Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.mft
File: se4XrCBsEG7SQBvOtJJZHUVmBfg.mft (raw, json)
Hash identifier: 25reY3eJfMpB+dDTLbPl7OFYUEXBT3YqMxbRABE++II=
Subject key identifier: 4E:43:2B:AF:F9:BD:78:9F:14:8C:9B:11:9E:42:20:57:18:23:01:B7
Authority key identifier: B1:EE:17:AC:20:6C:10:6E:D2:40:1B:CE:B4:92:59:1D:45:66:05:F8
Certificate issuer: /CN=b1ee17ac206c106ed2401bceb492591d456605f8
Certificate serial: 019FA898F4408B8A6276CF8512BB8672DF66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se4XrCBsEG7SQBvOtJJZHUVmBfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:24 +0000
Manifest this update: Tue 28 Jul 2026 12:00:24 +0000
Manifest next update: Wed 29 Jul 2026 12:00:24 +0000
Files and hashes: 1: TlPz1MKXq4927Vc3_arKhGUAAcA.roa (hash: YOYsyfWYAf/3wOj2WHCnmybZslDaiohPCuzvv0FjhwU=)
2: se4XrCBsEG7SQBvOtJJZHUVmBfg.crl (hash: VfugcN5+qwzAu2q8YCVDg4tQK2jeuOrAdpXRowrvvGA=)
3: xM1ul4upUlfNqC1LZpTiGwRaQe0.asa (hash: 2vRsqcA8DqO742FWr7CKeCb9NF5neXP8F//7xElEHqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/se4XrCBsEG7SQBvOtJJZHUVmBfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:98:f4:40:8b:8a:62:76:cf:85:12:bb:86:72:df:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ee17ac206c106ed2401bceb492591d456605f8
Validity
Not Before: Jul 28 12:00:24 2026 GMT
Not After : Jul 29 12:00:24 2026 GMT
Subject: CN=4e432baff9bd789f148c9b119e422057182301b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:c2:47:b4:92:67:2c:37:29:a0:d4:b4:3f:
73:f6:72:2d:28:9e:7e:95:dc:79:24:8e:56:eb:1b:
8f:4f:8c:54:dc:c6:94:d5:c4:0a:f1:45:58:52:2d:
4c:a7:23:22:8d:4e:d7:c8:94:10:51:88:a4:34:6d:
36:51:53:d0:aa:5f:56:f1:2f:1e:71:6f:16:c3:63:
d6:3e:e3:03:5d:b8:a7:da:ae:6f:26:8a:eb:16:4a:
de:51:48:f8:3a:f9:c9:5a:c5:24:42:0e:ca:55:96:
3b:2d:0e:ce:28:55:20:16:64:a6:50:42:5a:3f:0a:
1e:04:42:ac:76:1e:55:3f:4b:7b:d0:f9:69:68:14:
13:62:72:42:e5:c1:46:d4:c3:3c:3b:47:23:e9:bd:
52:04:6a:94:e3:9b:83:b2:e9:35:da:cb:12:d9:2c:
3b:f8:12:2e:a3:5d:3a:28:e4:f0:2f:b8:c7:fa:42:
33:6f:4b:75:92:27:a8:94:19:d6:82:97:f8:13:ac:
17:98:25:5f:ed:96:37:0f:e2:4d:0d:54:25:9c:b6:
75:2b:4f:bf:6c:80:10:36:50:24:e5:5e:7e:03:d5:
62:a6:ad:b9:5f:b4:36:27:58:78:01:1a:7c:e0:0a:
62:e4:a8:4a:80:ef:15:06:74:6f:4c:0d:57:a2:a3:
d6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:43:2B:AF:F9:BD:78:9F:14:8C:9B:11:9E:42:20:57:18:23:01:B7
X509v3 Authority Key Identifier:
keyid:B1:EE:17:AC:20:6C:10:6E:D2:40:1B:CE:B4:92:59:1D:45:66:05:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se4XrCBsEG7SQBvOtJJZHUVmBfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ea873-fafc-40d1-aaeb-a1397870b166/1/se4XrCBsEG7SQBvOtJJZHUVmBfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:bd:3f:99:bb:9e:55:88:03:e3:78:d1:f4:aa:d2:e9:a7:36:
54:d7:af:87:bf:ba:fb:da:e5:e1:aa:00:23:78:42:f1:db:90:
81:c7:a9:da:f6:42:6e:73:e9:02:61:69:97:b4:75:8e:47:c4:
7a:85:6f:ec:68:35:fc:09:4a:15:56:2d:30:d3:46:cf:ee:f8:
95:8b:ca:c3:2a:31:54:72:2a:9e:83:7c:93:8d:04:e4:61:40:
a6:82:93:2b:6d:35:c7:bc:9d:c9:8b:be:84:75:6c:98:83:4b:
c6:70:22:5b:ff:89:3b:5e:48:b1:9f:37:ff:b3:e2:c5:f0:b5:
3e:08:cc:c7:9c:2d:e7:b6:8d:5b:5a:fc:d7:4f:e9:d8:bc:0c:
f6:1a:72:47:69:4a:99:98:fb:a7:86:cd:fd:49:aa:30:4a:f7:
fc:9d:c7:68:2d:02:12:bc:ea:78:e6:dd:93:6d:5e:08:b5:ac:
3b:af:b4:08:12:5a:63:bc:a9:17:c6:9f:d7:e1:bd:6b:67:fe:
ee:c5:eb:1e:25:ca:42:5c:73:7e:d0:68:f5:62:6c:63:5e:7a:
60:b6:1c:52:7e:3a:a6:58:d9:a2:f8:06:fc:88:59:17:ad:a8:
a8:82:63:de:a7:a4:3c:38:84:85:e9:c7:8e:e8:f5:11:9d:ee:
57:97:7c:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omPRAi4pids+FEruGct9mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZWUxN2FjMjA2YzEwNmVkMjQwMWJjZWI0OTI1OTFkNDU2
NjA1ZjgwHhcNMjYwNzI4MTIwMDI0WhcNMjYwNzI5MTIwMDI0WjAzMTEwLwYDVQQD
Eyg0ZTQzMmJhZmY5YmQ3ODlmMTQ4YzliMTE5ZTQyMjA1NzE4MjMwMWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIDCR7SSZyw3KaDUtD9z9nItKJ5+
ldx5JI5W6xuPT4xU3MaU1cQK8UVYUi1MpyMijU7XyJQQUYikNG02UVPQql9W8S8e
cW8Ww2PWPuMDXbin2q5vJorrFkreUUj4OvnJWsUkQg7KVZY7LQ7OKFUgFmSmUEJa
PwoeBEKsdh5VP0t70PlpaBQTYnJC5cFG1MM8O0cj6b1SBGqU45uDsuk12ssS2Sw7
+BIuo106KOTwL7jH+kIzb0t1kieolBnWgpf4E6wXmCVf7ZY3D+JNDVQlnLZ1K0+/
bIAQNlAk5V5+A9Vipq25X7Q2J1h4ARp84Api5KhKgO8VBnRvTA1XoqPWnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5DK6/5vXifFIybEZ5CIFcYIwG3MB8GA1UdIwQY
MBaAFLHuF6wgbBBu0kAbzrSSWR1FZgX4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2U0WHJDQnNFRzdTUUJ2T3RKSlpIVVZtQmZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80ZWE4NzMtZmFmYy00MGQxLWFhZWIt
YTEzOTc4NzBiMTY2LzEvc2U0WHJDQnNFRzdTUUJ2T3RKSlpIVVZtQmZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80ZWE4NzMtZmFmYy00MGQxLWFhZWItYTEzOTc4NzBiMTY2
LzEvc2U0WHJDQnNFRzdTUUJ2T3RKSlpIVVZtQmZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbL0/mbue
VYgD43jR9KrS6ac2VNevh7+6+9rl4aoAI3hC8duQgcep2vZCbnPpAmFpl7R1jkfE
eoVv7Gg1/AlKFVYtMNNGz+74lYvKwyoxVHIqnoN8k40E5GFApoKTK201x7ydyYu+
hHVsmINLxnAiW/+JO15IsZ83/7PixfC1PgjMx5wt57aNW1r810/p2LwM9hpyR2lK
mZj7p4bN/UmqMEr3/J3HaC0CErzqeObdk21eCLWsO6+0CBJaY7ypF8af1+G9a2f+
7sXrHiXKQlxzftBo9WJsY156YLYcUn46pljZovgG/IhZF62oqIJj3qekPDiEhenH
juj1EZ3uV5d8jw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:42:22 2026 by rpki-client