Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
File: seUmQF1FF0JHmU_u2y1-XdQHk90.mft (raw, json)
Hash identifier: kj6BrJRw+B/uoaLgp+TkUsZzGbxMtacxCe3JMAcvavA=
Subject key identifier: 00:E3:F2:77:42:AE:E8:EF:CA:72:B4:BB:0D:A7:8E:00:99:4C:A0:C6
Authority key identifier: B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
Certificate issuer: /CN=b1e526405d45174247994feedb2d7e5dd40793dd
Certificate serial: 019CAAC5FE555FD554EC69ED6788DBA90891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
Manifest number: 1694
Signing time: Sun 01 Mar 2026 19:00:28 +0000
Manifest this update: Sun 01 Mar 2026 19:00:28 +0000
Manifest next update: Mon 02 Mar 2026 19:00:28 +0000
Files and hashes: 1: FR5mDqbGIKqjwVgFy82Hy4k-jQA.roa (hash: xCDxKjtGAFZwt/JvcP8eufx5NKzwBYPZJM1T0oTN85o=)
2: seUmQF1FF0JHmU_u2y1-XdQHk90.crl (hash: zIwINh9C3GNa8Knx3AQ23+gg2W8KecnNvXkPk17v9/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c5:fe:55:5f:d5:54:ec:69:ed:67:88:db:a9:08:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e526405d45174247994feedb2d7e5dd40793dd
Validity
Not Before: Mar 1 19:00:28 2026 GMT
Not After : Mar 2 19:00:28 2026 GMT
Subject: CN=00e3f27742aee8efca72b4bb0da78e00994ca0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:0b:f4:03:7d:dd:50:6d:a5:28:8a:a6:1b:
69:0e:f7:2a:e8:8c:9e:58:ec:89:fa:be:51:4e:91:
cc:6e:28:c1:8b:27:86:fa:f8:0e:d7:e8:2e:c8:c0:
62:ab:3f:0a:9d:f7:ed:02:f5:64:4d:96:03:90:8c:
2b:2d:db:86:4e:11:27:31:2d:7e:72:57:69:a0:6a:
71:05:77:14:75:48:98:97:50:36:24:6d:35:04:e0:
34:2b:d5:4b:aa:c1:4a:b9:9a:50:64:ed:4b:24:bf:
45:c7:23:94:84:0f:7a:6e:60:cb:57:ed:30:72:23:
12:27:29:0d:80:14:50:7c:a1:1d:40:d7:98:b6:f4:
ff:8d:55:80:20:2e:10:bc:ab:22:67:90:f5:2b:7e:
a9:13:f5:e3:49:56:ea:c9:70:a2:29:96:b7:3c:9b:
21:5e:88:bc:ec:cc:93:3d:55:3a:d9:9d:fc:d6:35:
71:a2:67:ed:aa:0f:85:e6:41:15:85:ec:a4:06:00:
4a:a2:d0:56:04:88:ee:4b:d6:be:c0:13:2d:10:41:
6e:b1:37:02:56:c2:2e:9d:89:31:84:f5:83:44:ff:
9f:ad:2f:c5:1e:90:ec:60:32:91:ca:67:18:69:29:
6f:8e:30:82:31:57:f3:f9:4e:80:84:a0:4d:b2:c1:
70:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E3:F2:77:42:AE:E8:EF:CA:72:B4:BB:0D:A7:8E:00:99:4C:A0:C6
X509v3 Authority Key Identifier:
keyid:B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:68:53:26:84:5b:0d:7b:b9:3c:52:95:b2:3e:62:f3:dc:0a:
52:d3:0b:89:9d:dd:a3:29:73:2d:09:27:46:58:2e:91:9b:f3:
b1:1a:de:4a:35:18:6f:5b:b2:ca:c0:97:5a:dd:e8:4f:a1:ac:
ed:c9:8c:c0:1e:6e:85:bc:9e:f6:10:a0:6b:44:ac:ad:b3:eb:
f5:58:ad:52:bf:38:6f:c5:97:10:26:f4:79:33:2c:a2:59:47:
06:56:f5:4a:27:45:98:fb:17:6c:5f:b9:1b:09:f1:32:6b:d0:
6c:90:b2:88:88:99:8c:51:eb:04:8c:81:45:03:36:df:1d:ba:
eb:ac:0f:0d:a3:6b:64:7a:b8:5d:58:e7:d2:f9:c7:99:82:68:
d2:a8:64:bb:55:0a:ed:3e:6b:33:56:be:36:a5:a4:c9:83:d8:
86:09:92:c1:64:68:8d:23:3e:68:dd:05:f9:19:16:65:2f:e9:
c6:fd:96:dc:97:b4:3e:f8:9c:52:05:51:b8:32:23:aa:cd:eb:
48:6a:45:36:c6:7b:43:44:6a:ab:e9:2a:12:69:21:3a:7a:f1:
8a:5b:8f:51:41:3f:0b:08:20:05:15:e9:d0:a8:26:75:2d:bb:
c1:0e:c8:4b:94:db:36:ef:7e:6e:ff:a2:de:49:2d:e8:23:46:
2f:e5:7c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:30 2026 by rpki-client