Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
File: Us7uLW16UMkkmdoaIfKrt6KndMg.mft (raw, json)
Hash identifier: G0HFosVVUUVISJSaee7u4gO4wDnxkSEwhA3cLzS7tyM=
Subject key identifier: 2A:E1:A2:C6:7A:6C:97:99:E3:F1:8B:DE:F3:61:54:05:C8:A9:DA:F9
Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Certificate serial: 01A0DD609E0EB9AB2CF02E5204E4FB33D9D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
Manifest number: 0F10
Signing time: Sat 26 Sep 2026 11:01:31 +0000
Manifest this update: Sat 26 Sep 2026 11:01:31 +0000
Manifest next update: Sun 27 Sep 2026 11:01:31 +0000
Files and hashes: 1: 00K95uzAVC-As-Iyho8vnUOQDZ8.roa (hash: kfLM/YtWZzFLfCP3ajHs0k6ce1lVF3pDxYNFKvjlQcg=)
2: Us7uLW16UMkkmdoaIfKrt6KndMg.crl (hash: YlR0TiOIT4H05zZgAz6eTBmfDHJXhsO246IkywXNI3c=)
3: ei8OTREn63voSBE5nxK-2OquN1c.roa (hash: rtdm6RL7c+SJK/SooK4jKjSilqnAkSqbJlBiuodfm0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:9e:0e:b9:ab:2c:f0:2e:52:04:e4:fb:33:d9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8
Validity
Not Before: Sep 26 11:01:31 2026 GMT
Not After : Sep 27 11:01:31 2026 GMT
Subject: CN=2ae1a2c67a6c9799e3f18bdef3615405c8a9daf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8b:0c:0b:55:3d:6e:b7:d0:d8:fb:f4:2d:0d:
f7:ed:d7:db:1c:b4:a1:98:18:16:16:a4:af:cf:64:
7c:da:e5:84:de:b7:ec:ba:44:35:a5:86:58:61:b6:
d0:f2:e8:97:19:0e:4a:91:20:ce:1f:cd:34:e3:23:
76:c2:3b:cd:04:49:eb:74:1b:71:4d:c7:ed:dc:ed:
91:b6:47:50:a0:e2:ba:e5:b5:81:ac:ff:ba:97:70:
c8:b9:52:5b:54:c8:df:ef:01:75:1b:8d:e6:b6:cc:
76:16:97:92:2c:0e:55:c8:16:01:3f:c0:90:51:05:
1d:87:73:d3:e7:64:d8:90:49:41:81:3a:04:d4:eb:
8d:2b:12:80:28:af:ea:14:dd:93:70:97:42:3e:a7:
09:fe:34:5c:b9:67:77:6c:95:d1:f3:60:12:d4:59:
b3:32:22:dc:fc:8a:7b:e5:2c:4f:fb:13:70:92:f1:
dc:a1:99:42:57:15:5a:71:e3:2e:30:3e:d9:04:92:
24:e8:03:2f:0e:f9:59:09:e9:15:53:b2:ef:7c:ef:
95:dc:ba:e7:a0:3c:ed:71:95:33:86:3a:46:ef:a8:
b8:aa:b1:fd:3c:90:53:69:2f:8c:7b:31:cc:87:aa:
c2:7e:0a:3a:ea:3e:0d:22:e3:7f:34:a4:de:97:76:
67:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E1:A2:C6:7A:6C:97:99:E3:F1:8B:DE:F3:61:54:05:C8:A9:DA:F9
X509v3 Authority Key Identifier:
keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:35:e0:bc:61:59:6a:73:b2:99:3f:08:de:ee:05:65:5d:ef:
22:c2:38:24:54:6a:77:ec:21:cb:f5:72:d4:be:2c:53:29:31:
17:09:d4:39:fb:0f:8b:5b:59:68:bb:05:d9:67:75:05:26:33:
6d:89:7a:86:e6:85:6b:9d:4c:51:93:4a:55:18:ab:b5:8a:7f:
53:b5:60:3c:cd:f8:3f:f3:1a:4c:8e:23:c6:de:80:05:2a:ab:
2c:fd:25:52:c3:a6:24:e8:42:0c:d2:01:be:7a:ef:7a:11:f6:
85:cb:89:7c:92:ad:5a:14:9e:fe:15:c1:81:64:67:bb:f9:ac:
07:30:bb:2e:3c:ea:ac:06:5e:e2:b9:0c:65:f3:02:24:04:d9:
9a:35:ec:17:35:f5:75:07:39:84:84:14:ae:67:39:c9:1d:2d:
1e:e1:16:91:9e:b9:b2:12:a7:4c:8d:12:c2:0f:c9:15:aa:a7:
5d:86:ff:ce:63:06:93:7c:e9:fe:b6:d5:ae:98:6c:b8:4a:25:
97:04:0d:28:08:6c:26:26:f7:74:e7:01:c7:79:8b:09:3d:9b:
6d:71:6d:15:94:b7:ce:71:1c:57:15:1d:16:0f:71:4a:9f:4a:
60:30:2c:11:75:a8:85:07:9b:47:fa:93:c4:33:31:aa:0b:44:
b7:40:e5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:13:37 2026 by rpki-client