Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.mft
File: se4XrCBsEG7SQBvOtJJZHUVmBfg.mft (raw, json)
Hash identifier: zfJtJZ1YQzCDe/8S2OnESRUWeFKWHS57fDkntlj6JqE=
Subject key identifier: E1:3C:45:A8:35:CF:AA:C5:B4:FF:36:C9:26:48:C0:98:70:78:98:47
Authority key identifier: B1:EE:17:AC:20:6C:10:6E:D2:40:1B:CE:B4:92:59:1D:45:66:05:F8
Certificate issuer: /CN=b1ee17ac206c106ed2401bceb492591d456605f8
Certificate serial: 01A130A1C061C4980643649AA0DA3DA5AE3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se4XrCBsEG7SQBvOtJJZHUVmBfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.mft
Manifest number: 0117
Signing time: Mon 12 Oct 2026 15:01:09 +0000
Manifest this update: Mon 12 Oct 2026 15:01:09 +0000
Manifest next update: Tue 13 Oct 2026 15:01:09 +0000
Files and hashes: 1: TlPz1MKXq4927Vc3_arKhGUAAcA.roa (hash: YOYsyfWYAf/3wOj2WHCnmybZslDaiohPCuzvv0FjhwU=)
2: se4XrCBsEG7SQBvOtJJZHUVmBfg.crl (hash: 0N96GSUTNbdvHZKXns2h1QnhSWAja0Hap5RDtz0bcJQ=)
3: xM1ul4upUlfNqC1LZpTiGwRaQe0.asa (hash: 2vRsqcA8DqO742FWr7CKeCb9NF5neXP8F//7xElEHqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/se4XrCBsEG7SQBvOtJJZHUVmBfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a1:c0:61:c4:98:06:43:64:9a:a0:da:3d:a5:ae:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ee17ac206c106ed2401bceb492591d456605f8
Validity
Not Before: Oct 12 15:01:09 2026 GMT
Not After : Oct 13 15:01:09 2026 GMT
Subject: CN=e13c45a835cfaac5b4ff36c92648c09870789847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:71:be:d4:fa:0e:10:60:14:2b:52:63:b5:3c:
be:58:b2:6d:32:31:1d:9f:77:24:36:2d:f3:74:46:
bf:6c:ed:50:1c:c9:19:a4:de:a3:c6:51:b4:36:7c:
3b:fa:8b:af:c7:48:35:2e:ce:08:96:8d:16:19:81:
f6:d4:6a:18:5f:13:cd:43:37:1d:8b:ff:ef:75:cb:
ae:e2:02:d5:aa:65:96:8d:fe:0f:ef:ab:21:63:da:
5d:9b:86:da:8c:fc:50:b4:7a:a0:f1:05:f9:b2:2a:
bf:40:4b:94:42:f0:71:4f:53:4b:d3:1b:be:77:79:
3c:02:5b:d7:f2:42:ab:ce:a4:5f:37:b2:85:be:7e:
31:a3:56:e8:1e:e7:87:05:a2:86:43:59:d1:06:91:
d8:02:c1:dc:be:71:da:d0:6b:29:d0:58:09:d7:4a:
0c:40:7a:b6:e6:c1:46:96:af:ce:49:f0:a6:45:a5:
80:a8:a7:1c:05:f4:67:1b:a0:2c:be:08:56:70:e6:
30:5d:1e:ab:2a:7a:63:85:f8:09:c4:43:5e:0b:e1:
4c:34:a7:8c:56:df:4e:91:d1:ac:de:00:1f:0a:77:
f3:41:9a:09:25:d3:2f:73:67:e0:11:8b:f5:4b:cc:
90:06:58:8c:96:7b:93:8d:36:fa:26:70:d8:ef:16:
ef:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3C:45:A8:35:CF:AA:C5:B4:FF:36:C9:26:48:C0:98:70:78:98:47
X509v3 Authority Key Identifier:
keyid:B1:EE:17:AC:20:6C:10:6E:D2:40:1B:CE:B4:92:59:1D:45:66:05:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se4XrCBsEG7SQBvOtJJZHUVmBfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:03:91:64:8f:34:ce:1b:24:0e:0f:f5:0b:b7:59:ac:7f:09:
95:69:a6:c7:d0:89:64:8b:d1:70:60:43:5f:44:72:09:a8:fe:
b7:41:e9:ad:58:52:78:e8:da:f7:61:42:4d:d8:15:68:94:a1:
8a:84:70:74:e8:4a:5c:67:44:64:2e:51:73:df:d9:44:cd:6e:
b6:9d:12:1e:41:9e:45:a3:50:77:ed:9a:d0:a7:b5:6e:38:37:
76:41:5c:a0:27:34:26:db:ba:b1:96:50:36:0e:d4:ca:34:1e:
38:18:a3:e8:a7:88:f5:7b:96:fb:e4:0d:14:77:5b:e6:11:91:
e3:7f:15:66:87:50:e2:c9:42:f5:fb:0c:45:d3:58:e0:2b:d8:
ba:cf:82:42:12:85:51:0d:30:3d:fd:9d:e6:b7:9c:9a:ff:14:
12:bf:8a:7a:74:b1:22:72:c4:b9:ff:cb:2e:aa:98:d2:52:75:
94:d9:4e:6d:ea:5b:f4:90:31:5f:21:9d:1c:a9:a6:dc:6a:5d:
5d:11:0c:c2:0d:d1:b6:bd:e9:fe:a5:0c:95:54:c9:c8:11:e6:
61:84:61:63:98:6b:1e:5a:95:1f:46:90:1d:cb:a8:0f:b7:5b:
55:89:6f:5d:43:6f:32:40:ca:17:b5:1c:18:33:e9:b5:cf:f4:
d8:14:68:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:44:21 2026 by rpki-client