b:fe:05:70:9f:ad:6e:94:75:6a:
b2:50:c4:ea:97:01:cd:7a:1b:1a:c2:21:90:51:86:4d:9d:0c:
1e:84:2b:fe:f1:eb:09:a8:50:a3:17:fa:f1:45:bd:c3:f4:7f:
07:3c:a9:92:4a:98:fe:a8:92:3c:5c:27:45:a8:3b:57:53:2b:
78:cb:17:27:70:60:c4:48:b1:8a:bd:23:d7:7c:c9:b8:08:78:
fe:9a:3c:86:90:ff:5b:5c:0a:8b:a2:01:42:6d:33:ad:33:4d:
10:c1:ab:22:ff:ba:21:3b:1a:59:ed:54:a1:83:5e:72:f5:5f:
8d:bd:ca:bb:70:d2:d8:a1:e0:79:71:ec:1f:88:eb:4c:2d:9e:
76:7e:e2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:30:42 2026 by rpki-client