Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
File: Us7uLW16UMkkmdoaIfKrt6KndMg.mft (raw, json)
Hash identifier: t9OU3z5KNhwVUdWYqT6bR5A0WE8lXp5EFEfSfrkMBRE=
Subject key identifier: E2:1C:E7:10:B7:7D:FA:C4:F3:83:B0:71:7D:71:74:5A:CF:FB:91:47
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial: 019F932404E54269FAEAE782A8B8CB8D8FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
Manifest number: 0E65
Signing time: Fri 24 Jul 2026 08:00:38 +0000
Manifest this update: Fri 24 Jul 2026 08:00:38 +0000
Manifest next update: Sat 25 Jul 2026 08:00:38 +0000
Files and hashes: 1: 00K95uzAVC-As-Iyho8vnUOQDZ8.roa (hash: kfLM/YtWZzFLfCP3ajHs0k6ce1lVF3pDxYNFKvjlQcg=)
2: Us7uLW16UMkkmdoaIfKrt6KndMg.crl (hash: 6D0y4z+vFETnt+yv1gnZvcakWpTDHJlPApyYYDxvIkI=)
3: ei8OTREn63voSBE5nxK-2OquN1c.roa (hash: rtdm6RL7c+SJK/SooK4jKjSilqnAkSqbJlBiuodfm0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:04:e5:42:69:fa:ea:e7:82:a8:b8:cb:8d:8f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Validity
Not Before: Jul 24 08:00:38 2026 GMT
Not After : Jul 25 08:00:38 2026 GMT
Subject: CN=e21ce710b77dfac4f383b0717d71745acffb9147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:fb:8e:8d:5f:f6:f7:a8:66:71:e5:43:9f:
35:e9:34:63:ec:4f:12:12:1d:44:e3:63:7c:67:9d:
b8:0e:1c:d8:2e:9b:cf:35:a0:58:04:09:11:49:46:
79:cf:b3:97:1f:5b:2b:fb:20:9f:43:ed:a4:33:68:
6d:c5:fe:26:52:e0:99:c7:19:25:c3:16:cf:6b:35:
22:6b:9d:aa:24:60:58:19:c3:3f:38:ea:be:32:8f:
c5:49:b5:19:12:c3:ea:d4:23:1f:60:12:10:88:77:
b9:f8:55:36:af:6a:ba:a9:03:5d:02:0f:72:2f:8d:
47:24:ba:81:22:48:e6:e2:3c:31:e5:33:10:18:78:
f1:7d:5a:7b:8a:78:80:8a:e8:8d:db:b4:c6:02:e3:
d9:d7:56:b6:bd:70:f9:cc:5e:0d:47:6a:6f:72:e2:
02:08:0e:36:63:f9:4a:43:69:8e:c7:c1:0a:9b:23:
f5:03:d7:0b:51:f3:94:01:dd:65:05:27:93:4f:bf:
6c:10:6d:d3:fe:37:97:8a:e8:6d:7d:75:0f:44:ef:
1d:d4:51:30:a5:d8:1d:86:d3:6a:3d:2b:3f:83:50:
33:a6:87:a4:59:78:af:a8:1b:c5:7d:ca:b7:4e:0b:
58:a5:06:f8:49:56:5e:18:17:df:cf:13:9a:f4:c0:
df:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1C:E7:10:B7:7D:FA:C4:F3:83:B0:71:7D:71:74:5A:CF:FB:91:47
X509v3 Authority Key Identifier:
keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:f1:ef:56:38:fb:7b:88:5f:ab:d5:05:a1:af:c3:ce:98:1c:
b3:e1:97:ca:5f:35:df:86:7f:98:e9:90:dd:8e:78:22:12:39:
61:07:4e:59:fe:a6:2a:80:7e:ab:4d:72:f2:a8:5b:1a:73:29:
fb:07:43:73:d3:b0:62:1c:27:fc:4f:56:74:9b:44:3c:97:07:
28:c6:98:2b:2e:b5:15:98:61:22:51:5e:d4:bf:81:db:52:1b:
0f:cc:1f:58:38:14:cd:87:2e:42:4e:95:03:f6:c3:41:7c:ff:
90:93:1e:29:47:fe:05:a0:a7:87:93:53:a3:d8:90:5b:35:1d:
1f:da:ad:2a:f7:4d:6b:ec:ab:1a:b7:05:76:36:50:02:42:6e:
70:8f:82:80:99:a1:18:b2:bf:1c:30:13:57:d0:85:f7:00:d0:
9f:cd:c8:45:30:26:cb:c8:a4:33:bc:1d:21:bd:6e:8b:f9:ba:
a8:ac:ef:a3:ce:23:ff:b1:1b:54:06:85:b7:f2:31:0b:94:ff:
50:4c:85:3c:f4:df:34:a5:4c:64:f3:5d:99:e3:13:67:60:8b:
a0:f7:35:26:e7:65:b2:04:fd:01:e5:26:ac:a0:ec:dc:53:8c:
28:6a:98:0b:19:ed:6e:88:9f:40:08:94:8d:81:0b:b8:29:f5:
41:07:c8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:53 2026 by rpki-client